CVE-2019-0068

EPSS 0.28%
Published 09.10.2019 20:15:17
Last modified 21.11.2024 04:16:10
Source sirt@juniper.net
Teams watchlist Login
Open Login

The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending the specific multicast packets, an attacker can repeatedly crash the flowd process causing a sustained Denial of Service. This issue affects Juniper Networks Junos OS on SRX Series: 12.3X48 versions prior to 12.3X48-D90; 15.1X49 versions prior to 15.1X49-D180; 17.3 versions; 17.4 versions prior to 17.4R2-S5, 17.4R3; 18.1 versions prior to 18.1R3-S6; 18.2 versions prior to 18.2R2-S4, 18.2R3; 18.3 versions prior to 18.3R2-S1, 18.3R3; 18.4 versions prior to 18.4R2; 19.1 versions prior to 19.1R1-S1, 19.1R2.

Affected products Warnungen 0 Metrics 4 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Juniper ≫ Junos Version12.3x48 Updated10

   Juniper ≫ Csrx Version-
   Juniper ≫ Srx100 Version-
   Juniper ≫ Srx110 Version-
   Juniper ≫ Srx1400 Version-
   Juniper ≫ Srx1500 Version-
   Juniper ≫ Srx210 Version-
   Juniper ≫ Srx220 Version-
   Juniper ≫ Srx240 Version-
   Juniper ≫ Srx300 Version-
   Juniper ≫ Srx320 Version-
   Juniper ≫ Srx340 Version-
   Juniper ≫ Srx3400 Version-
   Juniper ≫ Srx345 Version-
   Juniper ≫ Srx3600 Version-
   Juniper ≫ Srx4100 Version-
   Juniper ≫ Srx4200 Version-
   Juniper ≫ Srx4600 Version-
   Juniper ≫ Srx5400 Version-
   Juniper ≫ Srx550 Version-
   Juniper ≫ Srx550 Hm Version-
   Juniper ≫ Srx5600 Version-
   Juniper ≫ Srx5800 Version-
   Juniper ≫ Srx650 Version-
   Juniper ≫ Vsrx Version-

Juniper ≫ Junos Version12.3x48 Updated15

Juniper ≫ Junos Version12.3x48 Updated20

Juniper ≫ Junos Version12.3x48 Updated25

Juniper ≫ Junos Version12.3x48 Updated30

Juniper ≫ Junos Version12.3x48 Updated35

Juniper ≫ Junos Version12.3x48 Updated40

Juniper ≫ Junos Version12.3x48 Updated45

Juniper ≫ Junos Version12.3x48 Updated50

Juniper ≫ Junos Version12.3x48 Updated55

Juniper ≫ Junos Version12.3x48 Updated60

Juniper ≫ Junos Version12.3x48 Updated65

Juniper ≫ Junos Version12.3x48 Updated70

Juniper ≫ Junos Version12.3x48 Updated75

Juniper ≫ Junos Version12.3x48 Updated80

Juniper ≫ Junos Version12.3x48 Updated85

Juniper ≫ Junos Version15.1x49 Updated10

Juniper ≫ Junos Version15.1x49 Updated100

Juniper ≫ Junos Version15.1x49 Updated110

Juniper ≫ Junos Version15.1x49 Updated120

Juniper ≫ Junos Version15.1x49 Updated130

Juniper ≫ Junos Version15.1x49 Updated140

Juniper ≫ Junos Version15.1x49 Updated150

Juniper ≫ Junos Version15.1x49 Updated160

Juniper ≫ Junos Version15.1x49 Updated170

Juniper ≫ Junos Version15.1x49 Updated20

Juniper ≫ Junos Version15.1x49 Updated30

Juniper ≫ Junos Version15.1x49 Updated35

Juniper ≫ Junos Version15.1x49 Updated40

Juniper ≫ Junos Version15.1x49 Updated45

Juniper ≫ Junos Version15.1x49 Updated50

Juniper ≫ Junos Version15.1x49 Updated55

Juniper ≫ Junos Version15.1x49 Updated60

Juniper ≫ Junos Version15.1x49 Updated65

Juniper ≫ Junos Version15.1x49 Updated70

Juniper ≫ Junos Version15.1x49 Updated75

Juniper ≫ Junos Version15.1x49 Updated80

Juniper ≫ Junos Version15.1x49 Updated90

Juniper ≫ Junos Version17.3 Update-

Juniper ≫ Junos Version17.3 Updater2

Juniper ≫ Junos Version17.3 Updater2-s1

Juniper ≫ Junos Version17.3 Updater2-s2

Juniper ≫ Junos Version17.3 Updater3-s1

Juniper ≫ Junos Version17.3 Updater3-s2

Juniper ≫ Junos Version17.3 Updater3-s3

Juniper ≫ Junos Version17.3 Updater3-s4

Juniper ≫ Junos Version17.3 Updater3-s5

Juniper ≫ Junos Version17.3 Updater3-s6

Juniper ≫ Junos Version17.4 Update-

Juniper ≫ Junos Version17.4 Updater1

Juniper ≫ Junos Version17.4 Updater1-s1

Juniper ≫ Junos Version17.4 Updater1-s2

Juniper ≫ Junos Version17.4 Updater1-s4

Juniper ≫ Junos Version17.4 Updater2

Juniper ≫ Junos Version17.4 Updater2-s1

Juniper ≫ Junos Version17.4 Updater2-s3

Juniper ≫ Junos Version17.4 Updater2-s4

Juniper ≫ Junos Version18.1 Update-

Juniper ≫ Junos Version18.1 Updater2

Juniper ≫ Junos Version18.1 Updater2-s1

Juniper ≫ Junos Version18.1 Updater2-s2

Juniper ≫ Junos Version18.1 Updater2-s4

Juniper ≫ Junos Version18.1 Updater3

Juniper ≫ Junos Version18.1 Updater3-s2

Juniper ≫ Junos Version18.1 Updater3-s3

Juniper ≫ Junos Version18.1 Updater3-s4

Juniper ≫ Junos Version18.1 Updater3-s5

Juniper ≫ Junos Version18.2 Update-

Juniper ≫ Junos Version18.2 Updater1-s5

Juniper ≫ Junos Version18.2 Updater2-s1

Juniper ≫ Junos Version18.2 Updater2-s2

Juniper ≫ Junos Version18.2 Updater2-s3

Juniper ≫ Junos Version18.3 Update-

Juniper ≫ Junos Version18.3 Updater1

Juniper ≫ Junos Version18.3 Updater1-s1

Juniper ≫ Junos Version18.3 Updater1-s2

Juniper ≫ Junos Version18.3 Updater1-s3

Juniper ≫ Junos Version18.3 Updater2

Juniper ≫ Junos Version18.4 Update-

Juniper ≫ Junos Version18.4 Updater1

Juniper ≫ Junos Version18.4 Updater1-s2

Juniper ≫ Junos Version18.4 Updater1-s3

Juniper ≫ Junos Version18.4 Updater1-s4

Juniper ≫ Junos Version19.1 Update-

Juniper ≫ Junos Version19.1 Updater1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.28%	0.482

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P
sirt@juniper.net	6.5	2.8	3.6	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-754 Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

https://kb.juniper.net/JSA10968

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-0068

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-0068

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-0068

EUVD