Juniper Networks Junos OS IPv6 to IPv4 Translating Denial of Service Vulnerability

DoS when translating from IPv6 to IPv4. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if description...

Juniper Networks Junos OS NAT Protocol Translation Denial of Service Vulnerability

DoS in NAT Protocol Translation SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if description...

Juniper Networks Junos OS SIP ALG Denial of Service Vulnerability

DoS on SRX devices when SIP ALG is enabled SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if description...

Juniper Junos SRX Series NAT IPv6 to IPv4 Remote DoS (JSA10635)

According to its self-reported version number, the remote Juniper Junos SRX series device is affected by a denial of service vulnerability. A remote attacker, by sending a specially crafted packet to an SRX series device, can crash the 'flowd' process when the packet is translated from IPv6 to...

CVE-2014-3822

Juniper Junos 11.4 before 11.4R8, 12.1 before 12.1R5, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.1X46 before 12.1X46-D10, and 12.1X47 before 12.1X47-D10 on SRX Series devices, allows remote attackers to cause a denial of service flowd crash via a malformed packet, related to...

Input validation

Juniper Junos 11.4 before 11.4R8, 12.1 before 12.1R5, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.1X46 before 12.1X46-D10, and 12.1X47 before 12.1X47-D10 on SRX Series devices, allows remote attackers to cause a denial of service flowd crash via a malformed packet, related to...

CVE-2014-3822

Summary: CVE-2014-3822 affects Juniper Junos SRX Series devices and relates to the IPv6-to-IPv4 translation path. The issue can be triggered by a malformed packet, causing a denial of service via the flowd process crash. Affected software/versions (as provided): Junos OS on SRX Series with 11.4 b...

CVE-2014-3815

CVE-2014-3815 affects Juniper Junos SRX Series devices, where SIP ALG processing allows remote attackers to crash the flowd daemon via a crafted SIP packet. Impact described as denial of service with affected versions: Junos 12.1X46 before 12.1X46-D20 and 12.1X47 before 12.1X47-D10. Public contex...

CVE-2014-3815

Juniper Junos 12.1X46 before 12.1X46-D20 and 12.1X47 before 12.1X47-D10 on SRX Series devices allows remote attackers to cause a denial of service flowd crash via a crafted SIP packet...

Juniper Junos SRX Series flowd DoS (JSA10622)

According to its self-reported version number, the remote Junos device is affected by a denial of service vulnerability due to improper processing by the Enhanced Web Filtering EWF. An attacker can exploit this vulnerability by sending a crafted URL to crash the flow daemon flowd process. Repeate...

Juniper Junos SRX Series flowd Remote DoS (JSA10611)

According to its self-reported version number, the remote Juniper Junos SRX series device is affected by a denial of service vulnerability in the flow daemon flowd when handling certain valid HTTP protocol messages. A remote attacker can exploit this to crash the device. Note that this issue only...

CVE-2014-0617

Juniper Junos 10.4S before 10.4S15, 10.4R before 10.4R16, 11.4 before 11.4R9, and 12.1R before 12.1R7 on SRX Series service gateways allows remote attackers to cause a denial of service flowd crash via a crafted IP packet...

Juniper Networks Junos OS Denial of Service Vulnerability while Processing HTTP Traffic

Denial of Service vulnerability in flowd while processing valid HTTP traffic. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-0617

The CVE-2014-0617 issue affects Juniper Junos OS on SRX Series gateways, with affected versions: 10.4S before 10.4S15, 10.4R before 10.4R16, 11.4 before 11.4R9, and 12.1R before 12.1R7. The vulnerability is in the flow daemon (flowd) and allows a remote attacker to cause a denial of service (flow...

CVE-2014-0617

Juniper Junos 10.4S before 10.4S15, 10.4R before 10.4R16, 11.4 before 11.4R9, and 12.1R before 12.1R7 on SRX Series service gateways allows remote attackers to cause a denial of service flowd crash via a crafted IP packet...

CVE-2014-0618

Juniper Junos before 10.4 before 10.4R16, 11.4 before 11.4R8, 12.1R before 12.1R7, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on SRX Series service gateways, when used as a UAC enforcer and captive portal is enabled, allows remote attackers to cause a denial of service flowd crash...

Juniper Networks Junos OS Buffer Overflow when Processing HTTP Messages

Buffer Overflow in flowd when processing HTTP protocol messages SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; i...

Juniper Networks Junos OS flowd Buffer Overflow Vulnerability

A buffer overflow in the flow daemon when using telnet pass-through authentication might lead to a complete compromise of the system. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2013-6013

CVE-2013-6013 affects Juniper Junos flowd on SRX devices, where a buffer overflow in the flow daemon may allow remote code execution via a crafted Telnet message when telnet pass-through authentication is enabled. Affected versions include Junos 10.4 before 10.4S14, 11.4 before 11.4R7-S2, 12.1.X4...

Juniper Junos SRX Series flowd telnet Messages Remote Code Execution (JSA10594)

According to its self-reported version number, the remote Juniper Junos SRX series device is affected by a remote code execution vulnerability. A remote attacker can send specially crafted Telnet messages to cause a buffer overflow the flow daemon flowd. Note that this issue only affects devices...