CVE-2014-3825 The Juniper SRX Series devices with Junos 11.4 before 11.4R12-S4, 12.1X44 before 12.1X44-D40, 12.1X45 before 12.1X45-D30, 12.1X46 before 12.1X46-D25, and 12.1X47 before 12.1X47-D10, when an Applicatio...
MediumCVSS 6.8
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Juniper SRX Series devices with Junos 11.4 before 11.4R12-S4, 12.1X44 before 12.1X44-D40, 12.1X45 before 12.1X45-D30, 12.1X46 before 12.1X46-D25, and 12.1X47 before 12.1X47-D10, when an Application Layer Gateway (ALG) is enabled, allows remote attackers to cause a denial of service (flowd crash) via a crafted packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper junos | = 11.4 | No fix listed |
| juniper junos | = 12.1 | No fix listed |
| juniper junos | = 12.1x44 | No fix listed |
| juniper junos | = 12.1x45 | No fix listed |
| juniper junos | = 12.1x46 | No fix listed |
| juniper junos | = 12.1x47 | No fix listed |
| juniper srx100 | All versions | No fix listed |
| juniper srx110 | All versions | No fix listed |
| juniper srx1400 | All versions | No fix listed |
| juniper srx210 | All versions | No fix listed |
| juniper srx220 | All versions | No fix listed |
| juniper srx240 | All versions | No fix listed |
| juniper srx3400 | All versions | No fix listed |
| juniper srx3600 | All versions | No fix listed |
| juniper srx550 | All versions | No fix listed |
| juniper srx5600 | All versions | No fix listed |
| juniper srx5800 | All versions | No fix listed |
| juniper srx650 | All versions | No fix listed |
References
- 1031007 vdb-entry
- kb.juniper.net vendor-advisory