CVE-2013-4687: High severity junos os evolved vulnerability

Published Jul 11, 2013

Updated

flowd in Juniper Junos 10.4 before 10.4S14, 11.2 and 11.4 before 11.4R6-S2, and 12.1 before 12.1R6 on SRX devices, when certain Application Layer Gateways (ALGs) are enabled, allows remote attackers to cause a denial of service (daemon crash) via crafted TCP packets, aka PRs 727980, 806269, and 835593.

Affected Software

16 affected components

Juniper Junos=10.4

Juniper Junos=11.2

Juniper Junos=11.4

Juniper Junos=12.1

Juniper SRX100

Juniper SRX110

Juniper SRX1400

Juniper SRX210

Juniper SRX220

Juniper SRX240

Juniper SRX3400

Juniper SRX3600

Juniper SRX550

Juniper SRX5600

Juniper SRX5800

Juniper SRX650

Event History

Jul 11, 2013

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-4687?

CVE-2013-4687 is considered a high severity vulnerability, as it allows remote attackers to cause a denial of service by crashing the daemon.

How do I fix CVE-2013-4687?

To fix CVE-2013-4687, upgrade to the recommended Junos versions, specifically 10.4S14, 11.4R6-S2, or 12.1R6 and disable the affected Application Layer Gateways.

What software versions are affected by CVE-2013-4687?

CVE-2013-4687 affects Juniper Junos versions 10.4, 11.2, 11.4, and 12.1 prior to their specified patches.

What devices are impacted by CVE-2013-4687?

CVE-2013-4687 impacts Juniper SRX devices including SRX100, SRX110, SRX1400, and others as listed in the vulnerability report.

What type of attack does CVE-2013-4687 facilitate?

CVE-2013-4687 facilitates a denial of service attack through the sending of crafted TCP packets that crash the daemon.