CVE-2014-6382

Name of the Vulnerable Software and Affected Versions Juniper MX Series routers with Junos versions 13.3R3 through 13.3Rx before 13.3R6 Juniper MX Series routers with Junos versions 14.1 before 14.1R4 Juniper MX Series routers with Junos versions 14.1X50 before 14.1X50-D70 Juniper MX Series routers with Junos versions 14.2 before 14.2R2

Description The issue allows remote attackers to cause a denial of service by sending a crafted PAP Authenticate-Request after the PPPoE Discovery and LCP phase are complete, resulting in a jpppd crash and restart.

Recommendations For Juniper MX Series routers with Junos versions 13.3R3 through 13.3Rx before 13.3R6, update to version 13.3R6 or later. For Juniper MX Series routers with Junos versions 14.1 before 14.1R4, update to version 14.1R4 or later. For Juniper MX Series routers with Junos versions 14.1X50 before 14.1X50-D70, update to version 14.1X50-D70 or later. For Juniper MX Series routers with Junos versions 14.2 before 14.2R2, update to version 14.2R2 or later.