Riskcovery

CVE-2019-0046

Junos OS: EX4300 Series: Denial of Service upon receipt of large number of specific valid packets on management interface.

State
Published
Severity
6.5 Medium
Published
Jul 11, 2019
Updated
Sep 16, 2024
Reserved
Oct 11, 2018

Read the record on cve.org

Description

A vulnerability in the pfe-chassisd Chassis Manager (CMLC) daemon of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the EX4300 when specific valid broadcast packets create a broadcast storm condition when received on the me0 interface of the EX4300 Series device. A reboot of the device is required to restore service. Continued receipt of these valid broadcast packets will create a sustained Denial of Service (DoS) against the device. Affected releases are Juniper Networks Junos OS: 16.1 versions above and including 16.1R1 prior to 16.1R7-S5; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R3-S2; 17.4 versions prior to 17.4R2; 18.1 versions prior to 18.1R3; 18.2 versions prior to 18.2R2.

Scores

CVSSScoreVectorSource
3.06.5 MediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hjuniper

Weaknesses

  • CWE-400 Uncontrolled Resource Consumption

Affected Products

ProductVersions
Junos OSJuniper Networks
  • 16.1 versions above and including 16.1R1 prior to 16.1R7-S5Affected
  • 17.1 versions prior to 17.1R3Affected
  • 17.2 versions prior to 17.2R3Affected
  • 17.3 versions prior to 17.3R3-S2Affected
  • 17.4 versions prior to 17.4R2Affected
  • 18.1 versions prior to 18.1R3Affected
  • 18.2 versions prior to 18.2R2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.