CVE-2019-0013: Junos OS: RPD crash upon receipt of malformed PIM packet

High severity · published Jan 15, 2019

CVE-2019-0013

Junos OS: RPD crash upon receipt of malformed PIM packet

7.5

CVSS

1.7%

EPSS

On KEV

Description

The routing protocol daemon (RPD) process will crash and restart when a specific invalid IPv4 PIM Join packet is received. While RPD restarts after a crash, repeated crashes can result in an extended Denial of Service (DoS) condition. This issue only affects IPv4 PIM. IPv6 PIM is unaffected by this vulnerability. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D77; 12.3X48 versions prior to 12.3X48-D77; 15.1 versions prior to 15.1F6-S10, 15.1R6-S6, 15.1R7; 15.1X49 versions prior to 15.1X49-D150; 15.1X53 versions prior to 15.1X53-D233, 15.1X53-D59; 16.1 versions prior to 16.1R3-S8, 16.1R4-S8, 16.1R7; 16.2 versions prior to 16.2R2-S6; 17.1 versions prior to 17.1R2-S6, 17.1R3; 17.2 versions prior to 17.2R2-S3, 17.2R3; 17.3 versions prior to 17.3R2-S4, 17.3R3; 17.4 versions prior to 17.4R2.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

None

Integrity

None

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)1.7% · higher than 77% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Junos OS · Juniper

12.1X46 before 12.1X46-D77; 12.3X48 before 12.3X48-D77; 15.1 before 15.1F6-S10, 15.1R6-S6, 15.1R7; 15.1X49 before 15.1X49-D150; 15.1X53 before 15.1X53-D233, 15.1X53-D59; 16.1 before 16.1R3-S8, 16.1R4-S8, 16.1R7; +5 more · source: vendor, NVD

Affected product

Junos OS

Juniper

All Junos OS CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2019-0013

CVE.org

https://www.cve.org/CVERecord?id=CVE-2019-0013

Third Party Advisory

http://www.securityfocus.com/bid/106519

Patch

https://kb.juniper.net/JSA10913