Description (CNA)
An Improper Validation of Syntactic Correctness of Input vulnerability in the Web-Filtering module of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). If an SRX device configured for UTM Web-Filtering receives a specifically malformed SSL packet, this will cause an FPC crash and restart. This issue affects Junos OS on SRX Series: * 23.2 versions from 23.2R2-S2 before 23.2R2-S5, * 23.4 versions from 23.4R2-S1 before 23.4R2-S5, * 24.2 versions before 24.2R2-S2, * 24.4 versions before 24.4R1-S3, 24.4R2. Earlier versions of Junos are also affected, but no fix is available.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Juniper Networks / Junos OS | affected 23.2R2-S2 before 23.2R2-S5; affected 23.4R2-S1 before 23.4R2-S5; affected 24.2 before 24.2R2-S2; affected 24.4 before 24.4R1-S3, 24.4R2 |
CWE
CWE-1286
References
ADP enrichment
No English description supplied.
No references supplied.