CVE-2004-0468
CVE-2004-0468 is a medium-severity vulnerability in Juniper Junos with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 5.0)
- EPSS exploit prediction: 3% (87th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Juniper Junos
- Published:
- Last modified:
Description
Memory leak in Juniper JUNOS Packet Forwarding Engine (PFE) allows remote attackers to cause a denial of service (memory exhaustion and device reboot) via certain IPv6 packets.
Frequently asked questions
- What is CVE-2004-0468?
- Memory leak in Juniper JUNOS Packet Forwarding Engine (PFE) allows remote attackers to cause a denial of service (memory exhaustion and device reboot) via certain IPv6 packets.
- How severe is CVE-2004-0468?
- CVE-2004-0468 has a CVSS 2.0 base score of 5.0, rated medium severity.
- Is CVE-2004-0468 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (87th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2004-0468?
- CVE-2004-0468 affects Juniper Junos. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2004-0468?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2004-0468 published?
- CVE-2004-0468 was published on 2004-12-06 and last updated on 2026-06-16.
References
- http://www.jpcert.or.jp/at/2004/at040009.txt
- http://www.kb.cert.org/vuls/id/658859
- http://www.kb.cert.org/vuls/id/JSHA-6253CC
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16548
Affected products (1)
- cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*
More vulnerabilities in Juniper Junos
- CVE-2021-0248 — Critical (CVSS 10.0): This issue is not applicable to NFX NextGen Software. On NFX Series devices the use of Hard-coded Credentials in…
- CVE-2021-0211 — Critical (CVSS 10.0): An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing…
- CVE-2020-1614 — Critical (CVSS 10.0): A Use of Hard-coded Credentials vulnerability exists in the NFX250 Series for the vSRX Virtual Network Function (VNF)…
- CVE-2017-2343 — Critical (CVSS 10.0): The Integrated User Firewall (UserFW) feature was introduced in Junos OS version 12.1X47-D10 on the Juniper SRX Series…
- CVE-2013-4685 — Critical (CVSS 10.0): Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44…
- CVE-2017-2349 — Critical (CVSS 9.9): A command injection vulnerability in the IDP feature of Juniper Networks Junos OS on SRX series devices potentially…