← Back

CVE-2019-0003

nvd nist
Published: Jan 15, 2019Modified: Nov 21, 2024

JSON object

Loading...
5.9
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.2 / Impact: 3.6
Source: NVD

Description

When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, a reachable assertion failure occurs, causing the routing protocol daemon (rpd) process to crash with a core file being generated. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D77 on SRX Series; 12.3 versions prior to 12.3R12-S10; 12.3X48 versions prior to 12.3X48-D70 on SRX Series; 14.1X53 versions prior to 14.1X53-D47 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100; 15.1 versions prior to 15.1R3; 15.1F versions prior to 15.1F3; 15.1X49 versions prior to 15.1X49-D140 on SRX Series; 15.1X53 versions prior to 15.1X53-D59 on EX2300/EX3400.

Affected (90)

Products: Juniper: Junos
1 product
Junos
Configuration A
12 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Version 12.1x46
Version 12.1x46 d10
Version 12.1x46 d15
Version 12.1x46 d20
Version 12.1x46 d25
Version 12.1x46 d30
Version 12.1x46 d35
Version 12.1x46 d40
Version 12.1x46 d45
Version 12.1x46 d50
Version 12.1x46 d55
Version 12.1x46 d60
Configuration B
12 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Version 12.3
Version 12.3 r11
Version 12.3 r12
Version 12.3 r1
Version 12.3 r2
Version 12.3 r3
Version 12.3 r4
Version 12.3 r5
Version 12.3 r6
Version 12.3 r7
Version 12.3 r8
Version 12.3 r9
Configuration C
11 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Version 12.3x48 d10
Version 12.3x48 d15
Version 12.3x48 d20
Version 12.3x48 d25
Version 12.3x48 d30
Version 12.3x48 d35
Version 12.3x48 d40
Version 12.3x48 d45
Version 12.3x48 d55
Version 12.3x48 d60
Version 12.3x48 d65
Configuration D
15 vulnerable · 12 platform
Vulnerable SoftwareAffected Versions
Juniper
Version 14.1x53
Version 14.1x53 d10
Version 14.1x53 d15
Version 14.1x53 d16
Version 14.1x53 d25
Version 14.1x53 d26
Version 14.1x53 d27
Version 14.1x53 d30
Version 14.1x53 d35
Version 14.1x53 d40
Version 14.1x53 d42
Version 14.1x53 d43
Version 14.1x53 d44
Version 14.1x53 d45
Version 14.1x53 d46
Running on/withPlatform Versions
Juniper
Ex2200/vc
All versions
Juniper
Ex3200
All versions
Juniper
Ex3300/vc
All versions
Juniper
Ex4200
All versions
Juniper
Ex4300
All versions
Juniper
Ex4550/vc
All versions
Juniper
Ex4600
All versions
Juniper
Ex6200
All versions
Juniper
Ex8200/vc (xre)
All versions
Juniper
Qfx3500
All versions
Juniper
Qfx3600
All versions
Juniper
Qfx5100
All versions
Configuration E
11 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Version 15.1 f1
Version 15.1 f2
Version 15.1 f3
Version 15.1 f4
Version 15.1 f5
Version 15.1 f6
Version 15.1 f7
Version 15.1 r1
Version 15.1 r2
Version 15.1 r7-s2
Version 15.1 r7-s3
Configuration F
18 vulnerable · 20 platform
Vulnerable SoftwareAffected Versions
Juniper
Version 15.1x49 d100
Version 15.1x49 d10
Version 15.1x49 d110
Version 15.1x49 d120
Version 15.1x49 d130
Version 15.1x49 d20
Version 15.1x49 d30
Version 15.1x49 d35
Version 15.1x49 d40
Version 15.1x49 d45
Version 15.1x49 d50
Version 15.1x49 d55
Version 15.1x49 d60
Version 15.1x49 d65
Version 15.1x49 d70
Version 15.1x49 d75
Version 15.1x49 d80
Version 15.1x49 d90
Running on/withPlatform Versions
Juniper
Srx100
All versions
Juniper
Srx110
All versions
Juniper
Srx1400
All versions
Juniper
Srx1500
All versions
Juniper
Srx210
All versions
Juniper
Srx220
All versions
Juniper
Srx240
All versions
Juniper
Srx300
All versions
Juniper
Srx320
All versions
Juniper
Srx340
All versions
Juniper
Srx3400
All versions
Juniper
Srx345
All versions
Juniper
Srx3600
All versions
Juniper
Srx4100
All versions
Juniper
Srx4200
All versions
Juniper
Srx5400
All versions
Juniper
Srx550
All versions
Juniper
Srx5600
All versions
Juniper
Srx5800
All versions
Juniper
Srx650
All versions
Configuration G
11 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Juniper
Version 15.1x53 d20
Version 15.1x53 d210
Version 15.1x53 d21
Version 15.1x53 d25
Version 15.1x53 d30
Version 15.1x53 d32
Version 15.1x53 d33
Version 15.1x53 d34
Version 15.1x53 d40
Version 15.1x53 d45
Version 15.1x53 d56
Running on/withPlatform Versions
Juniper
Ex2300
All versions
Juniper
Ex3400
All versions

References (4)

Source: sirt@juniper.net
Third Party AdvisoryVDB Entry
Source: sirt@juniper.net
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.