PT-2019-3492 · Juniper Networks · Junos

Published 2019-10-09 · Updated 2021-02-05 · CVE-2019-0068

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.3X48-D90 Junos OS versions prior to 15.1X49-D180 Junos OS version 17.3 Junos OS versions prior to 17.4R2-S5 Junos OS versions prior to 17.4R3 Junos OS versions prior to 18.1R3-S6 Junos OS versions prior to 18.2R2-S4 Junos OS versions prior to 18.2R3 Junos OS versions prior to 18.3R2-S1 Junos OS versions prior to 18.3R3 Junos OS versions prior to 18.4R2 Junos OS versions prior to 19.1R1-S1 Junos OS versions prior to 19.1R2

Description The issue affects the SRX flowd process, which is responsible for packet forwarding. It may crash and restart when processing specific multicast packets. An attacker can cause a sustained Denial of Service by continuously sending these packets. The vulnerability exists due to insufficient input validation, allowing a remote attacker to cause a denial of service by sending specially crafted multicast packets.

Recommendations For versions prior to 12.3X48-D90, update to 12.3X48-D90 or later. For versions prior to 15.1X49-D180, update to 15.1X49-D180 or later. For version 17.3, update to a later version. For versions prior to 17.4R2-S5, update to 17.4R2-S5 or later. For versions prior to 17.4R3, update to 17.4R3 or later. For versions prior to 18.1R3-S6, update to 18.1R3-S6 or later. For versions prior to 18.2R2-S4, update to 18.2R2-S4 or later. For versions prior to 18.2R3, update to 18.2R3 or later. For versions prior to 18.3R2-S1, update to 18.3R2-S1 or later. For versions prior to 18.3R3, update to 18.3R3 or later. For versions prior to 18.4R2, update to 18.4R2 or later. For versions prior to 19.1R1-S1, update to 19.1R1-S1 or later. For versions prior to 19.1R2, update to 19.1R2 or later.

Fix

DoS

Improper Check for Exceptional Conditions

RCE

Weakness Enumeration

CWE-754

CWE-20

Related Identifiers

BDU:2019-03667

CVE-2019-0068

Affected Products

Junos

References · 6

• https://bdu.fstec.ru/vul/2019-03667 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-0068 · Security Note
• https://osv.dev/vulnerability/CVE-2019-0068 · Vendor Advisory
• https://kb.juniper.net/JSA10968 · Vendor Advisory
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10968&cat=SIRT_1&actp=LIST · Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10968&cat=SIRT_1&actp=LIST · Note