CVEvulnerability
CVE-2014-3818
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-10-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-119
Description
Juniper Junos OS 9.1 through 11.4 before 11.4R11, 12.1 before R10, 12.1X44 before D40, 12.1X46 before D30, 12.1X47 before D11 and 12.147-D15, 12.1X48 before D41 and D62, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4-S2, 13.1X49 before D49, 13.1X50 before 30, 13.2 before R4, 13.2X50 before D20, 13.2X51 before D25, 13.2X52 before D15, 13.3 before R2, and 14.1 before R1, when supporting 4-byte AS numbers and a BGP peer does not, allows remote attackers to cause a denial of service (memory corruption and RDP routing process crash and restart) via crafted transitive attributes in a BGP UPDATE.
Affected configurations
• juniper junos 9.1
• juniper junos 9.2
• juniper junos 9.4
• juniper junos 9.5
• juniper junos 9.6
• juniper junos 10.0
• juniper junos 10.1
• juniper junos 10.2
• juniper junos 10.3
• juniper junos 10.4
• juniper junos 10.4r
• juniper junos 10.4s
• juniper junos 11.0
• juniper junos 11.1
• juniper junos 11.2
• juniper junos 11.3
• juniper junos 11.4
• juniper junos 12.1
• juniper junos 12.1x44
• juniper junos 12.1x46
• juniper junos 12.1x47
• juniper junos 12.1x48
• juniper junos 12.2
• juniper junos 12.2x50
• juniper junos 12.3
• juniper junos 13.1
• juniper junos 13.1x49
• juniper junos 13.1x50
• juniper junos 13.2
• juniper junos 13.2x50
• juniper junos 13.2x51
• juniper junos 13.2x52
• juniper junos 13.3
• juniper junos 14.1
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://www.securitytracker.com/id/1031009 www.securitytracker.com
- https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10653 Vendor Advisory
- http://www.securitytracker.com/id/1031009 www.securitytracker.com
- https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10653 Vendor Advisory