CVE-2014-3822

Published: Jul 11, 2014Modified: May 6, 2026

5.4

Vector

AV:N/AC:H/Au:N/C:N/I:N/A:C

Exploitability: 4.9 / Impact: 6.9

Source: NVD

Description

Juniper Junos 11.4 before 11.4R8, 12.1 before 12.1R5, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.1X46 before 12.1X46-D10, and 12.1X47 before 12.1X47-D10 on SRX Series devices, allows remote attackers to cause a denial of service (flowd crash) via a malformed packet, related to translating IPv6 to IPv4.

Affected (18)

Products: Juniper: Junos, Srx100, Srx110, Srx1400, Srx210, Srx220, Srx240, Srx3400, Srx3600, Srx550, Srx5600, Srx5800, Srx650

13 products

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos	Version 11.4
Juniper Junos	Version 12.1
Juniper Junos	Version 12.1x44
Juniper Junos	Version 12.1x45
Juniper Junos	Version 12.1x46
Juniper Junos	Version 12.1x47
Juniper Srx100	All versions
Juniper Srx110	All versions
Juniper Srx1400	All versions
Juniper Srx210	All versions
Juniper Srx220	All versions
Juniper Srx240	All versions
Juniper Srx3400	All versions
Juniper Srx3600	All versions
Juniper Srx550	All versions
Juniper Srx5600	All versions
Juniper Srx5800	All versions
Juniper Srx650	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

http://www.securitytracker.com/id/1030560

Source: cve@mitre.org

https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10641

Source: cve@mitre.org

Vendor Advisory

http://www.securitytracker.com/id/1030560

Source: af854a3a-2127-422b-91ae-364da2661108

https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10641

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.