CVE-2014-3817: Juniper Junos 11.4 before 11.4R12, 12.1X44 before 12.1X44-D32, 12.1X45 before 12.1X45-D25, 12.1X46 before 1...

Security readout for executives and security teams

This affects Juniper SRX firewalls in a specific IPv4-to-IPv6 NAT translation configuration. A remote attacker could send a crafted packet that makes the traffic-handling process hang or crash, causing a denial of service. The business impact is potential firewall instability or traffic interruption, not data theft based on the provided sources. Exposure is limited to Juniper SRX Series devices running the affected Junos versions with IPv4-to-IPv6 NAT protocol translation enabled. Devices processing untrusted or internet-originated traffic through that translation path are the main concern. Treat as a targeted availability risk for Juniper SRX environments using IPv4-to-IPv6 NAT translation. Prioritize verification and upgrades on edge or high-availability firewalls where downtime would affect customers, partners, or core network services. Mitigation focus: Upgrade affected SRX devices to the fixed Junos releases or later vendor-supported versions.; Review Juniper JSA10635 for vendor-approved fixes, workarounds, and operational guidance.; Identify SRX devices using IPv4-to-IPv6 NAT protocol translation and prioritize them..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.