CVE-2013-4687

Juniper Junos 10.4-10.4S14 11.2-11.4R6-S2 12.1-12.1R6 - Denial of Service via Crafted TCP Packets

Title source: llm

Description

flowd in Juniper Junos 10.4 before 10.4S14, 11.2 and 11.4 before 11.4R6-S2, and 12.1 before 12.1R6 on SRX devices, when certain Application Layer Gateways (ALGs) are enabled, allows remote attackers to cause a denial of service (daemon crash) via crafted TCP packets, aka PRs 727980, 806269, and 835593.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

http://kb.juniper.net/JSA10577

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/61122

Scores

EPSS 0.0237

EPSS Percentile 85.2%

Details

Status published

Products (16)

juniper/junos 10.4

juniper/junos 11.2

juniper/junos 11.4

juniper/junos 12.1

juniper/srx100

juniper/srx110

juniper/srx1400

juniper/srx210

juniper/srx220

juniper/srx240

... and 6 more

Published Jul 11, 2013

Tracked Since Feb 18, 2026