PT-2019-3478 · Juniper Networks · Junos

Published 2019-10-09 · Updated 2021-10-28 · CVE-2019-0055

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 12.3X48-D61 Juniper Networks Junos OS versions prior to 15.1X49-D130 Juniper Networks Junos OS versions prior to 17.3R3 Juniper Networks Junos OS versions prior to 17.4R2

Description A vulnerability in the SIP ALG packet processing service allows an attacker to cause a Denial of Service (DoS) to the device by sending specific types of valid SIP traffic to the device. The flowd process crashes and generates a core dump while processing SIP ALG traffic, resulting in a sustained Denial of Service (DoS) condition. This issue is due to insufficient input validation.

Recommendations For versions prior to 12.3X48-D61, update to version 12.3X48-D61 or later. For versions prior to 15.1X49-D130, update to version 15.1X49-D130 or later. For versions prior to 17.3R3, update to version 17.3R3 or later. For versions prior to 17.4R2, update to version 17.4R2 or later.

Fix

DoS

RCE

Weakness Enumeration

CWE-130

CWE-20

Related Identifiers

BDU:2019-03653

CVE-2019-0055

Affected Products

Junos

References · 7

• https://juniper.net/documentation/en_US/junos/topics/topic-map/security-sip-alg.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-0055 · Security Note
• https://osv.dev/vulnerability/CVE-2019-0055 · Vendor Advisory
• https://kb.juniper.net/JSA10953 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-03653 · Security Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10953&cat=SIRT_1&actp=LIST · Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10953&cat=SIRT_1&actp=LIST · Note