CVE-2014-0617: High severity Juniper Junos vulnerability
Published Jan 14, 2014
·Updated
Juniper Junos 10.4S before 10.4S15, 10.4R before 10.4R16, 11.4 before 11.4R9, and 12.1R before 12.1R7 on SRX Series service gateways allows remote attackers to cause a denial of service (flowd crash) via a crafted IP packet.
Affected Software
32 affected components
Juniper Junos=10.4r
Juniper Junos=10.4s
Juniper Junos=11.4
Juniper Junos=12.1r
Juniper SRX100
Juniper SRX110
Juniper SRX1400
Juniper SRX210
Juniper SRX220
Juniper SRX240
Juniper SRX3400
Juniper SRX3600
Juniper SRX550
Juniper SRX5600
Juniper SRX5800
Juniper SRX650
All of the following
Any of the following
Juniper Junos=10.4r
Juniper Junos=10.4s
Juniper Junos=11.4
Juniper Junos=12.1r
Any of the following
Juniper SRX100
Juniper SRX110
Juniper SRX1400
Juniper SRX210
Juniper SRX220
Juniper SRX240
Juniper SRX3400
Juniper SRX3600
Juniper SRX550
Juniper SRX5600
Juniper SRX5800
Juniper SRX650
Event History
Jan 14, 2014
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Jan 15, 2014
Data Sourced
via NVD·04:08 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-0617?
CVE-2014-0617 is classified as a denial of service vulnerability that can lead to a flowd crash.
2
How do I fix CVE-2014-0617?
To mitigate CVE-2014-0617, you should upgrade Junos versions to 10.4S15, 10.4R16, 11.4R9, or 12.1R7 or later.
3
What systems are affected by CVE-2014-0617?
CVE-2014-0617 affects Juniper SRX Series service gateways running specific versions of Junos.
4
Can CVE-2014-0617 be exploited remotely?
Yes, CVE-2014-0617 can be exploited remotely by sending a crafted IP packet.
5
What impacts does CVE-2014-0617 have on system performance?
CVE-2014-0617 can cause a denial of service, resulting in system outages and degraded performance.