On QFX and PTX Series, receipt of a malformed packet for J-Flow sampling might crash the FPC (Flexible PIC Concentrator) process which causes all interfaces to go down. By continuously sending the offending packet, an attacker can repeatedly crash the FPC process causing a sustained Denial of Service (DoS). This issue affects both IPv4 and IPv6 packet processing. Affected releases are Juniper Networks Junos OS on QFX and PTX Series: 17.4 versions prior to 17.4R2-S1, 17.4R3; 18.1 versions prior to 18.1R3-S1; 18.2 versions prior to 18.2R1-S3, 18.2R2; 17.2X75 versions prior to 17.2X75-D91, 17.2X75-D100.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/106556 | Third Party Advisory VDB Entry |
| https://kb.juniper.net/JSA10914 | Mitigation Patch Vendor Advisory |
| http://www.securityfocus.com/bid/106556 | Third Party Advisory VDB Entry |
| https://kb.juniper.net/JSA10914 | Mitigation Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 04:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/106556 - Third Party Advisory, VDB Entry | |
| References | () https://kb.juniper.net/JSA10914 - Mitigation, Patch, Vendor Advisory |
Information
Published : 2019-01-15 21:29
Updated : 2024-11-21 04:16
NVD link : CVE-2019-0014
Mitre link : CVE-2019-0014
CVE.ORG link : CVE-2019-0014
JSON object : View
Products Affected
juniper
- qfx3500
- ptx10008
- qfx5210
- qfx5120
- qfx10016
- ptx10002
- ptx1000
- qfx10008
- qfx5200
- ptx5000
- junos
- qfx10002
- ptx3000
- qfx5110
- qfx5100
- ptx10016
- qfx3600
CWE
CWE-19
Data Processing Errors