Description
Juniper Junos 11.4 before 11.4R13, 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D15, 12.2 before 12.2R9, 12.3R7 before 12.3R7-S1, 12.3 before 12.3R8, 13.1 before 13.1R5, 13.2 before 13.2R6, 13.3 before 13.3R4, 14.1 before 14.1R2, and 14.2 before 14.2R1 allows remote attackers to cause a denial of service (kernel crash and restart) via a crafted fragmented OSPFv3 packet with an IPsec Authentication Header (AH).
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/72072
Vendor Advisory x_refsource_confirm
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10668
Scores
EPSS
0.0038
EPSS Percentile
59.8%
Details
Status
published
Products (7)
juniper/junos
11.4 (13 CPE variants)
juniper/junos
12.1x44 (8 CPE variants)
juniper/junos
12.1x46 (5 CPE variants)
juniper/junos
12.1x47 (2 CPE variants)
juniper/junos
12.2 (9 CPE variants)
juniper/junos
12.3 (9 CPE variants)
juniper/junos
13.1 (4 CPE variants)
Published
Jan 16, 2015
Tracked Since
Feb 18, 2026