Details of VAR-201501-0247

ID

VAR-201501-0247

CVE

CVE-2014-6385

TITLE

Juniper Junos Service disruption in (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2014-007716

DESCRIPTION

Juniper Junos 11.4 before 11.4R13, 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D15, 12.2 before 12.2R9, 12.3R7 before 12.3R7-S1, 12.3 before 12.3R8, 13.1 before 13.1R5, 13.2 before 13.2R6, 13.3 before 13.3R4, 14.1 before 14.1R2, and 14.2 before 14.2R1 allows remote attackers to cause a denial of service (kernel crash and restart) via a crafted fragmented OSPFv3 packet with an IPsec Authentication Header (AH). Juniper Junos is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause an affected device to crash, denying service to legitimate users. Juniper Junos is a set of network operating system of Juniper Networks (Juniper Networks) dedicated to the company's hardware system. The operating system provides a secure programming interface and Junos SDK. The following versions are affected: Juniper Junos 11.4 before 11.4R13, 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D15, 12.2 before 12.2R9, 12.3R7-S1 Before 12.3R7, 12.3 before 12.3R8, 13.1 before 13.1R5, 13.2 before 13.2R6, 13.3 before 13.3R4, 14.1 before 14.1R2, 14.2 before 14.2R1

Trust: 1.98

sources: NVD: CVE-2014-6385 // JVNDB: JVNDB-2014-007716 // BID: 72072 // VULHUB: VHN-74329

AFFECTED PRODUCTS

vendor:	juniper	model:	junos	scope:	eq	version:	12.3	Trust: 1.6
vendor:	juniper	model:	junos	scope:	eq	version:	12.2	Trust: 1.6
vendor:	juniper	model:	junos	scope:	eq	version:	12.1x46	Trust: 1.0
vendor:	juniper	model:	junos	scope:	eq	version:	11.4	Trust: 1.0
vendor:	juniper	model:	junos	scope:	eq	version:	12.1x47	Trust: 1.0
vendor:	juniper	model:	junos	scope:	eq	version:	13.1	Trust: 1.0
vendor:	juniper	model:	junos	scope:	eq	version:	13.3	Trust: 1.0
vendor:	juniper	model:	junos	scope:	eq	version:	12.1x44	Trust: 1.0
vendor:	juniper	model:	junos	scope:	eq	version:	13.2	Trust: 1.0
vendor:	juniper	model:	junos	scope:	eq	version:	14.1	Trust: 1.0
vendor:	juniper	model:	junos	scope:	eq	version:	14.2	Trust: 1.0
vendor:	juniper	model:	junos os	scope:	eq	version:	11.4r13	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	lt	version:	12.1x44	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	eq	version:	14.1r2	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	eq	version:	12.3r8	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	eq	version:	13.3r4	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	eq	version:	13.2r6	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	lt	version:	12.3r7	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	lt	version:	11.4	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	lt	version:	12.3	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	lt	version:	14.2	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	lt	version:	13.3	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	lt	version:	13.2	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	lt	version:	14.1	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	eq	version:	12.1x46-d30	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	eq	version:	13.1r5	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	lt	version:	13.1	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	eq	version:	12.1x44-d45	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	eq	version:	14.2r1	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	lt	version:	12.1x46	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	lt	version:	12.2	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	lt	version:	12.1x47	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	eq	version:	12.3r7-s1	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	eq	version:	12.1x47-d15	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	eq	version:	12.2r9	Trust: 0.8

sources: JVNDB: JVNDB-2014-007716 // CNNVD: CNNVD-201501-331 // NVD: CVE-2014-6385

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2014-6385
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2014-6385
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201501-331
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-74329
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2014-6385
severity:	MEDIUM
baseScore:	6.1
vectorString:	AV:A/AC:L/AU:N/C:N/I:N/A:C
accessVector:	ADJACENT_NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	6.5
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-74329
severity:	MEDIUM
baseScore:	6.1
vectorString:	AV:A/AC:L/AU:N/C:N/I:N/A:C
accessVector:	ADJACENT_NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	6.5
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-74329 // JVNDB: JVNDB-2014-007716 // CNNVD: CNNVD-201501-331 // NVD: CVE-2014-6385

PROBLEMTYPE DATA

problemtype:

NVD-CWE-noinfo

Trust: 1.0

sources: NVD: CVE-2014-6385

THREAT TYPE

specific network environment

Trust: 0.6

sources: CNNVD: CNNVD-201501-331

TYPE

Failure to Handle Exceptional Conditions

Trust: 0.3

sources: BID: 72072

CONFIGURATIONS

sources: JVNDB: JVNDB-2014-007716

PATCH

title:

JSA10668

url:

https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10668

Trust: 0.8

sources: JVNDB: JVNDB-2014-007716

EXTERNAL IDS

db:	NVD	id:	CVE-2014-6385	Trust: 2.8
db:	BID	id:	72072	Trust: 2.0
db:	JUNIPER	id:	JSA10668	Trust: 1.7
db:	JVNDB	id:	JVNDB-2014-007716	Trust: 0.8
db:	CNNVD	id:	CNNVD-201501-331	Trust: 0.7
db:	VULHUB	id:	VHN-74329	Trust: 0.1

sources: VULHUB: VHN-74329 // BID: 72072 // JVNDB: JVNDB-2014-007716 // CNNVD: CNNVD-201501-331 // NVD: CVE-2014-6385

REFERENCES

url:	http://www.securityfocus.com/bid/72072	Trust: 1.7
url:	https://kb.juniper.net/infocenter/index?page=content&id=jsa10668	Trust: 1.6
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-6385	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-6385	Trust: 0.8
url:	https://kb.juniper.net/infocenter/index?page=content&id=jsa10668	Trust: 0.1

sources: VULHUB: VHN-74329 // JVNDB: JVNDB-2014-007716 // CNNVD: CNNVD-201501-331 // NVD: CVE-2014-6385

CREDITS

The vendor reported this issue.

Trust: 0.3

sources: BID: 72072

SOURCES

db:	VULHUB	id:	VHN-74329
db:	BID	id:	72072
db:	JVNDB	id:	JVNDB-2014-007716
db:	CNNVD	id:	CNNVD-201501-331
db:	NVD	id:	CVE-2014-6385

LAST UPDATE DATE

2025-04-13T23:37:36.856000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-74329	date:	2015-01-26T00:00:00
db:	BID	id:	72072	date:	2015-01-14T00:00:00
db:	JVNDB	id:	JVNDB-2014-007716	date:	2015-01-23T00:00:00
db:	CNNVD	id:	CNNVD-201501-331	date:	2015-01-19T00:00:00
db:	NVD	id:	CVE-2014-6385	date:	2025-04-12T10:46:40.837

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-74329	date:	2015-01-16T00:00:00
db:	BID	id:	72072	date:	2015-01-14T00:00:00
db:	JVNDB	id:	JVNDB-2014-007716	date:	2015-01-23T00:00:00
db:	CNNVD	id:	CNNVD-201501-331	date:	2015-01-16T00:00:00
db:	NVD	id:	CVE-2014-6385	date:	2015-01-16T16:59:06.077