Details of VAR-201406-0375

ID

VAR-201406-0375

CVE

CVE-2014-3814

TITLE

Juniper Networks NetScreen Firewall Product ScreenOS Service disruption in (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2014-002930

DESCRIPTION

The Juniper Networks NetScreen Firewall devices with ScreenOS before 6.3r17, when configured to use the internal DNS lookup client, allows remote attackers to cause a denial of service (crash and reboot) via a sequence of malformed packets to the device IP. Juniper NetScreen Firewall is prone to a denial-of-service vulnerability. Successful exploits may allow the attacker to cause denial-of-service conditions. Juniper NetScreen Firewall 3.0 is vulnerable; other versions may also be affected

Trust: 2.34

sources: NVD: CVE-2014-3814 // JVNDB: JVNDB-2014-002930 // BID: 68099 // BID: 68100 // VULHUB: VHN-71754 // VULMON: CVE-2014-3814

AFFECTED PRODUCTS

vendor:	juniper	model:	screenos	scope:	eq	version:	6.1.0	Trust: 1.6
vendor:	juniper	model:	screenos	scope:	eq	version:	6.2.0	Trust: 1.6
vendor:	juniper	model:	screenos	scope:	eq	version:	6.0.0	Trust: 1.6
vendor:	juniper	model:	netscreen-5400	scope:	eq	version:	-	Trust: 1.0
vendor:	juniper	model:	netscreen-5200	scope:	eq	version:	-	Trust: 1.0
vendor:	juniper	model:	screenos	scope:	lte	version:	6.3.0	Trust: 1.0
vendor:	juniper	model:	netscreen 5200	scope:	-	version:	-	Trust: 0.8
vendor:	juniper	model:	netscreen 5400	scope:	-	version:	-	Trust: 0.8
vendor:	juniper	model:	screenos	scope:	lt	version:	6.3r17	Trust: 0.8
vendor:	juniper	model:	screenos	scope:	eq	version:	6.3	Trust: 0.6
vendor:	juniper	model:	screenos 6.3.0r13	scope:	-	version:	-	Trust: 0.6
vendor:	juniper	model:	screenos 6.3.0r12	scope:	-	version:	-	Trust: 0.6
vendor:	juniper	model:	netscreen firewall	scope:	eq	version:	3.0	Trust: 0.6
vendor:	juniper	model:	screenos 6.3r17	scope:	ne	version:	-	Trust: 0.6
vendor:	juniper	model:	screenos	scope:	eq	version:	6.3.0	Trust: 0.6

sources: BID: 68099 // BID: 68100 // JVNDB: JVNDB-2014-002930 // CNNVD: CNNVD-201406-309 // NVD: CVE-2014-3814

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2014-3814
value:	HIGH
Trust: 1.0
NVD:	CVE-2014-3814
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201406-309
value:	HIGH
Trust: 0.6
VULHUB:	VHN-71754
value:	HIGH
Trust: 0.1
VULMON:	CVE-2014-3814
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2014-3814
severity:	HIGH
baseScore:	7.8
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9
VULHUB:	VHN-71754
severity:	HIGH
baseScore:	7.8
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-71754 // VULMON: CVE-2014-3814 // JVNDB: JVNDB-2014-002930 // CNNVD: CNNVD-201406-309 // NVD: CVE-2014-3814

PROBLEMTYPE DATA

problemtype:

CWE-20

Trust: 1.9

sources: VULHUB: VHN-71754 // JVNDB: JVNDB-2014-002930 // NVD: CVE-2014-3814

THREAT TYPE

network

Trust: 0.6

sources: BID: 68099 // BID: 68100

TYPE

Failure to Handle Exceptional Conditions

Trust: 0.6

sources: BID: 68099 // BID: 68100

CONFIGURATIONS

sources: JVNDB: JVNDB-2014-002930

PATCH

title:

JSA10632

url:

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10632

Trust: 0.8

sources: JVNDB: JVNDB-2014-002930

EXTERNAL IDS

db:	NVD	id:	CVE-2014-3814	Trust: 3.2
db:	JUNIPER	id:	JSA10632	Trust: 2.4
db:	SECUNIA	id:	59026	Trust: 1.2
db:	JVNDB	id:	JVNDB-2014-002930	Trust: 0.8
db:	CNNVD	id:	CNNVD-201406-309	Trust: 0.7
db:	BID	id:	68099	Trust: 0.5
db:	BID	id:	68100	Trust: 0.4
db:	VULHUB	id:	VHN-71754	Trust: 0.1
db:	VULMON	id:	CVE-2014-3814	Trust: 0.1

sources: VULHUB: VHN-71754 // VULMON: CVE-2014-3814 // BID: 68099 // BID: 68100 // JVNDB: JVNDB-2014-002930 // CNNVD: CNNVD-201406-309 // NVD: CVE-2014-3814

REFERENCES

url:	http://kb.juniper.net/infocenter/index?page=content&id=jsa10632	Trust: 2.3
url:	http://secunia.com/advisories/59026	Trust: 1.2
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-3814	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-3814	Trust: 0.8
url:	http://www.juniper.net/	Trust: 0.6
url:	http://kb.juniper.net/infocenter/index?page=content&id=jsa10632	Trust: 0.1
url:	https://cwe.mitre.org/data/definitions/20.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1
url:	https://www.securityfocus.com/bid/68099	Trust: 0.1

sources: VULHUB: VHN-71754 // VULMON: CVE-2014-3814 // BID: 68099 // BID: 68100 // JVNDB: JVNDB-2014-002930 // CNNVD: CNNVD-201406-309 // NVD: CVE-2014-3814

CREDITS

The vendor reported this issue.

Trust: 0.6

sources: BID: 68099 // BID: 68100

SOURCES

db:	VULHUB	id:	VHN-71754
db:	VULMON	id:	CVE-2014-3814
db:	BID	id:	68099
db:	BID	id:	68100
db:	JVNDB	id:	JVNDB-2014-002930
db:	CNNVD	id:	CNNVD-201406-309
db:	NVD	id:	CVE-2014-3814

LAST UPDATE DATE

2024-11-23T22:35:07.190000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-71754	date:	2014-06-26T00:00:00
db:	VULMON	id:	CVE-2014-3814	date:	2014-06-26T00:00:00
db:	BID	id:	68099	date:	2014-06-11T00:00:00
db:	BID	id:	68100	date:	2014-06-11T00:00:00
db:	JVNDB	id:	JVNDB-2014-002930	date:	2014-06-17T00:00:00
db:	CNNVD	id:	CNNVD-201406-309	date:	2014-06-16T00:00:00
db:	NVD	id:	CVE-2014-3814	date:	2024-11-21T02:08:54.343

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-71754	date:	2014-06-13T00:00:00
db:	VULMON	id:	CVE-2014-3814	date:	2014-06-13T00:00:00
db:	BID	id:	68099	date:	2014-06-11T00:00:00
db:	BID	id:	68100	date:	2014-06-11T00:00:00
db:	JVNDB	id:	JVNDB-2014-002930	date:	2014-06-17T00:00:00
db:	CNNVD	id:	CNNVD-201406-309	date:	2014-06-16T00:00:00
db:	NVD	id:	CVE-2014-3814	date:	2014-06-13T14:55:16.167