CVE-2019-0014

Junos OS: QFX and PTX Series: FPC process crashes after J-Flow processes a malformed packet

State: Published
Severity: 7.5 High
Published: Jan 15, 2019
Updated: Sep 17, 2024
Reserved: Oct 11, 2018

Description

On QFX and PTX Series, receipt of a malformed packet for J-Flow sampling might crash the FPC (Flexible PIC Concentrator) process which causes all interfaces to go down. By continuously sending the offending packet, an attacker can repeatedly crash the FPC process causing a sustained Denial of Service (DoS). This issue affects both IPv4 and IPv6 packet processing. Affected releases are Juniper Networks Junos OS on QFX and PTX Series: 17.4 versions prior to 17.4R2-S1, 17.4R3; 18.1 versions prior to 18.1R3-S1; 18.2 versions prior to 18.2R1-S3, 18.2R2; 17.2X75 versions prior to 17.2X75-D91, 17.2X75-D100.

Scores

CVSS	Score	Vector	Source
3.0	7.5 High	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	juniper

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Junos OSJuniper Networks	17.4 to before 17.4R2-S1, 17.4R3Affected 18.1 to before 18.1R3-S1, 18.1R4Affected 18.2 to before 18.2R1-S3, 18.2R2Affected 17.2X75 to before 17.2X75-D91, 17.2X75-D100Affected

References

https://kb.juniper.net/JSA10914
106556vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.