CVEvulnerability

CVE-2014-3818

7.8 HIGH Published 2014-10-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-10-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-119

Description

Juniper Junos OS 9.1 through 11.4 before 11.4R11, 12.1 before R10, 12.1X44 before D40, 12.1X46 before D30, 12.1X47 before D11 and 12.147-D15, 12.1X48 before D41 and D62, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4-S2, 13.1X49 before D49, 13.1X50 before 30, 13.2 before R4, 13.2X50 before D20, 13.2X51 before D25, 13.2X52 before D15, 13.3 before R2, and 14.1 before R1, when supporting 4-byte AS numbers and a BGP peer does not, allows remote attackers to cause a denial of service (memory corruption and RDP routing process crash and restart) via crafted transitive attributes in a BGP UPDATE.

Affected configurations

• juniper junos 9.1 • juniper junos 9.2 • juniper junos 9.4 • juniper junos 9.5 • juniper junos 9.6 • juniper junos 10.0 • juniper junos 10.1 • juniper junos 10.2 • juniper junos 10.3 • juniper junos 10.4 • juniper junos 10.4r • juniper junos 10.4s • juniper junos 11.0 • juniper junos 11.1 • juniper junos 11.2 • juniper junos 11.3 • juniper junos 11.4 • juniper junos 12.1 • juniper junos 12.1x44 • juniper junos 12.1x46 • juniper junos 12.1x47 • juniper junos 12.1x48 • juniper junos 12.2 • juniper junos 12.2x50 • juniper junos 12.3 • juniper junos 13.1 • juniper junos 13.1x49 • juniper junos 13.1x50 • juniper junos 13.2 • juniper junos 13.2x50 • juniper junos 13.2x51 • juniper junos 13.2x52 • juniper junos 13.3 • juniper junos 14.1

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References