CVE-2014-6382: Input Validation
First published: Fri Jan 16 2015(Updated: )
The Juniper MX Series routers with Junos 13.3R3 through 13.3Rx before 13.3R6, 14.1 before 14.1R4, 14.1X50 before 14.1X50-D70, and 14.2 before 14.2R2, when configured as a broadband edge (BBE) router, allows remote attackers to cause a denial of service (jpppd crash and restart) by sending a crafted PAP Authenticate-Request after the PPPoE Discovery and LCP phase are complete.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Juniper JUNOS | =13.3-r3 | |
| Juniper JUNOS | =13.3-r4 | |
| Juniper JUNOS | =13.3-r5 | |
| Juniper JUNOS | =14.1 | |
| Juniper JUNOS | =14.1-r1 | |
| Juniper JUNOS | =14.1-r2 | |
| Juniper JUNOS | =14.1-r3 | |
| Juniper JUNOS | =14.2 | |
| Juniper JUNOS | =14.2-r1 | |
| Juniper Mx10 | ||
| Juniper Mx104 | ||
| Juniper Mx2010 | ||
| Juniper Mx2020 | ||
| Juniper Mx240 | ||
| Juniper Mx40 | ||
| Juniper Mx480 | ||
| Juniper Mx80 | ||
| Juniper Mx960 | ||
| Juniper Vmx |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-6382?
CVE-2014-6382 is classified as a high severity vulnerability that allows remote attackers to cause a denial of service.
How do I fix CVE-2014-6382?
To fix CVE-2014-6382, upgrade your Junos version to 13.3R6, 14.1R4, 14.1X50-D70 or 14.2R2 or later.
Which devices are affected by CVE-2014-6382?
The affected devices are Juniper MX Series routers running Junos versions 13.3R3 through 14.2R1.
What type of attack does CVE-2014-6382 enable?
CVE-2014-6382 enables remote denial of service attacks that can crash and restart the jpppd service.
Is CVE-2014-6382 related to specific Junos configurations?
Yes, CVE-2014-6382 occurs when Juniper MX Series routers are configured as broadband edge (BBE) routers.
- collector/nvd-index
- agent/type
- agent/references
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/severity
- agent/tags
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- vendor/juniper
- canonical/juniper junos
- version/juniper junos/13.3-r3
- version/juniper junos/13.3-r4
- version/juniper junos/13.3-r5
- version/juniper junos/14.1
- version/juniper junos/14.1-r1
- version/juniper junos/14.1-r2
- version/juniper junos/14.1-r3
- version/juniper junos/14.2
- version/juniper junos/14.2-r1
- canonical/juniper mx10
- canonical/juniper mx104
- canonical/juniper mx2010
- canonical/juniper mx2020
- canonical/juniper mx240
- canonical/juniper mx40
- canonical/juniper mx480
- canonical/juniper mx80
- canonical/juniper mx960
- canonical/juniper vmx