CVE-2019-0019 - BGP packets can trigger rpd crash when BGP tracing is enabled.

Back Back to CVE browser

HIGH

BGP packets can trigger rpd crash when BGP tracing is enabled.

Published Apr 10, 2019

7.5

HIGH

CVSS 3.1

EPSS 1.14%

Description

When BGP tracing is enabled an incoming BGP message may cause the Junos OS routing protocol daemon (rpd) process to crash and restart. While rpd restarts after a crash, repeated crashes can result in an extended DoS condition. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S4, 16.1R7-S5; 16.2 versions prior to 16.2R2-S9, 16.2R3; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3-S1; 17.3 versions prior to 17.3R3-S3, 17.3R3-S4, 17.3R4; 17.4 versions prior to 17.4R1-S7, 17.4R2-S3, 17.4R2-S4, 17.4R3; 18.1 versions prior to 18.1R2-S4, 18.1R3-S4, 18.1R4; 18.2 versions prior to 18.2R2-S2, 18.2R2-S3, 18.2R3; 18.2X75 versions prior to 18.2X75-D40; 18.3 versions prior to 18.3R1-S3, 18.3R2; 18.4 versions prior to 18.4R1-S2, 18.4R2. This issue does not affect Junos releases prior to 16.1R1.

Affected products

Vendor Juniper Networks Product Junos OS Default
n/a
- Version
  16.1
  Status
  affected
  Constraints
  <16.1R7-S4, 16.1R7-S5
- Version
  16.2
  Status
  affected
  Constraints
  <16.2R2-S9, 16.2R3
- Version
  17.1
  Status
  affected
  Constraints
  <17.1R3
- Version
  17.2
  Status
  affected
  Constraints
  <17.2R3-S1
- Version
  17.3
  Status
  affected
  Constraints
  <17.3R3-S3, 17.3R3-S4, 17.3R4
- Version
  17.4
  Status
  affected
  Constraints
  <17.4R1-S7, 17.4R2-S3, 17.4R2-S4, 17.4R3
- Version
  18.1
  Status
  affected
  Constraints
  <18.1R2-S4, 18.1R3-S4, 18.1R4
- Version
  18.2
  Status
  affected
  Constraints
  <18.2R2-S2, 18.2R2-S3, 18.2R3
- Version
  18.2X75
  Status
  affected
  Constraints
  <18.2X75-D40
- Version
  18.3
  Status
  affected
  Constraints
  <18.3R1-S3, 18.3R2
- Version
  18.4
  Status
  affected
  Constraints
  <18.4R1-S2, 18.4R2
- Version
  all
  Status
  unaffected
  Constraints
  <16.1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Juniper Networks

Junos OS

n/a

Version	Status	Constraints
16.1	affected	<16.1R7-S4, 16.1R7-S5
16.2	affected	<16.2R2-S9, 16.2R3
17.1	affected	<17.1R3
17.2	affected	<17.2R3-S1
17.3	affected	<17.3R3-S3, 17.3R3-S4, 17.3R4
17.4	affected	<17.4R1-S7, 17.4R2-S3, 17.4R2-S4, 17.4R3
18.1	affected	<18.1R2-S4, 18.1R3-S4, 18.1R4
18.2	affected	<18.2R2-S2, 18.2R2-S3, 18.2R3
18.2X75	affected	<18.2X75-D40
18.3	affected	<18.3R1-S3, 18.3R2
18.4	affected	<18.4R1-S2, 18.4R2
all	unaffected	<16.1

Remediation

Vendor solution

The following software releases have been updated to resolve this specific issue: 16.1R7-S4, 16.1R7-S5, 16.2R2-S9, 16.2R3, 17.1R3, 17.2R3-S1, 17.3R3-S3, 17.3R3-S4, 17.3R4, 17.4R1-S7, 17.4R2-S3, 17.4R2-S4, 17.4R3, 18.1R2-S4, 18.1R3-S4, 18.1R4, 18.2R2-S2, 18.2R2-S3, 18.2R3, 18.2X75-D40, 18.3R1-S3, 18.3R2, 18.4R1-S2, 18.4R2, 19.1R1, and all subsequent releases.

Weaknesses (1)

CWE-404

Improper Resource Shutdown or Release