Details of VAR-201307-0474

ID

VAR-201307-0474

CVE

CVE-2013-4684

TITLE

Juniper Networks SRX Runs on the device Junos of flowd Service disruption in (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2013-003331

DESCRIPTION

flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R8, 12.1 before 12.1R7, and 12.1X44 before 12.1X44-D15 on SRX devices, when PIM and NAT are enabled, allows remote attackers to cause a denial of service (daemon crash) via crafted PIM packets, aka PR 842253. Juniper Networks Junos is prone to a remote denial-of-service vulnerability. Successfully exploiting this issue will result in denial-of-service conditions. The operating system provides a secure programming interface and Junos SDK. Denial of service exists in flowd (Flow Daemon) in Juniper Junos 10.4 releases prior to 10.4S14, 11.4 releases prior to 11.4R8, 12.1 releases prior to 12.1R7, and 12.1X44 releases prior to 12.1X44-D15 on SRX Series Server Gateway devices loophole

Trust: 1.98

sources: NVD: CVE-2013-4684 // JVNDB: JVNDB-2013-003331 // BID: 61127 // VULHUB: VHN-64686

AFFECTED PRODUCTS

vendor:	juniper	model:	junos	scope:	eq	version:	12.1x44	Trust: 1.9
vendor:	juniper	model:	junos	scope:	eq	version:	12.1	Trust: 1.9
vendor:	juniper	model:	junos	scope:	eq	version:	11.4	Trust: 1.9
vendor:	juniper	model:	junos	scope:	eq	version:	10.4	Trust: 1.9
vendor:	juniper	model:	srx3600	scope:	eq	version:	-	Trust: 1.0
vendor:	juniper	model:	srx100	scope:	eq	version:	-	Trust: 1.0
vendor:	juniper	model:	srx240	scope:	eq	version:	-	Trust: 1.0
vendor:	juniper	model:	srx550	scope:	eq	version:	-	Trust: 1.0
vendor:	juniper	model:	srx210	scope:	eq	version:	-	Trust: 1.0
vendor:	juniper	model:	srx110	scope:	eq	version:	-	Trust: 1.0
vendor:	juniper	model:	srx1400	scope:	eq	version:	-	Trust: 1.0
vendor:	juniper	model:	srx3400	scope:	eq	version:	-	Trust: 1.0
vendor:	juniper	model:	srx650	scope:	eq	version:	-	Trust: 1.0
vendor:	juniper	model:	srx220	scope:	eq	version:	-	Trust: 1.0
vendor:	juniper	model:	srx5800	scope:	eq	version:	-	Trust: 1.0
vendor:	juniper	model:	srx5600	scope:	eq	version:	-	Trust: 1.0
vendor:	juniper	model:	junos os	scope:	lt	version:	12.1x44	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	lt	version:	10.4	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	eq	version:	11.4r8	Trust: 0.8
vendor:	juniper	model:	srx3400	scope:	-	version:	-	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	lt	version:	11.4	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	eq	version:	12.1r7	Trust: 0.8
vendor:	juniper	model:	srx210	scope:	-	version:	-	Trust: 0.8
vendor:	juniper	model:	srx650	scope:	-	version:	-	Trust: 0.8
vendor:	juniper	model:	srx550	scope:	-	version:	-	Trust: 0.8
vendor:	juniper	model:	srx5800	scope:	-	version:	-	Trust: 0.8
vendor:	juniper	model:	srx100	scope:	-	version:	-	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	eq	version:	12.1x44-d15	Trust: 0.8
vendor:	juniper	model:	srx220	scope:	-	version:	-	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	eq	version:	10.4s14	Trust: 0.8
vendor:	juniper	model:	srx5600	scope:	-	version:	-	Trust: 0.8
vendor:	juniper	model:	srx110	scope:	-	version:	-	Trust: 0.8
vendor:	juniper	model:	srx240	scope:	-	version:	-	Trust: 0.8
vendor:	juniper	model:	srx1400	scope:	-	version:	-	Trust: 0.8
vendor:	juniper	model:	junos os	scope:	lt	version:	12.1	Trust: 0.8
vendor:	juniper	model:	srx3600	scope:	-	version:	-	Trust: 0.8
vendor:	juniper	model:	srx650	scope:	eq	version:	0	Trust: 0.3
vendor:	juniper	model:	srx5800	scope:	eq	version:	0	Trust: 0.3
vendor:	juniper	model:	srx5600	scope:	eq	version:	0	Trust: 0.3
vendor:	juniper	model:	srx550	scope:	eq	version:	0	Trust: 0.3
vendor:	juniper	model:	srx3600	scope:	eq	version:	0	Trust: 0.3
vendor:	juniper	model:	srx3400	scope:	eq	version:	0	Trust: 0.3
vendor:	juniper	model:	srx240	scope:	eq	version:	0	Trust: 0.3
vendor:	juniper	model:	srx220	scope:	eq	version:	0	Trust: 0.3
vendor:	juniper	model:	srx210	scope:	eq	version:	0	Trust: 0.3
vendor:	juniper	model:	srx1400	scope:	eq	version:	0	Trust: 0.3
vendor:	juniper	model:	srx110	scope:	eq	version:	0	Trust: 0.3
vendor:	juniper	model:	srx100	scope:	eq	version:	0	Trust: 0.3
vendor:	juniper	model:	junos 11.4r7-s1	scope:	-	version:	-	Trust: 0.3
vendor:	juniper	model:	junos 11.4r7	scope:	-	version:	-	Trust: 0.3
vendor:	juniper	model:	junos 11.4r6.6	scope:	-	version:	-	Trust: 0.3
vendor:	juniper	model:	junos 11.4r6-s2	scope:	-	version:	-	Trust: 0.3
vendor:	juniper	model:	junos 11.4r5.5	scope:	-	version:	-	Trust: 0.3
vendor:	juniper	model:	junos 11.4r3.7	scope:	-	version:	-	Trust: 0.3
vendor:	juniper	model:	junos 10.4s13	scope:	-	version:	-	Trust: 0.3
vendor:	juniper	model:	junos 10.4r6	scope:	-	version:	-	Trust: 0.3
vendor:	juniper	model:	junos 10.4r14	scope:	-	version:	-	Trust: 0.3
vendor:	juniper	model:	junos 10.4r11	scope:	-	version:	-	Trust: 0.3
vendor:	juniper	model:	junos 12.1x44-d15	scope:	ne	version:	-	Trust: 0.3
vendor:	juniper	model:	junos 12.1r7	scope:	ne	version:	-	Trust: 0.3
vendor:	juniper	model:	junos 11.4r8	scope:	ne	version:	-	Trust: 0.3
vendor:	juniper	model:	junos 10.4s14	scope:	ne	version:	-	Trust: 0.3

