CVE-2019-0008
A certain sequence of valid BGP or IPv6 BFD packets may trigger a stack based buffer overflow in the Junos OS Packet Forwarding Engine manager (FXPC) process on QFX5000 series, EX4300, EX4600 devices.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (4.54%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A certain sequence of valid BGP or IPv6 BFD packets may trigger a stack based buffer overflow in the Junos OS Packet Forwarding Engine manager (FXPC) process on QFX5000 series, EX4300, EX4600 devices. This issue can result in a crash of the fxpc daemon or may potentially lead to remote code execution. Affected releases are Juniper Networks Junos OS on QFX 5000 series, EX4300, EX4600 are: 14.1X53; 15.1X53 versions prior to 15.1X53-D235; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R3-S2, 17.3R4; 17.4 versions prior to 17.4R2-S1, 17.4R3; 18.1 versions prior to 18.1R3-S1, 18.1R4; 18.2 versions prior to 18.2R2; 18.2X75 versions prior to 18.2X75-D30; 18.3 versions prior to 18.3R2.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 4.54% probability · 91th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-121, CWE-787
- Affected
- juniper/junos
- Source
- sirt@juniper.net
References
- http://www.securityfocus.com/bid/107897Third Party Advisory, VDB Entry
- https://kb.juniper.net/JSA10930Vendor Advisory
- http://www.securityfocus.com/bid/107897Third Party Advisory, VDB Entry
- https://kb.juniper.net/JSA10930Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.