PT-2019-1361 · Juniper Networks · Junos

Published 2019-01-09 · Updated 2021-07-21 · CVE-2019-0009

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Junos OS on EX2300 and EX3400 series versions 15.1X53 prior to 15.1X53-D590 Junos OS on EX2300 and EX3400 series versions 18.1 prior to 18.1R2-S2, 18.1R3 Junos OS on EX2300 and EX3400 series versions 18.2 prior to 18.2R2

Description The issue is related to errors in input-output operations, which can disrupt communication between the routing engine (RE) and the packet forwarding engine (PFE) due to high disk I/O operations. In a virtual chassis (VC) deployment, this disruption affects communication between VC members. This issue does not affect other Junos platforms.

Recommendations For Junos OS on EX2300 and EX3400 series version 15.1X53, update to version 15.1X53-D590 or later. For Junos OS on EX2300 and EX3400 series version 18.1, update to version 18.1R2-S2, 18.1R3 or later. For Junos OS on EX2300 and EX3400 series version 18.2, update to version 18.2R2 or later.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2019-00720

CVE-2019-0009

Affected Products

Junos

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2019-0009 · Security Note
• https://osv.dev/vulnerability/CVE-2019-0009 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-00720 · Security Note
• https://kb.juniper.net/JSA10909 · Vendor Advisory
• https://t.me/cvenotify/10498 · Telegram Post
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10909&cat=SIRT_1&actp=LIST · Note
• http://securityfocus.com/bid/106548 · Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10909&cat=SIRT_1&actp=LIST · Note