imPC@ndo IT

Tracker / CVE-2014-0618

CVE-2014-0618

High 7.8

Juniper Junos before 10.4 before 10.4R16, 11.4 before 11.4R8, 12.1R before 12.1R7, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on SRX Series service gateways, when used as a UAC enforcer and captive portal is enabled, allows remote attackers to cause a denial of service (flowd crash) via a crafted HTTP message.

Affected products and versions

juniper junos
juniper srx100
juniper srx110
juniper srx1400
juniper srx210
juniper srx220
juniper srx240
juniper srx3400
juniper srx3600
juniper srx550
juniper srx5600
juniper srx5800
juniper srx650

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References