CVE-2019-0064

Опубликовано: 09 окт. 2019

Источник: nvd

CVSS3: 7.5

CVSS2: 4.3

EPSS Низкий

Описание

On SRX5000 Series devices, if 'set security zones security-zone tcp-rst' is configured, the flowd process may crash when a specific TCP packet is received by the device and triggers a new session. The process restarts automatically. However, receipt of a constant stream of these TCP packets may result in an extended Denial of Service (DoS) condition on the device. This issue affects Juniper Networks Junos OS: 18.2R3 on SRX 5000 Series; 18.4R2 on SRX 5000 Series; 19.2R1 on SRX 5000 Series.

Ссылки

https://kb.juniper.net/JSA10963
Vendor Advisory
https://kb.juniper.net/JSA10963
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*

Одно из

cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*

cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*

cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*

EPSS

Процентиль: 60%

0.00389

Низкий

7.5 High

CVSS3

4.3 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-6vpf-6mrv-x8cr

github

больше 3 лет назад

On SRX5000 Series devices, if 'set security zones security-zone <zone> tcp-rst' is configured, the flowd process may crash when a specific TCP packet is received by the device and triggers a new session. The process restarts automatically. However, receipt of a constant stream of these TCP packets may result in an extended Denial of Service (DoS) condition on the device. This issue affects Juniper Networks Junos OS: 18.2R3 on SRX 5000 Series; 18.4R2 on SRX 5000 Series; 19.2R1 on SRX 5000 Series.

BDU:2019-03663