CVE-2013-4686

Published Jul 11, 2013

Last updated a month ago

Overview

Description
The kernel in Juniper Junos 10.4 before 10.4R14, 11.4 before 11.4R8, 11.4X27 before 11.4X27.43, 12.1 before 12.1R6, 12.1X44 before 12.1X44-D20, 12.2 before 12.2R4, and 12.3 before 12.3R2, in certain VLAN configurations with unrestricted arp-resp and proxy-arp settings, allows remote attackers to cause a denial of service (device crash) via a crafted ARP request, aka PR 842091.
Source
cve@mitre.org
NVD status
Deferred

Risk scores

CVSS 2.0

Type
Primary
Base score
7.1
Impact score
6.9
Exploitability score
8.6
Vector string
AV:N/AC:M/Au:N/C:N/I:N/A:C

Weaknesses

nvd@nist.gov
NVD-CWE-noinfo

Social media

Hype score
Not currently trending

Evaluator

Comment
-
Impact
Per: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10576 'This issue can affect any product or platform running Junos OS 10.4, 11.4, 11.4X27, 12.1X44, 12.1, 12.2, or 12.3'
Solution
Per: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10576 'This issue can affect any product or platform running Junos OS 10.4, 11.4, 11.4X27, 12.1X44, 12.1, 12.2, or 12.3'

Configurations