Sign-up

ID

VAR-201410-0969


CVE

CVE-2014-6377


TITLE

Juniper JunosE Service disruption in (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2014-004857

DESCRIPTION

Juniper JunosE before 13.3.3p0-1, 14.x before 14.3.2, and 15.x before 15.1.0, when DEBUG severity icmpTraffic logging is enabled, allows remote attackers to cause a denial of service (SRP reset) via a crafted ICMP packet to the (1) interface or (2) loopback IP address, which triggers a processor exception in ip_RxData_8. Juniper JunosE is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Juniper Networks JunosE is an operating system of Juniper Networks (Juniper Networks) running on E series IP edge and broadband service routers. The following versions are affected: Juniper JunosE prior to 13.3.3p0-1, 14.x prior to 14.3.2, and 15.x prior to 15.1.0

Trust: 1.98

sources: NVD: CVE-2014-6377 // JVNDB: JVNDB-2014-004857 // BID: 70368 // VULHUB: VHN-74321

AFFECTED PRODUCTS

vendor:junipermodel:junos escope:eqversion:13.3.0

Trust: 1.6

vendor:junipermodel:junos escope:eqversion:14.3.1

Trust: 1.6

vendor:junipermodel:junos escope:eqversion:14.3.0

Trust: 1.6

vendor:junipermodel:junos escope:eqversion:13.3.1

Trust: 1.6

vendor:junipermodel:junos escope:lteversion:13.3.2

Trust: 1.0

vendor:junipermodel:junosescope:ltversion:14.x

Trust: 0.8

vendor:junipermodel:junosescope:eqversion:14.3.2

Trust: 0.8

vendor:junipermodel:junosescope:eqversion:15.1.0

Trust: 0.8

vendor:junipermodel:junosescope:ltversion:15.x

Trust: 0.8

vendor:junipermodel:junos escope:eqversion:13.3.2

Trust: 0.6

sources: JVNDB: JVNDB-2014-004857 // CNNVD: CNNVD-201410-260 // NVD: CVE-2014-6377

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2014-6377
value: HIGH

Trust: 1.0

NVD: CVE-2014-6377
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201410-260
value: HIGH

Trust: 0.6

VULHUB: VHN-74321
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2014-6377
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-74321
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-74321 // JVNDB: JVNDB-2014-004857 // CNNVD: CNNVD-201410-260 // NVD: CVE-2014-6377

PROBLEMTYPE DATA

problemtype:CWE-399

Trust: 1.9

sources: VULHUB: VHN-74321 // JVNDB: JVNDB-2014-004857 // NVD: CVE-2014-6377

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201410-260

TYPE

resource management error

Trust: 0.6

sources: CNNVD: CNNVD-201410-260

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2014-004857

PATCH
title:JSA10651url:https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10651
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2014-004857

EXTERNAL IDS
db:NVDid:CVE-2014-6377
Trust: 2.8
db:JUNIPERid:JSA10651
Trust: 1.7
db:BIDid:70368
Trust: 1.4
db:SECTRACKid:1031006
Trust: 1.1
db:JVNDBid:JVNDB-2014-004857
Trust: 0.8
db:CNNVDid:CNNVD-201410-260
Trust: 0.7
db:VULHUBid:VHN-74321
Trust: 0.1
sources:
            
            
            VULHUB: VHN-74321 // 
            
            
            
            BID: 70368 // 
            
            
            
            JVNDB: JVNDB-2014-004857 // 
            
            
            
            CNNVD: CNNVD-201410-260 // 
            
            
            
            NVD: CVE-2014-6377

REFERENCES
url:https://kb.juniper.net/infocenter/index?page=content&id=jsa10651
Trust: 1.6
url:http://www.securityfocus.com/bid/70368
Trust: 1.1
url:http://www.securitytracker.com/id/1031006
Trust: 1.1
url:https://exchange.xforce.ibmcloud.com/vulnerabilities/96907
Trust: 1.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-6377
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-6377
Trust: 0.8
url:https://kb.juniper.net/infocenter/index?page=content&id=jsa10651
Trust: 0.1
sources:
            
            
            VULHUB: VHN-74321 // 
            
            
            
            JVNDB: JVNDB-2014-004857 // 
            
            
            
            CNNVD: CNNVD-201410-260 // 
            
            
            
            NVD: CVE-2014-6377

CREDITS
The vendor reported this issue.
Trust: 0.3
sources:
            
            
            BID: 70368

SOURCES
db:VULHUBid:VHN-74321
db:BIDid:70368
db:JVNDBid:JVNDB-2014-004857
db:CNNVDid:CNNVD-201410-260
db:NVDid:CVE-2014-6377

LAST UPDATE DATE
2025-04-13T23:10:07.119000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-74321date:2017-09-08T00:00:00
db:BIDid:70368date:2014-10-09T00:00:00
db:JVNDBid:JVNDB-2014-004857date:2014-10-21T00:00:00
db:CNNVDid:CNNVD-201410-260date:2014-10-16T00:00:00
db:NVDid:CVE-2014-6377date:2025-04-12T10:46:40.837

SOURCES RELEASE DATE
db:VULHUBid:VHN-74321date:2014-10-14T00:00:00
db:BIDid:70368date:2014-10-09T00:00:00
db:JVNDBid:JVNDB-2014-004857date:2014-10-21T00:00:00
db:CNNVDid:CNNVD-201410-260date:2014-10-15T00:00:00
db:NVDid:CVE-2014-6377date:2014-10-14T14:55:06.337