CVE-2013-4688 — Juniper Junos vulnerability

3 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.5%
top 34.36%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Juniper JunosJuniper Junos OSJuniper SRX Series
Timeline
PublishedJul 11
Latest updateMay 17

Description

flowd in Juniper Junos 10.4 before 10.4R11 on SRX devices, when the MSRPC Application Layer Gateway (ALG) is enabled, allows remote attackers to cause a denial of service (daemon crash) via crafted MSRPC requests, aka PR 772834.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages3 packages

▶NVDjuniper/junos10.4

🔴Vulnerability Details

1
GHSA
GHSA-wwfx-wjhq-pq3h: flowd in Juniper Junos 10↗2022-05-17
▶

📋Vendor Advisories

1
Juniper
CVE-2013-4688: flowd in Juniper Junos 10.4 before 10.4R11 on SRX devices, when the MSRPC Application Layer Gateway (ALG) is enabled, allows remote attackers to cause↗2013-07-11
▶