| |
Vulnerability CVE-2014-6385
Published: 2015-01-16
Description: |
Juniper Junos 11.4 before 11.4R13, 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D15, 12.2 before 12.2R9, 12.3R7 before 12.3R7-S1, 12.3 before 12.3R8, 13.1 before 13.1R5, 13.2 before 13.2R6, 13.3 before 13.3R4, 14.1 before 14.1R2, and 14.2 before 14.2R1 allows remote attackers to cause a denial of service (kernel crash and restart) via a crafted fragmented OSPFv3 packet with an IPsec Authentication Header (AH). |
Type:
CWE-noinfo
CVSS2 => (AV:A/AC:L/Au:N/C:N/I:N/A:C)
CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
6.1/10 |
6.9/10 |
6.5/10 |
Exploit range |
Attack complexity |
Authentication |
Adjacent network |
Low |
No required |
Confidentiality impact |
Integrity impact |
Availability impact |
None |
None |
Complete |
References: |
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10668
http://www.securityfocus.com/bid/72072
|
|
|
Copyright 2024, cxsecurity.com
|
|
|