CVE-2014-6385

Description

Juniper Junos 11.4 before 11.4R13, 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D15, 12.2 before 12.2R9, 12.3R7 before 12.3R7-S1, 12.3 before 12.3R8, 13.1 before 13.1R5, 13.2 before 13.2R6, 13.3 before 13.3R4, 14.1 before 14.1R2, and 14.2 before 14.2R1 allows remote attackers to cause a denial of service (kernel crash and restart) via a crafted fragmented OSPFv3 packet with an IPsec Authentication Header (AH).

Risk Information

Base Score
7.5
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.384

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2014-6385,CVE-2016-4921 are fixed in junos 11.4r13NCM
Vulnerabilities CVE-2014-6384,CVE-2014-6385,CVE-2015-3002,CVE-2015-3003 are fixed in junos 12.1x44-d45NCM
Vulnerabilities CVE-2014-6385,CVE-2015-3002,CVE-2015-3003 are fixed in junos 12.1x46-d30NCM
Vulnerabilities CVE-2014-6384,CVE-2014-6385,CVE-2015-3002 are fixed in junos 12.1x47-d15NCM
Multiple Vulnerabilities are fixed in junos 12.2r9NCM
Vulnerabilities CVE-2014-6385 are fixed in junos 12.3r7-s1NCM
Vulnerabilities CVE-2014-6385 are fixed in junos 13.1r5NCM
Multiple Vulnerabilities are fixed in junos 13.2r6NCM
Vulnerabilities CVE-2014-6385 are fixed in junos 13.3r4NCM
Vulnerabilities CVE-2014-6385 are fixed in junos 14.1r2NCM
Multiple Vulnerabilities are fixed in junos 14.2r1NCM
CVE-2014-6385NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234