CVE-2019-0059

Junos OS: The routing protocol process (rpd) may crash and generate core files upon receipt of specific valid BGP states from a peered host.

State: Published
Severity: 7.5 High
Published: Oct 9, 2019
Updated: Sep 17, 2024
Reserved: Oct 11, 2018

Read the record on cve.org

Description

A memory leak vulnerability in the of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending specific commands from a peered BGP host and having those BGP states delivered to the vulnerable device. This issue affects: Juniper Networks Junos OS: 18.1 versions prior to 18.1R2-S4, 18.1R3-S1; 18.1X75 all versions. Versions before 18.1R1 are not affected.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	juniper

Weaknesses

CWE-400 Uncontrolled Resource Consumption (3.2)

Affected Products

Product	Versions
Junos OSJuniper Networks	18.1X75 all versionsAffected 18.2X75-D5Not affected 18.1 to before 18.1R2-S4, 18.1R3-S1Affected

References

https://kb.juniper.net/JSA10957

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.