CVE-2014-6380 Denial of service in n/a

High 7.8 Published 14 Oct 2014 Updated 6 Aug 2024

Remote attackers can cause denial of service on Juniper Junos devices via crafted fragmented packets when specific routing protocols are configured.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2014-6380?

CVE-2014-6380 is a high-severity denial of service vulnerability in Juniper Junos, published on 14 Oct 2014. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Juniper Junos 11.4 before R11, 12.1 before R9, 12.1X44 before D30, 12.1X45 before D20, 12.1X46 before D15, 12.1X47 before D10, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4, 13.1X49 before D55, 13.1X50 before D30, 13.2 before R4, 13.2X50 before D20, 13.2X51 before D15, 13.2X52 before D15, 13.3 before R1, when using an em interface to connect to a certain internal network, allows remote attackers to cause a denial of service (em driver bock and FPC reset or "go offline") via a series of crafted (1) CLNP fragmented packets, when clns-routing or ESIS is configured, or (2) IPv4 or (3) IPv6 fragmented packets.

Which versions are affected by CVE-2014-6380?

It affects 1 product.

Products include Juniper Junos.

How do I fix CVE-2014-6380?

No fix has been published for CVE-2014-6380 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2014-6380 being exploited?

There is no known exploitation of CVE-2014-6380 in the wild and no public exploit code.

All Juniper Junos vulnerabilities

Sources

Also known as GHSA-xw4x-fmj4-2fg7.