CVE-2014-3818

Severity Score

7.8

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Juniper Junos OS 9.1 through 11.4 before 11.4R11, 12.1 before R10, 12.1X44 before D40, 12.1X46 before D30, 12.1X47 before D11 and 12.147-D15, 12.1X48 before D41 and D62, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4-S2, 13.1X49 before D49, 13.1X50 before 30, 13.2 before R4, 13.2X50 before D20, 13.2X51 before D25, 13.2X52 before D15, 13.3 before R2, and 14.1 before R1, when supporting 4-byte AS numbers and a BGP peer does not, allows remote attackers to cause a denial of service (memory corruption and RDP routing process crash and restart) via crafted transitive attributes in a BGP UPDATE.

Juniper Junos OS 9.1 hasta 11.4 anterior a 11.4R11, 12.1 anterior a R10, 12.1X44 anterior a D40, 12.1X46 anterior a D30, 12.1X47 anterior a D11 y 12.147-D15, 12.1X48 anterior a D41 y D62, 12.2 anterior a R8, 12.2X50 anterior a D70, 12.3 anterior a R6, 13.1 anterior a R4-S2, 13.1X49 anterior a D49, 13.1X50 anterior a 30, 13.2 anterior a R4, 13.2X50 anterior a D20, 13.2X51 anterior a D25, 13.2X52 anterior a D15, 13.3 anterior a R2, y 14.1 anterior a R1, cuando soporta números AS de 4-bytes y un par BGP no lo hace, permite a atacantes remotos causar una denegación de servicio (corrupción de memoria y caída y reinicio del proceso de enrutamiento RDP) a través de atributos transitivos manipulados en una actualización de BGP.

*Credits: N/A

CVSS Scores

NISTv2 7.8

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2014-05-21 CVE Reserved
2014-10-14 CVE Published
2023-03-07 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CAPEC

References (2)

URL	Tag	Source
http://www.securitytracker.com/id/1031009	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10653	2015-11-05

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				9.1 Search vendor "Juniper" for product "Junos" and version "9.1"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				9.2 Search vendor "Juniper" for product "Junos" and version "9.2"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				9.4 Search vendor "Juniper" for product "Junos" and version "9.4"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				9.5 Search vendor "Juniper" for product "Junos" and version "9.5"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				9.6 Search vendor "Juniper" for product "Junos" and version "9.6"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				10.0 Search vendor "Juniper" for product "Junos" and version "10.0"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				10.1 Search vendor "Juniper" for product "Junos" and version "10.1"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				10.2 Search vendor "Juniper" for product "Junos" and version "10.2"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				10.3 Search vendor "Juniper" for product "Junos" and version "10.3"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				10.4 Search vendor "Juniper" for product "Junos" and version "10.4"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				10.4r Search vendor "Juniper" for product "Junos" and version "10.4r"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				10.4s Search vendor "Juniper" for product "Junos" and version "10.4s"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				11.0 Search vendor "Juniper" for product "Junos" and version "11.0"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				11.1 Search vendor "Juniper" for product "Junos" and version "11.1"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				11.2 Search vendor "Juniper" for product "Junos" and version "11.2"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				11.3 Search vendor "Juniper" for product "Junos" and version "11.3"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				11.4 Search vendor "Juniper" for product "Junos" and version "11.4"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				12.1 Search vendor "Juniper" for product "Junos" and version "12.1"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				12.1x44 Search vendor "Juniper" for product "Junos" and version "12.1x44"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				12.1x46 Search vendor "Juniper" for product "Junos" and version "12.1x46"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				12.1x47 Search vendor "Juniper" for product "Junos" and version "12.1x47"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				12.1x48 Search vendor "Juniper" for product "Junos" and version "12.1x48"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				12.2 Search vendor "Juniper" for product "Junos" and version "12.2"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				12.2x50 Search vendor "Juniper" for product "Junos" and version "12.2x50"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				12.3 Search vendor "Juniper" for product "Junos" and version "12.3"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				13.1 Search vendor "Juniper" for product "Junos" and version "13.1"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				13.1x49 Search vendor "Juniper" for product "Junos" and version "13.1x49"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				13.1x50 Search vendor "Juniper" for product "Junos" and version "13.1x50"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				13.2 Search vendor "Juniper" for product "Junos" and version "13.2"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				13.2x50 Search vendor "Juniper" for product "Junos" and version "13.2x50"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				13.2x51 Search vendor "Juniper" for product "Junos" and version "13.2x51"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				13.2x52 Search vendor "Juniper" for product "Junos" and version "13.2x52"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				13.3 Search vendor "Juniper" for product "Junos" and version "13.3"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				14.1 Search vendor "Juniper" for product "Junos" and version "14.1"		-		Affected