sources: BID: 61127 // JVNDB: JVNDB-2013-003331 // CNNVD: CNNVD-201307-228 // NVD: CVE-2013-4684

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2013-4684
value:	HIGH
Trust: 1.0
NVD:	CVE-2013-4684
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201307-228
value:	HIGH
Trust: 0.6
VULHUB:	VHN-64686
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2013-4684
severity:	HIGH
baseScore:	7.8
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-64686
severity:	HIGH
baseScore:	7.8
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-64686 // JVNDB: JVNDB-2013-003331 // CNNVD: CNNVD-201307-228 // NVD: CVE-2013-4684

PROBLEMTYPE DATA

problemtype:

NVD-CWE-noinfo

Trust: 1.0

sources: NVD: CVE-2013-4684

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201307-228

TYPE

lack of information

Trust: 0.6

sources: CNNVD: CNNVD-201307-228

CONFIGURATIONS

sources: JVNDB: JVNDB-2013-003331

PATCH

title:

JSA10573

url:

http://kb.juniper.net/JSA10573

Trust: 0.8

sources: JVNDB: JVNDB-2013-003331

EXTERNAL IDS

db:	NVD	id:	CVE-2013-4684	Trust: 2.8
db:	JUNIPER	id:	JSA10573	Trust: 2.0
db:	BID	id:	61127	Trust: 1.4
db:	SECUNIA	id:	54157	Trust: 1.1
db:	OSVDB	id:	95107	Trust: 1.1
db:	JVNDB	id:	JVNDB-2013-003331	Trust: 0.8
db:	CNNVD	id:	CNNVD-201307-228	Trust: 0.7
db:	VULHUB	id:	VHN-64686	Trust: 0.1

sources: VULHUB: VHN-64686 // BID: 61127 // JVNDB: JVNDB-2013-003331 // CNNVD: CNNVD-201307-228 // NVD: CVE-2013-4684

REFERENCES

url:	http://kb.juniper.net/jsa10573	Trust: 1.7
url:	http://www.securityfocus.com/bid/61127	Trust: 1.1
url:	http://osvdb.org/95107	Trust: 1.1
url:	http://secunia.com/advisories/54157	Trust: 1.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-4684	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-4684	Trust: 0.8
url:	http://www.juniper.net/	Trust: 0.3
url:	http://kb.juniper.net/infocenter/index?page=content&id=jsa10573	Trust: 0.3

sources: VULHUB: VHN-64686 // BID: 61127 // JVNDB: JVNDB-2013-003331 // CNNVD: CNNVD-201307-228 // NVD: CVE-2013-4684

CREDITS

The vendor reported this issue.

Trust: 0.3

sources: BID: 61127

SOURCES

db:	VULHUB	id:	VHN-64686
db:	BID	id:	61127
db:	JVNDB	id:	JVNDB-2013-003331
db:	CNNVD	id:	CNNVD-201307-228
db:	NVD	id:	CVE-2013-4684

LAST UPDATE DATE

2024-11-23T23:02:52.019000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-64686	date:	2013-08-22T00:00:00
db:	BID	id:	61127	date:	2013-07-11T00:00:00
db:	JVNDB	id:	JVNDB-2013-003331	date:	2013-07-16T00:00:00
db:	CNNVD	id:	CNNVD-201307-228	date:	2013-07-12T00:00:00
db:	NVD	id:	CVE-2013-4684	date:	2024-11-21T01:56:03.557

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-64686	date:	2013-07-11T00:00:00
db:	BID	id:	61127	date:	2013-07-11T00:00:00
db:	JVNDB	id:	JVNDB-2013-003331	date:	2013-07-16T00:00:00
db:	CNNVD	id:	CNNVD-201307-228	date:	2013-07-12T00:00:00
db:	NVD	id:	CVE-2013-4684	date:	2013-07-11T14:55:01.310