 |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
| Test ID: | 1.3.6.1.4.1.25623.1.0.105927 |
| Category: | JunOS Local Security Checks |
| Title: | Juniper Networks Junos OS FPC DoS Vulnerability (JSA10655) |
| Summary: | Juniper Networks Junos OS is prone to a denial of service (DoS); vulnerability. |
| Description: | Summary: Juniper Networks Junos OS is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Traffic between the RE and transit interfaces is carried over an internal network between the PFEs and REs. Some REs use em interfaces (usually, em0 and em1) to connect to this network. Receipt of a carefully crafted set of fragmented packets, destined to the router, can cause the em driver to become permanently blocked when trying to formulate a reply. Vulnerability Impact: An attacker can cause the RE to be unable to communicate over the private network that connects the FPCs and REs eventually causing all FPCs to go offline and stay offline. Systems with redundant REs will failover, but would then be subject to the same issue. Affected Software/OS: Junos OS 11.4, 12.1, 12.2, 12.3, 13.1, 13.2. This issue can affect any product or platform utilizing an em interface for communications, including M, T, MX, SRX5400/5600/5800, EX, QFX, PTX Series, and MAG-Series CMC. J Series and SRX Series models not listed above do not utilize the em driver, and are therefore not affected by this issue. Solution: New builds of Junos OS software are available from Juniper. As a workaround filter fragmented packets destined to the router. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C |
| Cross-Ref: |
Common Vulnerability Exposure (CVE) ID: CVE-2014-6380 BugTraq ID: 70369 http://www.securityfocus.com/bid/70369 http://www.securitytracker.com/id/1031011 XForce ISS Database: juniper-junos-cve20146380-dos(96904) https://exchange.xforce.ibmcloud.com/vulnerabilities/96904 |
| Copyright | Copyright (C) 2014 Greenbone AG |
| This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |