PT-2019-1972 · Juniper Networks · Junos

Published 2019-04-10 · Updated 2019-04-12 · CVE-2019-0033

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 12.1X46-D25 through 12.1X46-D70 Juniper Networks Junos OS version 12.1X46-D73 Juniper Networks Junos OS versions 12.3X48 prior to 12.3X48-D50 Juniper Networks Junos OS versions 15.1X49 prior to 15.1X49-D75

Description A firewall bypass issue in the proxy ARP service allows an attacker to cause a high CPU condition, leading to a Denial of Service (DoS). This issue affects only IPv4.

Recommendations For Juniper Networks Junos OS versions 12.1X46-D25 through 12.1X46-D70, update to version 12.1X46-D71 or later. For Juniper Networks Junos OS version 12.1X46-D73, update to a later version. For Juniper Networks Junos OS versions 12.3X48 prior to 12.3X48-D50, update to version 12.3X48-D50 or later. For Juniper Networks Junos OS versions 15.1X49 prior to 15.1X49-D75, update to version 15.1X49-D75 or later.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2019-01662

CVE-2019-0033

Affected Products

Junos

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2019-0033 · Security Note
• https://kb.juniper.net/JSA10922 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-0033 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01662 · Security Note
• http://securityfocus.com/bid/107882 · Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10922&cat=SIRT_1&actp=LIST&showDraft=false · Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10922&cat=SIRT_1&actp=LIST&showDraft=false · Note