CVE-2014-6377

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-10-14 · updated 2026-06-17
Weakness: CWE-399

Description

Juniper JunosE before 13.3.3p0-1, 14.x before 14.3.2, and 15.x before 15.1.0, when DEBUG severity icmpTraffic logging is enabled, allows remote attackers to cause a denial of service (SRP reset) via a crafted ICMP packet to the (1) interface or (2) loopback IP address, which triggers a processor exception in ip_RxData_8.

Affected products

Juniper Junos E: through 13.3.2; 13.3.0, 13.3.1, 14.3.0, 14.3.1

References

http://www.securityfocus.com/bid/70368
http://www.securitytracker.com/id/1031006
https://exchange.xforce.ibmcloud.com/vulnerabilities/96907
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10651
http://www.securityfocus.com/bid/70368
http://www.securitytracker.com/id/1031006
https://exchange.xforce.ibmcloud.com/vulnerabilities/96907
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10651

Get alerted when CVE-2014-6377 or the next vulnerability affects your stack