CVE-2014-6383Juniper Junos vulnerability

CWE-174 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
0.4%
top 36.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJan 16
Latest updateMay 17

Description

The stateless firewall in Juniper Junos 13.3R3, 14.1R1, and 14.1R2, when using Trio-based PFE modules, does not properly match ports, which might allow remote attackers to bypass firewall rule.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

NVDjuniper/junos13.3, 14.1, 14.2+2

🔴Vulnerability Details

1
GHSA
GHSA-jx85-w9pw-mqhr: The stateless firewall in Juniper Junos 132022-05-17

📋Vendor Advisories

1
Juniper
CVE-2014-6383: The stateless firewall in Juniper Junos 13.3R3, 14.1R1, and 14.1R2, when using Trio-based PFE modules, does not properly match ports, which might allo2015-01-16

💬Community

1
Bugzilla
CVE-2013-6383 Kernel: AACRAID Driver compat IOCTL missing capability check2013-11-22