Lucene search

[email protected]CVE-2014-2714

HistoryApr 14, 2014 - 3:09 p.m.

CVE-2014-2714

2014-04-1415:09:00

CWE-20

[email protected]

web.nvd.nist.gov

juniper

junos

ewf

denial of service

cve-2014-2714

6.8 Medium

AI Score

Confidence

High

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.007 Low

EPSS

Percentile

80.2%

JSON

The Enhanced Web Filtering (EWF) in Juniper Junos before 10.4R15, 11.4 before 11.4R9, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D10, and 12.1X46 before 12.1X46-D10, as used in the SRX Series services gateways, allows remote attackers to cause a denial of service (flow daemon crash and restart) via a crafted URL.

CPENameOperatorVersion
juniper:junosjuniper junoseq10.4
juniper:junosjuniper junoseq12.1x46
juniper:junosjuniper junoseq12.1
juniper:junosjuniper junoseq12.1x45
juniper:junosjuniper junoseq11.4
juniper:junosjuniper junoseq12.1x44

CPE	Name	Operator	Version
juniper:junos	juniper junos	eq	10.4
juniper:junos	juniper junos	eq	12.1x46
juniper:junos	juniper junos	eq	12.1
juniper:junos	juniper junos	eq	12.1x45
juniper:junos	juniper junos	eq	11.4
juniper:junos	juniper junos	eq	12.1x44

References

kb.juniper.net/InfoCenter/index?page=content&id=JSA10622

secunia.com/advisories/57835

securitytracker.com/id?1030060

www.securityfocus.com/bid/66760

6.8 Medium

AI Score

Confidence

High

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.007 Low

EPSS

Percentile

80.2%

JSON

Related for CVE-2014-2714

cvelist1 prion1 nessus1 openvas1