CVE-2019-0012 Junos OS: rpd crash on VPLS PE upon receipt of specific BGP message

A Denial of Service DoS vulnerability in BGP in Juniper Networks Junos OS configured as a VPLS PE allows an attacker to craft a specific BGP message to cause the routing protocol daemon rpd process to crash and restart. While rpd restarts after a crash, repeated crashes can result in an extended...

CVE-2019-0011 Junos OS: Kernel crash after processing specific incoming packet to the out of band management interface (CVE-2019-0011)

The Junos OS kernel crashes after processing a specific incoming packet to the out of band management interface such as fxp0, me0, em0, vme0 destined for another address. By continuously sending this type of packet, an attacker can repeatedly crash the kernel causing a sustained Denial of Service...

CVE-2019-0015 Junos OS: SRX Series: Deleted dynamic VPN users are allowed to establish VPN connections until reboot

A vulnerability in the SRX Series Service Gateway allows deleted dynamic VPN users to establish dynamic VPN connections until the device is rebooted. A deleted dynamic VPN connection should be immediately disallowed from establishing new VPN connections. Due to an error in token caching, deleted...

CVE-2019-0010 Junos OS: SRX Series: Crafted HTTP traffic may cause UTM to consume all mbufs, leading to Denial of Service

An SRX Series Service Gateway configured for Unified Threat Management UTM may experience a system crash with the error message "mbuf exceed" -- an indication of memory buffer exhaustion -- due to the receipt of crafted HTTP traffic. Each crafted HTTP packet inspected by UTM consumes mbufs which...

CVE-2019-0005

On EX2300, EX3400, EX4600, QFX3K and QFX5K series, firewall filter configuration cannot perform packet matching on any IPv6 extension headers. This issue may allow IPv6 packets that should have been blocked to be forwarded. IPv4 packet filtering is unaffected by this vulnerability. Affected...

CVE-2019-0009 Junos OS: EX2300 and EX3400: High disk I/O operations may disrupt the communication between RE and PFE

On EX2300 and EX3400 series, high disk I/O operations may disrupt the communication between the routing engine RE and the packet forwarding engine PFE. In a virtual chassis VC deployment, this issue disrupts communication between the VC members. This issue does not affect other Junos platforms...

CVE-2019-0010

Summary: CVE-2019-0010 affects Juniper SRX Series with Junos OS UTM enabled. Crafted HTTP traffic can exhaust mbufs in SPU/JMPI, causing a system crash (DoS) and failover. The issue is observed when HTTP AV inspection is enabled; WEB Filtering alone is unaffected. Affected products/versions (per ...

CVE-2019-0005

CVE-2019-0005 affects Juniper Junos OS on EX and QFX series (EX2300/3400/4600; QFX3K/5K). The vulnerability is that firewall filter configuration cannot match IPv6 extension headers, potentially allowing IPv6 packets that should be blocked to be forwarded; IPv4 filtering is unaffected. Affected r...

CVE-2019-0014

CVE-2019-0014 affects Juniper Networks Junos OS on QFX and PTX Series. A malformed packet used by J-Flow sampling can crash the FPC (Flexible PIC Concentrator) process, causing a Denial of Service across all interfaces. The issue impacts both IPv4 and IPv6 packet processing. Affected releases inc...

CVE-2019-0001

CVE-2019-0001 affects Juniper Networks Junos OS on MX Series with dynamic VLANs. A malformed packet can trigger an uncontrolled recursion in the Broadband Edge subscriber management daemon (bbe-smgd), causing high CPU and a crash, with repeated packets leading to extended DoS. Affected Junos rele...

CVE-2019-0007 Junos OS: vMX series: Predictable IP ID sequence numbers vulnerability

The vMX Series software uses a predictable IP ID Sequence Number. This leaves the system as well as clients connecting through the device susceptible to a family of attacks which rely on the use of predictable IP ID sequence numbers as their base method of attack. This issue was found during...

CVE-2019-0014 Junos OS: QFX and PTX Series: FPC process crashes after J-Flow processes a malformed packet

On QFX and PTX Series, receipt of a malformed packet for J-Flow sampling might crash the FPC Flexible PIC Concentrator process which causes all interfaces to go down. By continuously sending the offending packet, an attacker can repeatedly crash the FPC process causing a sustained Denial of Servi...

CVE-2019-0002 Junos OS: EX2300 and EX3400 series: Certain stateless firewall filter rules might not take effect

On EX2300 and EX3400 series, stateless firewall filter configuration that uses the action 'policer' in combination with other actions might not take effect. When this issue occurs, the output of the command: show pfe filter hw summary will not show the entry for: RACL group Affected releases are...

CVE-2019-0012

CVE-2019-0012 describes a DoS in Juniper Junos OS for VPLS PE: processing a crafted BGP message crashes the rpd daemon, potentially causing extended DoS due to repeated restarts. Affected are PE routers with BGP Auto discovery for LDP VPLS. Vulnerable releases include multiple Junos OS versions l...

CVE-2019-0009

Technical details about CVE-2019-0009 are not publicly available in the provided Connected documents. Monitor for updates from the sources referenced (e.g., Juniper JSA/JPD, CVE feeds) for new information or fixes.

CVE-2019-0011

Junos OS kernel crash vulnerability CVE-2019-0011 affects the Junos OS kernel when processing a crafted packet to an out-of-band management interface (fxp0, me0, em0, vme0) destined for another address, enabling an attacker on the adjacent network to trigger repeated kernel crashes and a sustaine...

CVE-2019-0006 Junos OS: EX, QFX and MX series: Packet Forwarding Engine manager (FXPC) process crashes due to a crafted HTTP packet in a Virtual Chassis configuration

A certain crafted HTTP packet can trigger an uninitialized function pointer deference vulnerability in the Packet Forwarding Engine manager fxpc on all EX, QFX and MX Series devices in a Virtual Chassis configuration. This issue can result in a crash of the fxpc daemon or may potentially lead to...

CVE-2019-0003 Junos OS: A flowspec BGP update with a specific term-order causes routing protocol daemon (rpd) process to crash with a core.

When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, a reachable assertion failure occurs, causing the routing protocol daemon rpd process to crash with a core file being generated. Affected...

CVE-2019-0013

The CVE-2019-0013 issue affects Junos OS RPD when handling malformed IPv4 PIM Join packets. Affected Junos releases include 12.1X46 (prior to -D77), 12.3X48 (prior to -D77), 15.1 line (prior to 15.1F6-S10, 15.1R6-S6, 15.1R7), 15.1X49 (prior to -D150), 15.1X53 (prior to -D233, -D59), 16.1 (prior t...

CVE-2019-0013 Junos OS: RPD crash upon receipt of malformed PIM packet

The routing protocol daemon RPD process will crash and restart when a specific invalid IPv4 PIM Join packet is received. While RPD restarts after a crash, repeated crashes can result in an extended Denial of Service DoS condition. This issue only affects IPv4 PIM. IPv6 PIM is unaffected by this...