CVE-2014-3814

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-06-13 · updated 2026-06-17
Weakness: CWE-20

Description

The Juniper Networks NetScreen Firewall devices with ScreenOS before 6.3r17, when configured to use the internal DNS lookup client, allows remote attackers to cause a denial of service (crash and reboot) via a sequence of malformed packets to the device IP.

Affected products

Juniper Netscreen-5200: all versions
Juniper Netscreen-5400: all versions
Juniper Networks ScreenOS: through 6.3.0; 6.0.0, 6.1.0, 6.2.0

References

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10632
http://secunia.com/advisories/59026
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10632
http://secunia.com/advisories/59026

Get alerted when CVE-2014-3814 or the next vulnerability affects your stack