← Back

CVE-2014-6449

nvd nist
Published: Oct 16, 2015Modified: May 6, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

Juniper Junos OS before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D15, 13.2 before 13.2R8, 13.3 before 13.3R7, 14.1 before 14.1R5, and 14.2 before 14.2R1 do not properly handle TCP packet reassembly, which allows remote attackers to cause a denial of service (buffer consumption) via a crafted sequence of packets "destined to the device."

Affected (54)

Products: Juniper: Junos
1 product
Junos
Configuration A
54 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Version 12.1x44
Version 12.1x44 d10
Version 12.1x44 d15
Version 12.1x44 d20
Version 12.1x44 d25
Version 12.1x44 d30
Version 12.1x44 d35
Version 12.1x44 d40
Version 12.1x44 d45
Version 12.1x46
Version 12.1x46 d10
Version 12.1x46 d15
Version 12.1x46 d20
Version 12.1x46 d25
Version 12.1x46 d30
Version 12.1x47
Version 12.1x47 d10
Version 12.1x47 d15
Version 12.1x47 d20
Version 12.3
Version 12.3 r1
Version 12.3 r2
Version 12.3 r3
Version 12.3 r4
Version 12.3 r5
Version 12.3 r6
Version 12.3 r7
Version 12.3 r8
Version 12.3 r9
Version 12.3x48
Version 12.3x48 d10
Version 12.3x48 d5
Version 13.2
Version 13.2 r1
Version 13.2 r2
Version 13.2 r3
Version 13.2 r4
Version 13.2 r5
Version 13.2 r6
Version 13.2 r7
Version 13.3
Version 13.3 r1
Version 13.3 r2-s2
Version 13.3 r2
Version 13.3 r3
Version 13.3 r4
Version 13.3 r5
Version 13.3 r6
Version 14.1
Version 14.1 r1
Version 14.1 r2
Version 14.1 r3
Version 14.1 r4
Version 14.2

Related CWEs

References (4)

Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.