Detections
Analytics

Juniper Junos GRE DoS (PSN-2013-04-917)

medium Nessus Plugin ID 66515

Language:

Synopsis

The remote device is missing a vendor-supplied security patch.

Description

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. Specially crafted GRE packets received on a multicast tunnel interface that are allowed to reach the routing engine can cause the kernel to crash. An unauthenticated attacker on the same subnet could exploit this to crash the host.

Solution

Apply the relevant Junos upgrade referenced in Juniper advisory PSN-2013-04-917.

See Also

http://www.nessus.org/u?c9a8e8ee

Plugin Details

Severity: Medium

ID: 66515

File Name: juniper_psn-2013-04-917.nasl

Version: 1.9

Type: combined

Published: 5/20/2013

Updated: 8/7/2018

Supported Sensors: Nessus

Vulnerability Information

CPE: cpe:/o:juniper:junos

Required KB Items: Host/Juniper/model, Host/Juniper/JUNOS/Version, Host/Juniper/JUNOS/BuildDate

Exploit Ease: No known exploits are available

Patch Publication Date: 4/8/2013

Vulnerability Publication Date: 4/8/2013

Reference Information

BID: 60016