Skip to content
OpenAdvisories
Medium · 6.5 CVE-2019-0011 EUVD-2019-0818GHSA-cx8m-q3j5-7c8p

Junos OS: Kernel crash after processing specific incoming packet to the out of band management interface (CVE-2019-0011)

Published Jan 15, 2019 · Updated Sep 17, 2024 · Assigned by juniper

Description

The Junos OS kernel crashes after processing a specific incoming packet to the out of band management interface (such as fxp0, me0, em0, vme0) destined for another address. By continuously sending this type of packet, an attacker can repeatedly crash the kernel causing a sustained Denial of Service. Affected releases are Juniper Networks Junos OS: 17.2 versions prior to 17.2R1-S7, 17.2R3; 17.3 versions prior to 17.3R3-S3; 17.4 versions prior to 17.4R1-S4, 17.4R2; 17.2X75 versions prior to 17.2X75-D110; 18.1 versions prior to 18.1R2.

Affected products

VendorProductAffectedFixed
Juniper Networks Junos OS 17.2 – < 17.2R1-S7, 17.2R3, 17.3 – < 17.3R3-S3, 17.4 – < 17.4R1-S4, 17.4R2, 17.2X75 – < 17.2X75-D110, 18.1 – < 18.1R2 17.2R1-S7, 17.2R3

References