Buffer Overflow in flowd when processing HTTP protocol messages
A remote attacker may execute arbitrary code using crafted HTTP requests.
New builds of Junos OS software are available from Juniper.
A buffer overflow vulnerability affects the flowd process while processing HTTP protocol messages. This issue can be triggered when the SRX Series device is acting as a Unified Access Control (UAC) enforcer in a UAC network with Captive Portal enabled.
Junos OS on SRX Series running 10.4, 11.4 12.1, or 12.1X44.
Check the OS build.