CVE-2013-5650

Опубликовано: 16 сент. 2013

Источник: nvd

CVSS2: 5.4

EPSS Низкий

Описание

Junos Pulse Secure Access Service (IVE) 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service (UAC) 4.1 before 4.1r8.1, 4.2 before 4.2r5, 4.3 before 4.3r6 and 4.4 before 4.4r3, when a hardware SSL acceleration card is enabled, allows remote attackers to cause a denial of service (device hang) via a crafted packet.

Ссылки

http://osvdb.org/97241
http://secunia.com/advisories/54776
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/87063
https://kb.juniper.net/InfoCenter/index?cmid=no&page=content&id=JSA10590
Vendor Advisory
http://osvdb.org/97241
http://secunia.com/advisories/54776
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/87063
https://kb.juniper.net/InfoCenter/index?cmid=no&page=content&id=JSA10590
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:juniper:junos_pulse_secure_access_service:7.1:*:*:*:*:*:*:*

cpe:2.3:a:juniper:junos_pulse_secure_access_service:7.2:*:*:*:*:*:*:*

cpe:2.3:a:juniper:junos_pulse_secure_access_service:7.3:*:*:*:*:*:*:*

cpe:2.3:a:juniper:junos_pulse_secure_access_service:7.4:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:juniper:junos_pulse_access_control_service:4.1:*:*:*:*:*:*:*

cpe:2.3:a:juniper:junos_pulse_access_control_service:4.2:*:*:*:*:*:*:*

cpe:2.3:a:juniper:junos_pulse_access_control_service:4.3:*:*:*:*:*:*:*

cpe:2.3:a:juniper:junos_pulse_access_control_service:4.4:*:*:*:*:*:*:*

EPSS

Процентиль: 71%

0.0069

Низкий

5.4 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-49q8-f85j-7fq7

github

больше 3 лет назад