CVE-2013-4688 flowd in Juniper Junos 10.4 before 10.4R11 on SRX devices, when the MSRPC Application Layer Gateway (ALG) is enabled, allows remote attackers to cause a denial of service (daemon crash) via crafted MS...
HighCVSS 7.8
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
flowd in Juniper Junos 10.4 before 10.4R11 on SRX devices, when the MSRPC Application Layer Gateway (ALG) is enabled, allows remote attackers to cause a denial of service (daemon crash) via crafted MSRPC requests, aka PR 772834.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper junos | = 10.4 | No fix listed |
| juniper srx100 | All versions | No fix listed |
| juniper srx110 | All versions | No fix listed |
| juniper srx1400 | All versions | No fix listed |
| juniper srx210 | All versions | No fix listed |
| juniper srx220 | All versions | No fix listed |
| juniper srx240 | All versions | No fix listed |
| juniper srx3400 | All versions | No fix listed |
| juniper srx3600 | All versions | No fix listed |
| juniper srx550 | All versions | No fix listed |
| juniper srx5600 | All versions | No fix listed |
| juniper srx5800 | All versions | No fix listed |
| juniper srx650 | All versions | No fix listed |
References
- kb.juniper.net vendor-advisory
- 61124 vdb-entry