CVE-2019-0014: Junos OS: QFX and PTX Series: FPC process crashes after J-Flow processes a malformed packet

High severity · published Jan 15, 2019

CVE-2019-0014

Junos OS: QFX and PTX Series: FPC process crashes after J-Flow processes a malformed packet

7.5

CVSS

1.7%

EPSS

On KEV

Description

On QFX and PTX Series, receipt of a malformed packet for J-Flow sampling might crash the FPC (Flexible PIC Concentrator) process which causes all interfaces to go down. By continuously sending the offending packet, an attacker can repeatedly crash the FPC process causing a sustained Denial of Service (DoS). This issue affects both IPv4 and IPv6 packet processing. Affected releases are Juniper Networks Junos OS on QFX and PTX Series: 17.4 versions prior to 17.4R2-S1, 17.4R3; 18.1 versions prior to 18.1R3-S1; 18.2 versions prior to 18.2R1-S3, 18.2R2; 17.2X75 versions prior to 17.2X75-D91, 17.2X75-D100.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

None

Integrity

None

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)1.7% · higher than 77% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Junos OS · Juniper

17.4 before 17.4R2-S1, 17.4R3; 18.1 before 18.1R3-S1, 18.1R4; 18.2 before 18.2R1-S3, 18.2R2; 17.2X75 before 17.2X75-D91, 17.2X75-D100 · source: vendor, NVD

Affected product

Junos OS

Juniper

All Junos OS CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2019-0014

CVE.org

https://www.cve.org/CVERecord?id=CVE-2019-0014

Third Party Advisory

http://www.securityfocus.com/bid/106556

Mitigation

https://kb.juniper.net/JSA10914