PT-2019-1976 · Juniper Networks · Junos

Publicado 2019-04-10 · Atualizado 2020-09-29 · CVE-2019-0031

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 17.4R2 Junos OS versions prior to 18.1R2

Description The issue is related to the jdhcpd daemon in Junos OS, which can cause a memory resource consumption problem when receiving specific IPv6 DHCP packets. This can lead to a Denial of Service (DoS) condition, impacting both IPv4 and IPv6 requests. Additionally, some clients may not have their IPv6 Identity Association (IA) address and network tables agreed upon by the jdhcpd daemon after a failover event, resulting in denied interfaces and IP addresses.

Recommendations For Junos OS versions prior to 17.4R2, update to version 17.4R2 or later to resolve the issue. For Junos OS versions prior to 18.1R2, update to version 18.1R2 or later to resolve the issue.

Correção

DoS

Allocation of Resources Without Limits

Resource Exhaustion

Enumeração de Fraquezas

CWE-770

CWE-400

CWE-399

Identificadores relacionados

BDU:2019-01666

CVE-2019-0031

Produtos afetados

Junos

Referências · 7

• https://bdu.fstec.ru/vul/2019-01666 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-0031 · Aviso do Fabricante
• http://securityfocus.com/bid/107874 · Nota
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10920&cat=SIRT_1&actp=LIST&showDraft=false · Nota
• https://kb.juniper.net/JSA10920 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-0031 · Nota de Segurança
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10920&cat=SIRT_1&actp=LIST&showDraft=false · Nota