PT-2019-3596 · Juniper Networks · Junos

Publicado

2019-10-09

·

Atualizado

2021-02-05

·

CVE-2019-0075

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on SRX Series versions prior to 12.3X48-D80 Juniper Networks Junos OS on SRX Series versions prior to 15.1X49-D160 Juniper Networks Junos OS on SRX Series versions prior to 17.3R3-S7 Juniper Networks Junos OS on SRX Series versions prior to 17.4R2-S8 Juniper Networks Junos OS on SRX Series versions prior to 17.4R3 Juniper Networks Junos OS on SRX Series versions prior to 18.1R3-S8 Juniper Networks Junos OS on SRX Series versions prior to 18.2R2 Juniper Networks Junos OS on SRX Series versions prior to 18.3R2
Description A vulnerability in the srxpfe process on Protocol Independent Multicast (PIM) enabled SRX series devices may lead to crash of the srxpfe process and an FPC reboot while processing PIM messages. Sustained receipt of these packets may lead to an extended denial of service condition.
Recommendations For versions prior to 12.3X48-D80, update to 12.3X48-D80 or later. For versions prior to 15.1X49-D160, update to 15.1X49-D160 or later. For versions prior to 17.3R3-S7, update to 17.3R3-S7 or later. For versions prior to 17.4R2-S8, update to 17.4R2-S8 or later. For versions prior to 17.4R3, update to 17.4R3 or later. For versions prior to 18.1R3-S8, update to 18.1R3-S8 or later. For versions prior to 18.2R2, update to 18.2R2 or later. For versions prior to 18.3R2, update to 18.3R2 or later.

Correção

Resource Exhaustion

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

BDU:2019-03806
CVE-2019-0075

Produtos afetados

Junos