CVE-2014-3825

Published: Oct 14, 2014Modified: May 6, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

The Juniper SRX Series devices with Junos 11.4 before 11.4R12-S4, 12.1X44 before 12.1X44-D40, 12.1X45 before 12.1X45-D30, 12.1X46 before 12.1X46-D25, and 12.1X47 before 12.1X47-D10, when an Application Layer Gateway (ALG) is enabled, allows remote attackers to cause a denial of service (flowd crash) via a crafted packet.

Affected (18)

Products: Juniper: Junos, Srx100, Srx110, Srx1400, Srx210, Srx220, Srx240, Srx3400, Srx3600, Srx550, Srx5600, Srx5800, Srx650

13 products

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos	Version 11.4
Juniper Junos	Version 12.1
Juniper Junos	Version 12.1x44
Juniper Junos	Version 12.1x45
Juniper Junos	Version 12.1x46
Juniper Junos	Version 12.1x47
Juniper Srx100	All versions
Juniper Srx110	All versions
Juniper Srx1400	All versions
Juniper Srx210	All versions
Juniper Srx220	All versions
Juniper Srx240	All versions
Juniper Srx3400	All versions
Juniper Srx3600	All versions
Juniper Srx550	All versions
Juniper Srx5600	All versions
Juniper Srx5800	All versions
Juniper Srx650	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

http://www.securitytracker.com/id/1031007

Source: cve@mitre.org

https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10650

Source: cve@mitre.org

Vendor Advisory

http://www.securitytracker.com/id/1031007

Source: af854a3a-2127-422b-91ae-364da2661108

https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10650

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.