PT-2019-3488 · Juniper Networks · Junos

Published 2019-10-09 · Updated 2021-07-21 · CVE-2019-0064

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Junos OS versions 18.2R3 through 19.2R1 on SRX 5000 Series

Description The issue is related to resource release errors in the Junos OS, which can be exploited by a remote attacker to cause a denial of service (DoS) by sending specially crafted TCP packets. This can lead to the flowd process crashing and restarting automatically. However, if the device receives a constant stream of these packets, it may result in an extended DoS condition.

Recommendations For versions 18.2R3, 18.4R2, and 19.2R1 on SRX 5000 Series, consider disabling the set security zones security-zone <zone> tcp-rst configuration to mitigate the risk of exploitation until a patch is available. Restrict access to the device to minimize the risk of receiving specially crafted TCP packets.

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2019-03663

CVE-2019-0064

Affected Products

Junos

References · 6

• https://bdu.fstec.ru/vul/2019-03663 · Security Note
• https://osv.dev/vulnerability/CVE-2019-0064 · Vendor Advisory
• https://kb.juniper.net/JSA10963 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-0064 · Security Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10963&cat=SIRT_1&actp=LIST · Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10963&cat=SIRT_1&actp=LIST · Note