PT-2019-1972 · Juniper Networks · Junos

Publicado 2019-04-10 · Atualizado 2019-04-12 · CVE-2019-0033

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 12.1X46-D25 through 12.1X46-D70 Juniper Networks Junos OS version 12.1X46-D73 Juniper Networks Junos OS versions 12.3X48 prior to 12.3X48-D50 Juniper Networks Junos OS versions 15.1X49 prior to 15.1X49-D75

Description A firewall bypass issue in the proxy ARP service allows an attacker to cause a high CPU condition, leading to a Denial of Service (DoS). This issue affects only IPv4.

Recommendations For Juniper Networks Junos OS versions 12.1X46-D25 through 12.1X46-D70, update to version 12.1X46-D71 or later. For Juniper Networks Junos OS version 12.1X46-D73, update to a later version. For Juniper Networks Junos OS versions 12.3X48 prior to 12.3X48-D50, update to version 12.3X48-D50 or later. For Juniper Networks Junos OS versions 15.1X49 prior to 15.1X49-D75, update to version 15.1X49-D75 or later.

Correção

DoS

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

BDU:2019-01662

CVE-2019-0033

Produtos afetados

Junos

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2019-0033 · Nota de Segurança
• http://securityfocus.com/bid/107882 · Nota
• https://kb.juniper.net/JSA10922 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-0033 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-01662 · Nota de Segurança
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10922&cat=SIRT_1&actp=LIST&showDraft=false · Nota
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10922&cat=SIRT_1&actp=LIST&showDraft=false · Nota