Test ID:	1.3.6.1.4.1.25623.1.0.105944
Category:	JunOS Local Security Checks
Title:	Juniper Networks Junos OS OSPFv3 Denial of Service Vulnerability
Summary:	Junos OS with OSPFv3 IPSec authentication enabled is vulnerable to a;Denial of Service attack.
Description:	Summary: Junos OS with OSPFv3 IPSec authentication enabled is vulnerable to a Denial of Service attack. Vulnerability Insight: When a specially crafted fragmented OSPFv3 packet containing an IPsec Authentication Header (AH) is received, it may trigger a kernel crash causing the RE to restart. Vulnerability Impact: An attacker may trigger a kernel crash causing the RE to restart. Repeated receipt of the crafted fragment can represent an extended denial of service on the router. Affected Software/OS: Junos OS 11.4, 12.1, 12.2, 12.3, 13.1, 13.2, 13.3 and 14.1 Solution: New builds of Junos OS software are available from Juniper. As a workaround discontinue use of IPSec Authentication Header option in OSPFv3. CVSS Score: 6.1 CVSS Vector: AV:A/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-6385 BugTraq ID: 72072 http://www.securityfocus.com/bid/72072
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.