CVE Vulnerabilities

CVE-2014-6383

Published: Jan 16, 2015 | Modified: Jan 26, 2015
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

The stateless firewall in Juniper Junos 13.3R3, 14.1R1, and 14.1R2, when using Trio-based PFE modules, does not properly match ports, which might allow remote attackers to bypass firewall rule.

Affected Software

Name Vendor Start Version End Version
Junos Juniper 13.3-r3 (including) 13.3-r3 (including)
Junos Juniper 14.1-r1 (including) 14.1-r1 (including)
Junos Juniper 14.2-r2 (including) 14.2-r2 (including)

References