Vulnerability Name:

CVE-2014-3822 (CCN-94507)

Assigned:2014-07-11
Published:2014-07-11
Updated:2014-07-17
Summary:Juniper Junos 11.4 before 11.4R8, 12.1 before 12.1R5, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.1X46 before 12.1X46-D10, and 12.1X47 before 12.1X47-D10 on SRX Series devices, allows remote attackers to cause a denial of service (flowd crash) via a malformed packet, related to translating IPv6 to IPv4.
CVSS v3 Severity:5.9 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
CVSS v2 Severity:5.4 Medium (CVSS v2 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:C)
4.0 Medium (Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): High
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
5.4 Medium (CCN CVSS v2 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:C)
4.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): High
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
Vulnerability Type:CWE-20
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2014-3822

Source: CCN
Type: Juniper Networks Security Bulletin JSA10641
Junos: Malformed packet can cause SRX denial of service when translating traffic from IPv6 to IPv4 (CVE-2014-3822)

Source: CCN
Type: BID-68553
Juniper Junos CVE-2014-3822 Denial of Service Vulnerability

Source: SECTRACK
Type: UNKNOWN
1030560

Source: XF
Type: UNKNOWN
junos-cve20143822-dos(94507)

Source: CONFIRM
Type: Vendor Advisory
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10641

Vulnerable Configuration:Configuration 1:
  • cpe:/o:juniper:junos:11.4:-:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos:12.1:-:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos:12.1x44:-:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos:12.1x45:-:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos:12.1x46:-:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos:12.1x47:-:*:*:*:*:*:*
  • AND
  • cpe:/h:juniper:srx100:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:srx110:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:srx1400:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:srx210:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:srx220:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:srx240:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:srx3400:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:srx3600:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:srx550:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:srx5600:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:srx5800:-:*:*:*:*:*:*:*
  • OR cpe:/h:juniper:srx650:-:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/o:juniper:junos:12.1x46:d10:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos:12.1x44:d30:*:*:*:*:*:*
  • OR cpe:/o:juniper:junos:11.4:r11:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    juniper junos 11.4
    juniper junos 12.1
    juniper junos 12.1x44
    juniper junos 12.1x45
    juniper junos 12.1x46
    juniper junos 12.1x47
    juniper srx100 -
    juniper srx110 -
    juniper srx1400 -
    juniper srx210 -
    juniper srx220 -
    juniper srx240 -
    juniper srx3400 -
    juniper srx3600 -
    juniper srx550 -
    juniper srx5600 -
    juniper srx5800 -
    juniper srx650 -
    juniper junos 12.1x46 d10
    juniper junos 12.1x44 d30
    juniper junos 11.4 r11