CVE-2019-0068

Published: Oct 9, 2019Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending the specific multicast packets, an attacker can repeatedly crash the flowd process causing a sustained Denial of Service. This issue affects Juniper Networks Junos OS on SRX Series: 12.3X48 versions prior to 12.3X48-D90; 15.1X49 versions prior to 15.1X49-D180; 17.3 versions; 17.4 versions prior to 17.4R2-S5, 17.4R3; 18.1 versions prior to 18.1R3-S6; 18.2 versions prior to 18.2R2-S4, 18.2R3; 18.3 versions prior to 18.3R2-S1, 18.3R3; 18.4 versions prior to 18.4R2; 19.1 versions prior to 19.1R1-S1, 19.1R2.

Affected (85)

Products: Juniper: Junos

Juniper

1 product

Junos

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos	Version 12.3x48 d10
Juniper Junos	Version 12.3x48 d15
Juniper Junos	Version 12.3x48 d20
Juniper Junos	Version 12.3x48 d25
Juniper Junos	Version 12.3x48 d30
Juniper Junos	Version 12.3x48 d35
Juniper Junos	Version 12.3x48 d40
Juniper Junos	Version 12.3x48 d45
Juniper Junos	Version 12.3x48 d50
Juniper Junos	Version 12.3x48 d55
Juniper Junos	Version 12.3x48 d60
Juniper Junos	Version 12.3x48 d65
Juniper Junos	Version 12.3x48 d70
Juniper Junos	Version 12.3x48 d75
Juniper Junos	Version 12.3x48 d80
Juniper Junos	Version 12.3x48 d85

Configuration B

22 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos	Version 15.1x49 d100
Juniper Junos	Version 15.1x49 d10
Juniper Junos	Version 15.1x49 d110
Juniper Junos	Version 15.1x49 d120
Juniper Junos	Version 15.1x49 d130
Juniper Junos	Version 15.1x49 d140
Juniper Junos	Version 15.1x49 d150
Juniper Junos	Version 15.1x49 d160
Juniper Junos	Version 15.1x49 d170
Juniper Junos	Version 15.1x49 d20
Juniper Junos	Version 15.1x49 d30
Juniper Junos	Version 15.1x49 d35
Juniper Junos	Version 15.1x49 d40
Juniper Junos	Version 15.1x49 d45
Juniper Junos	Version 15.1x49 d50
Juniper Junos	Version 15.1x49 d55
Juniper Junos	Version 15.1x49 d60
Juniper Junos	Version 15.1x49 d65
Juniper Junos	Version 15.1x49 d70
Juniper Junos	Version 15.1x49 d75
Juniper Junos	Version 15.1x49 d80
Juniper Junos	Version 15.1x49 d90

Configuration C

10 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos	Version 17.3
Juniper Junos	Version 17.3 r2-s1
Juniper Junos	Version 17.3 r2-s2
Juniper Junos	Version 17.3 r2
Juniper Junos	Version 17.3 r3-s1
Juniper Junos	Version 17.3 r3-s2
Juniper Junos	Version 17.3 r3-s3
Juniper Junos	Version 17.3 r3-s4
Juniper Junos	Version 17.3 r3-s5
Juniper Junos	Version 17.3 r3-s6

Configuration D

9 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos	Version 17.4
Juniper Junos	Version 17.4 r1-s1
Juniper Junos	Version 17.4 r1-s2
Juniper Junos	Version 17.4 r1-s4
Juniper Junos	Version 17.4 r1
Juniper Junos	Version 17.4 r2-s1
Juniper Junos	Version 17.4 r2-s3
Juniper Junos	Version 17.4 r2-s4
Juniper Junos	Version 17.4 r2

Configuration E

10 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos	Version 18.1
Juniper Junos	Version 18.1 r2-s1
Juniper Junos	Version 18.1 r2-s2
Juniper Junos	Version 18.1 r2-s4
Juniper Junos	Version 18.1 r2
Juniper Junos	Version 18.1 r3-s2
Juniper Junos	Version 18.1 r3-s3
Juniper Junos	Version 18.1 r3-s4
Juniper Junos	Version 18.1 r3-s5
Juniper Junos	Version 18.1 r3

Configuration F

5 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos	Version 18.2
Juniper Junos	Version 18.2 r1-s5
Juniper Junos	Version 18.2 r2-s1
Juniper Junos	Version 18.2 r2-s2
Juniper Junos	Version 18.2 r2-s3

Configuration G

6 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos	Version 18.3
Juniper Junos	Version 18.3 r1-s1
Juniper Junos	Version 18.3 r1-s2
Juniper Junos	Version 18.3 r1-s3
Juniper Junos	Version 18.3 r1
Juniper Junos	Version 18.3 r2

Configuration H

5 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos	Version 18.4
Juniper Junos	Version 18.4 r1-s2
Juniper Junos	Version 18.4 r1-s3
Juniper Junos	Version 18.4 r1-s4
Juniper Junos	Version 18.4 r1

Configuration I

2 vulnerable · 24 platform

Vulnerable Software	Affected Versions
Juniper Junos	Version 19.1
Juniper Junos	Version 19.1 r1

Running on/with	Platform Versions
Juniper Csrx	All versions
Juniper Srx100	All versions
Juniper Srx110	All versions
Juniper Srx1400	All versions
Juniper Srx1500	All versions
Juniper Srx210	All versions
Juniper Srx220	All versions
Juniper Srx240	All versions
Juniper Srx300	All versions
Juniper Srx320	All versions
Juniper Srx340	All versions
Juniper Srx3400	All versions
Juniper Srx345	All versions
Juniper Srx3600	All versions
Juniper Srx4100	All versions
Juniper Srx4200	All versions
Juniper Srx4600	All versions
Juniper Srx5400	All versions
Juniper Srx550	All versions
Juniper Srx550 Hm	All versions
Juniper Srx5600	All versions
Juniper Srx5800	All versions
Juniper Srx650	All versions
Juniper Vsrx	All versions

Related CWEs

CWE-754

Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

References (2)

https://kb.juniper.net/JSA10968

Source: sirt@juniper.net

Vendor Advisory

https://kb.juniper.net/JSA10968

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.