CVEvulnerability

CVE-2014-0616

7.1 HIGH Published 2014-01-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-01-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
Weaknesses
CWE-362

Description

Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, 12.2 before 12.2R7, 12.3 before 12.3R4-S2, 13.1 before 13.1R3-S1, 13.2 before 13.2R2, and 13.3 before 13.3R1 allows remote attackers to cause a denial of service (rdp crash) via a large BGP UPDATE message which immediately triggers a withdraw message to be sent, as demonstrated by a long AS_PATH and a large number of BGP Communities.

Affected configurations

• juniper junos 10.4 • juniper junos 11.4 • juniper junos 12.1r • juniper junos 12.1x44 • juniper junos 12.1x45 • juniper junos 12.1x46 • juniper junos 12.2 • juniper junos 12.3 • juniper junos 13.1 • juniper junos 13.2 • juniper junos 13.3

Related

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References