Juniper Junos SRX Series flowd Remote DoS (JSA10611)

According to its self-reported version number, the remote Juniper Junos SRX series device is affected by a denial of service vulnerability in the flow daemon flowd when handling certain valid HTTP protocol messages. A remote attacker can exploit this to crash the device. Note that this issue only...

CVE-2014-0617

Juniper Junos 10.4S before 10.4S15, 10.4R before 10.4R16, 11.4 before 11.4R9, and 12.1R before 12.1R7 on SRX Series service gateways allows remote attackers to cause a denial of service flowd crash via a crafted IP packet...

Input validation

Juniper Junos 10.4S before 10.4S15, 10.4R before 10.4R16, 11.4 before 11.4R9, and 12.1R before 12.1R7 on SRX Series service gateways allows remote attackers to cause a denial of service flowd crash via a crafted IP packet...

Juniper Networks Junos OS Denial of Service Vulnerability while Processing HTTP Traffic

Denial of Service vulnerability in flowd while processing valid HTTP traffic. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-0617

The CVE-2014-0617 issue affects Juniper Junos OS on SRX Series gateways, with affected versions: 10.4S before 10.4S15, 10.4R before 10.4R16, 11.4 before 11.4R9, and 12.1R before 12.1R7. The vulnerability is in the flow daemon (flowd) and allows a remote attacker to cause a denial of service (flow...

CVE-2014-0617

Juniper Junos 10.4S before 10.4S15, 10.4R before 10.4R16, 11.4 before 11.4R9, and 12.1R before 12.1R7 on SRX Series service gateways allows remote attackers to cause a denial of service flowd crash via a crafted IP packet...

Input validation

Juniper Junos before 10.4 before 10.4R16, 11.4 before 11.4R8, 12.1R before 12.1R7, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on SRX Series service gateways, when used as a UAC enforcer and captive portal is enabled, allows remote attackers to cause a denial of service flowd crash...

CVE-2014-0618

The CVE-2014-0618 entry affects Juniper Junos SRX Series gateways when configured as a UAC enforcer with Captive Portal enabled. A crafted HTTP message can cause the flowd daemon to crash, leading to remote denial of service. Affected versions include Junos releases prior to 10.4R16, 11.4R8, 12.1...

Juniper Networks Junos OS Buffer Overflow when Processing HTTP Messages

Buffer Overflow in flowd when processing HTTP protocol messages SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; i...

Juniper Networks Junos OS TCP Packet Handling Denial of Service Vulnerability

A vulnerability in the Flow Daemon can cause a crash when handling certain TCP packets. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2013-6015

Juniper Junos before 10.4S14, 11.4 before 11.4R5-S2, 12.1R before 12.1R3, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D15 on SRX Series services gateways, when a plugin using TCP proxy is configured, allows remote attackers to cause a denial of service flow daemon crash via an...

Buffer overflow

Buffer overflow in the flow daemon flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7-S2, 12.1.X44 before 12.1X44-D15, 12.1X45 before 12.1X45-D10 on SRX devices, when using telnet pass-through authentication on the firewall, might allow remote attackers to execute arbitrary code via a...

Input validation

Juniper Junos before 10.4S14, 11.4 before 11.4R5-S2, 12.1R before 12.1R3, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D15 on SRX Series services gateways, when a plugin using TCP proxy is configured, allows remote attackers to cause a denial of service flow daemon crash via an...

CVE-2013-6015

Juniper Junos before 10.4S14, 11.4 before 11.4R5-S2, 12.1R before 12.1R3, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D15 on SRX Series services gateways, when a plugin using TCP proxy is configured, allows remote attackers to cause a denial of service flow daemon crash via an...

Juniper Junos SRX Series flowd Remote DoS (JSA10596)

According to its self-reported version number, the remote Juniper Junos SRX-series device has a denial of service vulnerability related to processing particular TCP packet sequences. A remote attacker can exploit this issue to cause the flow daemon flowd to crash. Note that this issue only affect...

Juniper Junos SRX Series flowd telnet Messages Remote Code Execution (JSA10594)

According to its self-reported version number, the remote Juniper Junos SRX series device is affected by a remote code execution vulnerability. A remote attacker can send specially crafted Telnet messages to cause a buffer overflow the flow daemon flowd. Note that this issue only affects devices...

Juniper Junos SRX Series Unauthenticated Access (JSA10593)

According to its self-reported version number, the remote Juniper Junos SRX series device may be affected by an unauthenticated access vulnerability. A configuration validation error may exist when upgrading that leaves the device with a partial configuration when the 'no-validate' option is used...

Juniper Junos SRX Series MSRPC DoS (JSA10578)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. SRX Series devices with a Microsoft Remote Procedure Call MSRPC Application Layer Gateway ALG can crash when processing specially crafted MSRPC packets. A remote, unauthenticated attacker...

Juniper Junos SRX Series TCP ALG DoS (JSA10577)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. SRX Series devices with TCP-based Application Layer Gateways ALGs can crash when receiving specially crafted TCP packets. A remote, unauthenticated attacker could exploit this to crash th...

Juniper Junos SRX Series PIM DoS (JSA10573)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability when Protocol-Independent Multicast PIM is enabled. An attacker, using specially crafted PIM packets subject to NAT, can cause the Flow Daemon flowd to crash. Repeated...