CVE-2019-0002 Junos OS: EX2300 and EX3400 series: Certain stateless firewall filter rules might not take effect

On EX2300 and EX3400 series, stateless firewall filter configuration that uses the action 'policer' in combination with other actions might not take effect. When this issue occurs, the output of the command: show pfe filter hw summary will not show the entry for: RACL group Affected releases are...

CVE-2019-0001 Junos OS: MX Series: uncontrolled recursion and crash in Broadband Edge subscriber management daemon (bbe-smgd).

Receipt of a malformed packet on MX Series devices with dynamic vlan configuration can trigger an uncontrolled recursion loop in the Broadband Edge subscriber management daemon bbe-smgd, and lead to high CPU usage and a crash of the bbe-smgd service. Repeated receipt of the same packet can result...

CVE-2019-0001

CVE-2019-0001 affects Juniper Networks Junos OS on MX Series with dynamic VLANs. A malformed packet can trigger an uncontrolled recursion in the Broadband Edge subscriber management daemon (bbe-smgd), causing high CPU and a crash, with repeated packets leading to extended DoS. Affected Junos rele...

CVE-2019-0005

CVE-2019-0005 affects Juniper Junos OS on EX and QFX series (EX2300/3400/4600; QFX3K/5K). The vulnerability is that firewall filter configuration cannot match IPv6 extension headers, potentially allowing IPv6 packets that should be blocked to be forwarded; IPv4 filtering is unaffected. Affected r...

CVE-2019-0003: Reachable Assertion

When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, a reachable assertion failure occurs, causing the routing protocol daemon rpd process to crash with a core file being generated. Affected...

CVE-2019-0007: Use of Insufficiently Random Values

The vMX Series software uses a predictable IP ID Sequence Number. This leaves the system as well as clients connecting through the device susceptible to a family of attacks which rely on the use of predictable IP ID sequence numbers as their base method of attack. This issue was found during...

CVE-2019-0013: Undefined Security Weakness

The routing protocol daemon RPD process will crash and restart when a specific invalid IPv4 PIM Join packet is received. While RPD restarts after a crash, repeated crashes can result in an extended Denial of Service DoS condition. This issue only affects IPv4 PIM. IPv6 PIM is unaffected by this...

CVE-2019-0012: Undefined Security Weakness

A Denial of Service DoS vulnerability in BGP in Juniper Networks Junos OS configured as a VPLS PE allows an attacker to craft a specific BGP message to cause the routing protocol daemon rpd process to crash and restart. While rpd restarts after a crash, repeated crashes can result in an extended...

CVE-2019-0001: Uncontrolled Recursion

Receipt of a malformed packet on MX Series devices with dynamic vlan configuration can trigger an uncontrolled recursion loop in the Broadband Edge subscriber management daemon bbe-smgd, and lead to high CPU usage and a crash of the bbe-smgd service. Repeated receipt of the same packet can result...

CVE-2019-0006: Use of Uninitialized Resource

A certain crafted HTTP packet can trigger an uninitialized function pointer deference vulnerability in the Packet Forwarding Engine manager fxpc on all EX, QFX and MX Series devices in a Virtual Chassis configuration. This issue can result in a crash of the fxpc daemon or may potentially lead to...

PT-2019-1363

Name of the Vulnerable Software and Affected Versions Junos OS on SRX Series versions 12.3X48 through 12.3X48-D74 Junos OS on SRX Series versions 15.1X49 through 15.1X49-D149 Junos OS on SRX Series versions 17.3 through 17.3R2 Junos OS on SRX Series versions 17.4 through 17.4R1 Junos OS on SRX...

CVE-2019-0005: Allocation of Resources Without Limits or Throttling

On EX2300, EX3400, EX4600, QFX3K and QFX5K series, firewall filter configuration cannot perform packet matching on any IPv6 extension headers. This issue may allow IPv6 packets that should have been blocked to be forwarded. IPv4 packet filtering is unaffected by this vulnerability. Affected...

CVE-2019-0015: Insufficient Session Expiration

A vulnerability in the SRX Series Service Gateway allows deleted dynamic VPN users to establish dynamic VPN connections until the device is rebooted. A deleted dynamic VPN connection should be immediately disallowed from establishing new VPN connections. Due to an error in token caching, deleted...

CVE-2019-0009: Undefined Security Weakness

On EX2300 and EX3400 series, high disk I/O operations may disrupt the communication between the routing engine RE and the packet forwarding engine PFE. In a virtual chassis VC deployment, this issue disrupts communication between the VC members. This issue does not affect other Junos platforms...

CVE-2019-0002: Incomplete Filtering of Multiple Instances of Special Elements

On EX2300 and EX3400 series, stateless firewall filter configuration that uses the action 'policer' in combination with other actions might not take effect. When this issue occurs, the output of the command: show pfe filter hw summary will not show the entry for: RACL group Affected releases are...

CVE-2019-0014: Undefined Security Weakness

On QFX and PTX Series, receipt of a malformed packet for J-Flow sampling might crash the FPC Flexible PIC Concentrator process which causes all interfaces to go down. By continuously sending the offending packet, an attacker can repeatedly crash the FPC process causing a sustained Denial of Servi...

CVE-2019-0011: Undefined Security Weakness

The Junos OS kernel crashes after processing a specific incoming packet to the out of band management interface such as fxp0, me0, em0, vme0 destined for another address. By continuously sending this type of packet, an attacker can repeatedly crash the kernel causing a sustained Denial of Service...

CVE-2019-0010: Allocation of Resources Without Limits or Throttling

An SRX Series Service Gateway configured for Unified Threat Management UTM may experience a system crash with the error message "mbuf exceed" -- an indication of memory buffer exhaustion -- due to the receipt of crafted HTTP traffic. Each crafted HTTP packet inspected by UTM consumes mbufs which...

Juniper SRX Series Junos OS Denial of Service Vulnerability

Juniper SRX Series is an SRX Series firewall appliance from Juniper Networks, Inc. Junos OS is the operating system that runs on it. A security vulnerability exists in Junos OS versions 12.1X46, 12.3X48, and 15.1X49 on the Juniper SRX Series. An attacker could exploit this vulnerability with...

Junos OS: Multiple vulnerabilities in libxml2 (JSA10916)

According to its self-reported version number, the remote Juniper Junos device is affected by a Multiple vulnerabilities in libxml2: - Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.CVE-2016-4448 - Th...