CVE-2019-0011 - Junos OS: Kernel crash after processing specific incoming packet to the out of band management interface (CVE-2019-0011)

Back Back to CVE browser

MEDIUM

Junos OS: Kernel crash after processing specific incoming packet to the out of band management interface (CVE-2019-0011)

Published Jan 15, 2019

6.5

MEDIUM

CVSS 3.1

EPSS 0.64%

Description

The Junos OS kernel crashes after processing a specific incoming packet to the out of band management interface (such as fxp0, me0, em0, vme0) destined for another address. By continuously sending this type of packet, an attacker can repeatedly crash the kernel causing a sustained Denial of Service. Affected releases are Juniper Networks Junos OS: 17.2 versions prior to 17.2R1-S7, 17.2R3; 17.3 versions prior to 17.3R3-S3; 17.4 versions prior to 17.4R1-S4, 17.4R2; 17.2X75 versions prior to 17.2X75-D110; 18.1 versions prior to 18.1R2.

Affected products

Vendor Juniper Networks Product Junos OS Default
n/a
- Version
  17.2
  Status
  affected
  Constraints
  <17.2R1-S7, 17.2R3
- Version
  17.2X75
  Status
  affected
  Constraints
  <17.2X75-D110
- Version
  17.3
  Status
  affected
  Constraints
  <17.3R3-S3
- Version
  17.4
  Status
  affected
  Constraints
  <17.4R1-S4, 17.4R2
- Version
  18.1
  Status
  affected
  Constraints
  <18.1R2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Juniper Networks

Junos OS

n/a

Version	Status	Constraints
17.2	affected	<17.2R1-S7, 17.2R3
17.2X75	affected	<17.2X75-D110
17.3	affected	<17.3R3-S3
17.4	affected	<17.4R1-S4, 17.4R2
18.1	affected	<18.1R2

Remediation

Vendor solution

The following software releases have been updated to resolve this specific issue: Junos OS 17.2R1-S7, 17.2R3, 17.2X75-D110, 17.3R3-S3, 17.4R1-S4, 17.4R2, 18.1R2, 18.2R1, 18.2X75-D5, and all subsequent releases.

Weaknesses (0)

No CWE recorded.

References (2)

http://www.securityfocus.com/bid/106534
vdb-entryx_refsource_BIDBroken LinkThird Party AdvisoryVDB Entry
https://kb.juniper.net/JSA10911
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/106534		vdb-entryx_refsource_BIDBroken LinkThird Party AdvisoryVDB Entry
https://kb.juniper.net/JSA10911		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner juniper

Published Jan 15, 2019

Updated Sep 17, 2024

Reserved Oct 11, 2018

Link CVE-2019-0011

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-0011

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-0011