PT-2019-1973 · Juniper Networks · Junos

Published 2019-04-10 · Updated 2021-10-28 · CVE-2019-0044

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.1X46-D82 Junos OS versions prior to 12.3X48-D80 Junos OS versions prior to 15.1X49-D160

Description The issue exists due to insufficient input validation in the implementation of the fxp0 interface. Exploitation of this issue may allow a remote attacker to cause a denial of service. Receipt of a specific packet on the out-of-band management interface fxp0 may cause the system to crash and restart. An attacker can repetitively crash the rpd process by continuously sending a specially crafted packet to the fxp0 interface, causing prolonged denial of service.

Recommendations For versions prior to 12.1X46-D82, update to version 12.1X46-D82 or later. For versions prior to 12.3X48-D80, update to version 12.3X48-D80 or later. For versions prior to 15.1X49-D160, update to version 15.1X49-D160 or later. As a temporary workaround, consider restricting access to the fxp0 interface to minimize the risk of exploitation.

Fix

DoS

RCE

Improper Resource Release

Weakness Enumeration

CWE-20

CWE-404

Related Identifiers

BDU:2019-01663

CVE-2019-0044

Affected Products

Junos

References · 7

• https://kb.juniper.net/JSA10936 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-0044 · Security Note
• https://osv.dev/vulnerability/CVE-2019-0044 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01663 · Security Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10936&cat=SIRT_1&actp=LIST&showDraft=false · Note
• http://securityfocus.com/bid/107872 · Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10936&cat=SIRT_1&actp=LIST&showDraft=false · Note