Published: 15/01/2019 Updated: 29/09/2020

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.9 | Impact Score: 3.6 | Exploitability Score: 2.2

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, a reachable assertion failure occurs, causing the routing protocol daemon (rpd) process to crash with a core file being generated. Affected releases are Juniper Networks Junos OS: 12.1X46 versions before 12.1X46-D77 on SRX Series; 12.3 versions before 12.3R12-S10; 12.3X48 versions before 12.3X48-D70 on SRX Series; 14.1X53 versions before 14.1X53-D47 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100; 15.1 versions before 15.1R3; 15.1F versions before 15.1F3; 15.1X49 versions before 15.1X49-D140 on SRX Series; 15.1X53 versions before 15.1X53-D59 on EX2300/EX3400.

Vulnerable Product	Search on Vulmon	Subscribe to Product
juniper junos 12.1x46
juniper junos 12.3
juniper junos 12.3x48
juniper junos 14.1x53
juniper junos 15.1
juniper junos 15.1x49
juniper junos 15.1x53

Before you slink off to the pub, be sure to patch these 19 serious vulns in Juniper Networks kit

The Register • Richard Chirgwin • 10 Jan 2019

Happy New Year from the Gin Palace

Juniper Networks has had its first big bug day in months, with 19 patches announced covering everything from third-party package catchups to critical errors in password handling. For the sake of organisation, let's pick up patches in the Junos OS first (there being so many patches, The Register will focus on those rated "High" and "Critical"). First on the critical list is CVE-2019-0006, which affects Junos OS 14.1X53, 15.1, and 15.1X53 running on EX, QFX and MX units. A crafted HTTP packet can ...

CVE-2019-0003

Vulnerability Summary

Vulnerability Trend

Recent Articles

References

Vulmon Search

About

Products

Connect