CVE-2014-3818
CVE-2014-3818 is a high-severity vulnerability in Juniper Junos with a CVSS 2.0 base score of 7.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-119.
Key facts
- Severity: High (CVSS 2.0 base score 7.8)
- EPSS exploit prediction: 2% (77th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-119
- Affected product: Juniper Junos
- Published:
- Last modified:
Description
Juniper Junos OS 9.1 through 11.4 before 11.4R11, 12.1 before R10, 12.1X44 before D40, 12.1X46 before D30, 12.1X47 before D11 and 12.147-D15, 12.1X48 before D41 and D62, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4-S2, 13.1X49 before D49, 13.1X50 before 30, 13.2 before R4, 13.2X50 before D20, 13.2X51 before D25, 13.2X52 before D15, 13.3 before R2, and 14.1 before R1, when supporting 4-byte AS numbers and a BGP peer does not, allows remote attackers to cause a denial of service (memory corruption and RDP routing process crash and restart) via crafted transitive attributes in a BGP UPDATE.
Frequently asked questions
- What is CVE-2014-3818?
- Juniper Junos OS 9.1 through 11.4 before 11.4R11, 12.1 before R10, 12.1X44 before D40, 12.1X46 before D30, 12.1X47 before D11 and 12.147-D15, 12.1X48 before D41 and D62, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4-S2, 13.1X49 before D49, 13.1X50 before 30, 13.2 before R4, 13.2X50 before D20, 13.2X51 before D25, 13.2X52 before D15, 13.3 before R2, and 14.1 before R1, when supporting 4-byte AS numbers and a BGP peer does not, allows remote attackers to cause a denial of service (memory corruption and RDP routing process crash and restart) via crafted transitive attributes in a BGP UPDATE.
- How severe is CVE-2014-3818?
- CVE-2014-3818 has a CVSS 2.0 base score of 7.8, rated high severity.
- Is CVE-2014-3818 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (77th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2014-3818?
- CVE-2014-3818 primarily affects Juniper Junos. In total, 34 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2014-3818?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- When was CVE-2014-3818 published?
- CVE-2014-3818 was published on 2014-10-14 and last updated on 2026-06-17.
References
- http://www.securitytracker.com/id/1031009
- https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10653
Affected products (34)
- cpe:2.3:o:juniper:junos:9.1:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:9.2:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:9.4:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:9.5:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:9.6:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:10.1:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:10.2:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:10.3:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:10.4:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:10.4r:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:10.4s:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:11.0:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:11.1:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:11.2:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:11.3:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:11.4:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1x44:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1x46:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1x47:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.1x48:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.2:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.2x50:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:12.3:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:13.1:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:13.1x49:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:13.1x50:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:13.2:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:13.2x50:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:13.2x51:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:13.2x52:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:13.3:*:*:*:*:*:*:*
- cpe:2.3:o:juniper:junos:14.1:*:*:*:*:*:*:*
More vulnerabilities in Juniper Junos
- CVE-2021-0248 — Critical (CVSS 10.0): This issue is not applicable to NFX NextGen Software. On NFX Series devices the use of Hard-coded Credentials in…
- CVE-2021-0211 — Critical (CVSS 10.0): An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing…
- CVE-2020-1614 — Critical (CVSS 10.0): A Use of Hard-coded Credentials vulnerability exists in the NFX250 Series for the vSRX Virtual Network Function (VNF)…
- CVE-2017-2343 — Critical (CVSS 10.0): The Integrated User Firewall (UserFW) feature was introduced in Junos OS version 12.1X47-D10 on the Juniper SRX Series…
- CVE-2013-4685 — Critical (CVSS 10.0): Buffer overflow in flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7, 12.1 before 12.1R6, and 12.1X44…
- CVE-2017-2349 — Critical (CVSS 9.9): A command injection vulnerability in the IDP feature of Juniper Networks Junos OS on SRX series devices potentially…
All CVEs affecting Juniper Junos →
Other CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) vulnerabilities
- CVE-2026-2778 — Critical (CVSS 10.0): Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in…
- CVE-2026-2776 — Critical (CVSS 10.0): Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software. This vulnerability…
- CVE-2025-1866 — Critical (CVSS 10.0): Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in warmcat libwebsockets allows…
- CVE-2022-27625 — Critical (CVSS 10.0): A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the…
- CVE-2022-27624 — Critical (CVSS 10.0): A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the…
- CVE-2020-11896 — Critical (CVSS 10.0): The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling.