CVE-2019-0068

EPSS 1.31%
Veröffentlicht 09.10.2019 20:15:17
Zuletzt bearbeitet 21.11.2024 04:16:10
Erkennungen
Login

Junos OS: SRX Series: Denial of Service vulnerability in flowd due to multicast packets

The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending the specific multicast packets, an attacker can repeatedly crash the flowd process causing a sustained Denial of Service. This issue affects Juniper Networks Junos OS on SRX Series: 12.3X48 versions prior to 12.3X48-D90; 15.1X49 versions prior to 15.1X49-D180; 17.3 versions; 17.4 versions prior to 17.4R2-S5, 17.4R3; 18.1 versions prior to 18.1R3-S6; 18.2 versions prior to 18.2R2-S4, 18.2R3; 18.3 versions prior to 18.3R2-S1, 18.3R3; 18.4 versions prior to 18.4R2; 19.1 versions prior to 19.1R1-S1, 19.1R2.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 4

NVD 85 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Juniper ≫ Junos Version 12.3x48 Update d10

   Juniper ≫ Csrx Version -
   Juniper ≫ Srx100 Version -
   Juniper ≫ Srx110 Version -
   Juniper ≫ Srx1400 Version -
   Juniper ≫ Srx1500 Version -
   Juniper ≫ Srx210 Version -
   Juniper ≫ Srx220 Version -
   Juniper ≫ Srx240 Version -
   Juniper ≫ Srx300 Version -
   Juniper ≫ Srx320 Version -
   Juniper ≫ Srx340 Version -
   Juniper ≫ Srx3400 Version -
   Juniper ≫ Srx345 Version -
   Juniper ≫ Srx3600 Version -
   Juniper ≫ Srx4100 Version -
   Juniper ≫ Srx4200 Version -
   Juniper ≫ Srx4600 Version -
   Juniper ≫ Srx5400 Version -
   Juniper ≫ Srx550 Version -
   Juniper ≫ Srx550 Hm Version -
   Juniper ≫ Srx5600 Version -
   Juniper ≫ Srx5800 Version -
   Juniper ≫ Srx650 Version -
   Juniper ≫ Vsrx Version -

Juniper ≫ Junos Version 12.3x48 Update d15

Juniper ≫ Junos Version 12.3x48 Update d20

Juniper ≫ Junos Version 12.3x48 Update d25

Juniper ≫ Junos Version 12.3x48 Update d30

Juniper ≫ Junos Version 12.3x48 Update d35

Juniper ≫ Junos Version 12.3x48 Update d40

Juniper ≫ Junos Version 12.3x48 Update d45

Juniper ≫ Junos Version 12.3x48 Update d50

Juniper ≫ Junos Version 12.3x48 Update d55

Juniper ≫ Junos Version 12.3x48 Update d60

Juniper ≫ Junos Version 12.3x48 Update d65

Juniper ≫ Junos Version 12.3x48 Update d70

Juniper ≫ Junos Version 12.3x48 Update d75

Juniper ≫ Junos Version 12.3x48 Update d80

Juniper ≫ Junos Version 12.3x48 Update d85

Juniper ≫ Junos Version 15.1x49 Update d10

Juniper ≫ Junos Version 15.1x49 Update d100

Juniper ≫ Junos Version 15.1x49 Update d110

Juniper ≫ Junos Version 15.1x49 Update d120

Juniper ≫ Junos Version 15.1x49 Update d130

Juniper ≫ Junos Version 15.1x49 Update d140

Juniper ≫ Junos Version 15.1x49 Update d150

Juniper ≫ Junos Version 15.1x49 Update d160

Juniper ≫ Junos Version 15.1x49 Update d170

Juniper ≫ Junos Version 15.1x49 Update d20

Juniper ≫ Junos Version 15.1x49 Update d30

Juniper ≫ Junos Version 15.1x49 Update d35

Juniper ≫ Junos Version 15.1x49 Update d40

Juniper ≫ Junos Version 15.1x49 Update d45

Juniper ≫ Junos Version 15.1x49 Update d50

Juniper ≫ Junos Version 15.1x49 Update d55

Juniper ≫ Junos Version 15.1x49 Update d60

Juniper ≫ Junos Version 15.1x49 Update d65

Juniper ≫ Junos Version 15.1x49 Update d70

Juniper ≫ Junos Version 15.1x49 Update d75

Juniper ≫ Junos Version 15.1x49 Update d80

Juniper ≫ Junos Version 15.1x49 Update d90

Juniper ≫ Junos Version 17.3 Update -

Juniper ≫ Junos Version 17.3 Update r2

Juniper ≫ Junos Version 17.3 Update r2-s1

Juniper ≫ Junos Version 17.3 Update r2-s2

Juniper ≫ Junos Version 17.3 Update r3-s1

Juniper ≫ Junos Version 17.3 Update r3-s2

Juniper ≫ Junos Version 17.3 Update r3-s3

Juniper ≫ Junos Version 17.3 Update r3-s4

Juniper ≫ Junos Version 17.3 Update r3-s5

Juniper ≫ Junos Version 17.3 Update r3-s6

Juniper ≫ Junos Version 17.4 Update -

Juniper ≫ Junos Version 17.4 Update r1

Juniper ≫ Junos Version 17.4 Update r1-s1

Juniper ≫ Junos Version 17.4 Update r1-s2

Juniper ≫ Junos Version 17.4 Update r1-s4

Juniper ≫ Junos Version 17.4 Update r2

Juniper ≫ Junos Version 17.4 Update r2-s1

Juniper ≫ Junos Version 17.4 Update r2-s3

Juniper ≫ Junos Version 17.4 Update r2-s4

Juniper ≫ Junos Version 18.1 Update -

Juniper ≫ Junos Version 18.1 Update r2

Juniper ≫ Junos Version 18.1 Update r2-s1

Juniper ≫ Junos Version 18.1 Update r2-s2

Juniper ≫ Junos Version 18.1 Update r2-s4

Juniper ≫ Junos Version 18.1 Update r3

Juniper ≫ Junos Version 18.1 Update r3-s2

Juniper ≫ Junos Version 18.1 Update r3-s3

Juniper ≫ Junos Version 18.1 Update r3-s4

Juniper ≫ Junos Version 18.1 Update r3-s5

Juniper ≫ Junos Version 18.2 Update -

Juniper ≫ Junos Version 18.2 Update r1-s5

Juniper ≫ Junos Version 18.2 Update r2-s1

Juniper ≫ Junos Version 18.2 Update r2-s2

Juniper ≫ Junos Version 18.2 Update r2-s3

Juniper ≫ Junos Version 18.3 Update -

Juniper ≫ Junos Version 18.3 Update r1

Juniper ≫ Junos Version 18.3 Update r1-s1

Juniper ≫ Junos Version 18.3 Update r1-s2

Juniper ≫ Junos Version 18.3 Update r1-s3

Juniper ≫ Junos Version 18.3 Update r2

Juniper ≫ Junos Version 18.4 Update -

Juniper ≫ Junos Version 18.4 Update r1

Juniper ≫ Junos Version 18.4 Update r1-s2

Juniper ≫ Junos Version 18.4 Update r1-s3

Juniper ≫ Junos Version 18.4 Update r1-s4

Juniper ≫ Junos Version 19.1 Update -

Juniper ≫ Junos Version 19.1 Update r1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.31%	0.669

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P
Juniper	6.5	2.8	3.6	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-754 Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

https://kb.juniper.net/JSA10968

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-0068

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-0068

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-0068

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2019-0068