CVE-2019-0059 - Junos OS: The routing protocol process (rpd) may crash and generate core files upon receipt of specific valid BGP states from a peered host.

Back Back to CVE browser

HIGH

Junos OS: The routing protocol process (rpd) may crash and generate core files upon receipt of specific valid BGP states from a peered host.

Published Oct 9, 2019

7.5

HIGH

CVSS 3.1

EPSS 1.32%

Description

A memory leak vulnerability in the of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending specific commands from a peered BGP host and having those BGP states delivered to the vulnerable device. This issue affects: Juniper Networks Junos OS: 18.1 versions prior to 18.1R2-S4, 18.1R3-S1; 18.1X75 all versions. Versions before 18.1R1 are not affected.

Affected products

Vendor Juniper Networks Product Junos OS Default
n/a
- Version
  18.1
  Status
  affected
  Constraints
  <18.1R2-S4, 18.1R3-S1
- Version
  18.1X75 all versions
  Status
  affected
  Constraints
  -
- Version
  18.2X75-D5
  Status
  unaffected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Juniper Networks

Junos OS

n/a

Version	Status	Constraints
18.1	affected	<18.1R2-S4, 18.1R3-S1
18.1X75 all versions	affected	-
18.2X75-D5	unaffected	-

Remediation

Vendor solution

The following software releases have been updated to resolve this specific issue: 18.1R2-S4, 18.1R3-S1, 18.2X75-D5, 18.2R1, and all subsequent releases.

Weaknesses (2)

CWE-400

Uncontrolled Resource Consumption

CWE-401