CVE-2013-4686

2013-07-1114:55:01

[email protected]

web.nvd.nist.gov

juniper

junos

kernel

denial of service

vulnerability

cve-2013-4686

nvd

6.6 Medium

AI Score

Confidence

High

7.1 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.007 Low

EPSS

Percentile

80.7%

JSON

The kernel in Juniper Junos 10.4 before 10.4R14, 11.4 before 11.4R8, 11.4X27 before 11.4X27.43, 12.1 before 12.1R6, 12.1X44 before 12.1X44-D20, 12.2 before 12.2R4, and 12.3 before 12.3R2, in certain VLAN configurations with unrestricted arp-resp and proxy-arp settings, allows remote attackers to cause a denial of service (device crash) via a crafted ARP request, aka PR 842091.

Affected configurations

NVD

Node

juniperjunosMatch10.4

juniperjunosMatch11.4

juniperjunosMatch11.4x27

juniperjunosMatch12.1

juniperjunosMatch12.1x44

juniperjunosMatch12.2

juniperjunosMatch12.3

CPENameOperatorVersion
juniper:junosjuniper junoseq10.4
juniper:junosjuniper junoseq11.4
juniper:junosjuniper junoseq11.4x27
juniper:junosjuniper junoseq12.1
juniper:junosjuniper junoseq12.1x44
juniper:junosjuniper junoseq12.2
juniper:junosjuniper junoseq12.3

CPE	Name	Operator	Version
juniper:junos	juniper junos	eq	10.4
juniper:junos	juniper junos	eq	11.4
juniper:junos	juniper junos	eq	11.4x27
juniper:junos	juniper junos	eq	12.1
juniper:junos	juniper junos	eq	12.1x44
juniper:junos	juniper junos	eq	12.2
juniper:junos	juniper junos	eq	12.3