CVE-2014-0618 Juniper Junos before 10.4 before 10.4R16, 11.4 before 11.4R8, 12.1R before 12.1R7, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on SRX Series service gateways, when used as a UAC enforce...
HighCVSS 7.8
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Juniper Junos before 10.4 before 10.4R16, 11.4 before 11.4R8, 12.1R before 12.1R7, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on SRX Series service gateways, when used as a UAC enforcer and captive portal is enabled, allows remote attackers to cause a denial of service (flowd crash) via a crafted HTTP message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper junos | = 10.4 | No fix listed |
| juniper junos | = 11.4 | No fix listed |
| juniper junos | = 12.1r | No fix listed |
| juniper junos | = 12.1x44 | No fix listed |
| juniper junos | = 12.1x45 | No fix listed |
| juniper srx100 | All versions | No fix listed |
| juniper srx110 | All versions | No fix listed |
| juniper srx1400 | All versions | No fix listed |
| juniper srx210 | All versions | No fix listed |
| juniper srx220 | All versions | No fix listed |
| juniper srx240 | All versions | No fix listed |
| juniper srx3400 | All versions | No fix listed |
| juniper srx3600 | All versions | No fix listed |
| juniper srx550 | All versions | No fix listed |
| juniper srx5600 | All versions | No fix listed |
| juniper srx5800 | All versions | No fix listed |
| juniper srx650 | All versions | No fix listed |
References
- 101864 vdb-entry
- 64769 vdb-entry
- 1029584 vdb-entry
- juniper-junos-srx-cve20140618-dos(90238) vdb-entry
- kb.juniper.net vendor-advisory