CVE-2019-0041

Junos OS: EX4300-MP Series: IP transit traffic can reach the control plane via loopback interface.

State
Published
Severity
6.5 Medium
Published
Apr 10, 2019
Updated
Sep 16, 2024
Reserved
Oct 11, 2018

Read the record on cve.org

Description

On EX4300-MP Series devices with any lo0 filters applied, transit network traffic may reach the control plane via loopback interface (lo0). The device may fail to forward such traffic. This issue affects Juniper Networks Junos OS 18.2 versions prior to 18.2R1-S2, 18.2R2 on EX4300-MP Series. This issue does not affect any other EX series devices.

Scores

CVSSScoreVectorSource
3.06.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Ljuniper

Weaknesses

Affected Products

ProductVersions
Junos OSJuniper Networks
  • 18.2 to before 18.2R1-S2, 18.2R2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.