VDB

CVE-2014-0616

CVE-2014-0616 PUBLISHED CVSS 7.099999904632568 HIGH

Juniper Junos 10.4 before 10.4R16, 11.4 before 11.4R10, 12.1R before 12.1R8-S2, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20, 12.1X46 before 12.1X46-D10, 12.2 before 12.2R7, 12.3 before 12.3R4-S2, 13.1 before 13.1R3-S1, 13.2 before 13.2R2, and 13.3 before 13.3R1 allows remote attackers to cause a denial of service (rdp crash) via a large BGP UPDATE message which immediately triggers a withdraw message to be sent, as demonstrated by a long AS_PATH and a large number of BGP Communities.

EPSS 0.61% · 70.0th percentile

Risk Scores

CVSS v2.0
7.099999904632568
EPSS Score
0.61%
70.0th percentile

Affected Products

VendorProductVersions
n/an/a*
juniperjunos11.4, 12.1r, 12.1x44

Timeline

  • Jan 14, 2014 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 20, 2022 EPSS Score
  • Jul 12, 2022 EPSS Score
  • Sep 3, 2022 EPSS Score
  • Oct 26, 2022 EPSS Score
  • Dec 17, 2022 EPSS Score
  • Feb 8, 2023 EPSS Score
  • Apr 1, 2023 EPSS Score
  • May 24, 2023 EPSS Score
  • Jul 15, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›