CVE-2014-3822: Input Validation

Published Jul 11, 2014

Updated

Juniper Junos 11.4 before 11.4R8, 12.1 before 12.1R5, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.1X46 before 12.1X46-D10, and 12.1X47 before 12.1X47-D10 on SRX Series devices, allows remote attackers to cause a denial of service (flowd crash) via a malformed packet, related to translating IPv6 to IPv4.

Affected Software

18 affected components

Juniper Junos=11.4

Juniper Junos=12.1

Juniper Junos=12.1x44

Juniper Junos=12.1x45

Juniper Junos=12.1x46

Juniper Junos=12.1x47

Juniper SRX100

Juniper SRX110

Juniper SRX1400

Juniper SRX210

Juniper SRX220

Juniper SRX240

Juniper SRX3400

Juniper SRX3600

Juniper SRX550

Juniper SRX5600

Juniper SRX5800

Juniper SRX650

Event History

Jul 11, 2014

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-3822?

CVE-2014-3822 is classified as a denial of service vulnerability, with a potential high impact on affected systems.

How do I fix CVE-2014-3822?

To mitigate CVE-2014-3822, upgrade Junos to one of the patched versions, specifically 11.4R8 or later for 11.4, or 12.1R5 or later for 12.1.

What systems are affected by CVE-2014-3822?

CVE-2014-3822 affects multiple versions of Junos OS, particularly on SRX Series devices including models like the SRX100 and SRX550.

Can CVE-2014-3822 be exploited remotely?

Yes, CVE-2014-3822 allows remote attackers to exploit the vulnerability by sending malformed packets.

What are the potential consequences of CVE-2014-3822?

Exploitation of CVE-2014-3822 may cause the affected device to crash, leading to service interruption.