CVE-2014-3818
Description
Juniper Junos OS 9.1 through 11.4 before 11.4R11, 12.1 before R10, 12.1X44 before D40, 12.1X46 before D30, 12.1X47 before D11 and 12.147-D15, 12.1X48 before D41 and D62, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4-S2, 13.1X49 before D49, 13.1X50 before 30, 13.2 before R4, 13.2X50 before D20, 13.2X51 before D25, 13.2X52 before D15, 13.3 before R2, and 14.1 before R1, when supporting 4-byte AS numbers and a BGP peer does not, allows remote attackers to cause a denial of service (memory corruption and RDP routing process crash and restart) via crafted transitive attributes in a BGP UPDATE.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper junos | 9.1, 9.2, 9.4, 9.5, 9.6, 10.0, 10.1, 10.2, 10.3, 10.4, 10.4r, 10.4s, 11.0, 11.1, 11.2, 11.3, 11.4, 12.1, 12.1x44, 12.1x46, 12.1x47, 12.1x48, 12.2, 12.2x50, 12.3, 13.1, 13.1x49, 13.1x50, 13.2, 13.2x50, 13.2x51, 13.2x52, 13.3, 14.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.