CVE-2013-4690
Juniper Junos 10.4-12.1X45 on SRX1400/SRX3400/SRX3600 - Information Disclosure via Uninitialized Memory
Title source: llmDescription
Juniper Junos 10.4 before 10.4S13, 11.4 before 11.4R7-S1, 12.1 before 12.1R5-S3, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on the SRX1400, SRX3400, and SRX3600 does not properly initialize memory locations used during padding of Ethernet packets, which allows remote attackers to obtain sensitive information by reading packet data, aka PR 829536, a related issue to CVE-2003-0001.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/95112
Vendor Advisory x_refsource_confirm
http://kb.juniper.net/JSA10579
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/85627
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/61123
Scores
EPSS
0.0039
EPSS Percentile
60.0%
Details
CWE
CWE-399
Status
published
Products (8)
juniper/junos
10.4
juniper/junos
11.4
juniper/junos
12.1
juniper/junos
12.1x44
juniper/junos
12.1x45
juniper/srx1400
juniper/srx3400
juniper/srx3600
Published
Jul 11, 2013
Tracked Since
Feb 18, 2026