CVE-2013-4686

Published Jul 11, 2013

Last updated 11 years ago

Overview

Description
The kernel in Juniper Junos 10.4 before 10.4R14, 11.4 before 11.4R8, 11.4X27 before 11.4X27.43, 12.1 before 12.1R6, 12.1X44 before 12.1X44-D20, 12.2 before 12.2R4, and 12.3 before 12.3R2, in certain VLAN configurations with unrestricted arp-resp and proxy-arp settings, allows remote attackers to cause a denial of service (device crash) via a crafted ARP request, aka PR 842091.
Source
cve@mitre.org
NVD status
Modified

Social media

Hype score
Not currently trending

Risk scores

CVSS 2.0

Type
Primary
Base score
7.1
Impact score
6.9
Exploitability score
8.6
Vector string
AV:N/AC:M/Au:N/C:N/I:N/A:C

Weaknesses

nvd@nist.gov
NVD-CWE-noinfo

Evaluator

Comment
-
Impact
Per: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10576 'This issue can affect any product or platform running Junos OS 10.4, 11.4, 11.4X27, 12.1X44, 12.1, 12.2, or 12.3'
Solution
Per: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10576 'This issue can affect any product or platform running Junos OS 10.4, 11.4, 11.4X27, 12.1X44, 12.1, 12.2, or 12.3'

Configurations