bugtraq - [FFRRA-20131213] Crafted ICMP ECHO REQUEST can cause denial of service on Juniper SSG20

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <201401220816.s0M8GcHA019819@sf01web1.securityfocus.com>
Date: Wed, 22 Jan 2014 08:16:38 GMT
From: research-feedback@...i.jp
To: bugtraq@...urityfocus.com
Subject: [FFRRA-20131213] Crafted ICMP ECHO REQUEST can cause denial of
 service on Juniper SSG20

##############################################################
   FFRI, Inc. Security Advisory

   Crafted packet can cause denial of service on
   Juniper SSG20

   2014/01/14
##############################################################

=== Summary ===
Crafted ICMP ECHO REQUEST can cause denial of service on
Juniper SSG20

=== Severity ===
Middle

=== Affected Products ===
Juniper SSG20 (Screen OS Firmware Version 6.1.0r5.0)

=== Potential Security Impact ===
Denial of Service

=== Solution ===
Enable the Ping of Death screen

=== Detailed Description ===


== Time Table ==
2011/06/01 The vulnerability was reported to IPA(Information-technology
           Promotion Agency)
2013/12/13 JVN #28436508 released

=== Credits ===
This vulnerability was discovered by Shuichiro Suzuki of FFRI.

=== Reference ===
CVE No. : CVE-2013-6958
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6958

Mozilla Foundation Security Advisory :
https://www.mozilla.org/security/announce/2013/mfsa2013-33.html

FFRI Advisory URL:
http://www.ffri.jp/cgi-bin/advisory/advisory.cgi?type=release&id=FFRRA-20131213

=== About FFRI ===
FFRI is a leading security products and service vendor in Japan 
providing innovative security software and vulnerability research 
information. Our commitment is to secure our IT-driven society by
protecting information system from unpredictable threats.

http://www.ffri.jp
research-feedback@...i.jp

=== Copyright ===
2007 - 2014 FFRI, Inc. All rights reserved.