Back to CVE Browser

CVE-2014-6377

HIGH

7.8

CVSS Severity Score

EPSS Score0.0180%

EPSS Percentile5.05th

PublishedOct 14, 2014

Last ModifiedMay 6, 2026

Vulnerability Description

Juniper JunosE before 13.3.3p0-1, 14.x before 14.3.2, and 15.x before 15.1.0, when DEBUG severity icmpTraffic logging is enabled, allows remote attackers to cause a denial of service (SRP reset) via a crafted ICMP packet to the (1) interface or (2) loopback IP address, which triggers a processor exception in ip_RxData_8.

Affected Platforms (CPE)

💻

Juniper

Junos E

<= 13.3.2

💻

Juniper

Junos E

= 13.3.0

💻

Juniper

Junos E

= 13.3.1

💻

Juniper

Junos E

= 14.3.0

💻

Juniper

Junos E

= 14.3.1

References & Advisories

🔗 http://www.securityfocus.com/bid/70368

🔗 http://www.securitytracker.com/id/1031006

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/96907

🔗 https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10651

🔗 http://www.securityfocus.com/bid/70368

🔗 http://www.securitytracker.com/id/1031006

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/96907

🔗 https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10651

Related Vulnerabilities

CVE-2021-024810.0

This issue is not applicable to NFX NextGen Software. On NFX Series devices the use of Hard-coded Credentials in Juniper Networks ...

CVE-2013-468510.0

Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44 before 12.1X44-...

CVE-2021-021110.0

An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon ...

CVE-2014-341210.0

Unspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in disabled, allows remote attackers to execut...