CVE-2019-0008
Description
A certain sequence of valid BGP or IPv6 BFD packets may trigger a stack based buffer overflow in the Junos OS Packet Forwarding Engine manager (FXPC) process on QFX5000 series, EX4300, EX4600 devices. This issue can result in a crash of the fxpc daemon or may potentially lead to remote code execution. Affected releases are Juniper Networks Junos OS on QFX 5000 series, EX4300, EX4600 are: 14.1X53; 15.1X53 versions prior to 15.1X53-D235; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R3-S2, 17.3R4; 17.4 versions prior to 17.4R2-S1, 17.4R3; 18.1 versions prior to 18.1R3-S1, 18.1R4; 18.2 versions prior to 18.2R2; 18.2X75 versions prior to 18.2X75-D30; 18.3 versions prior to 18.3R2.
How to fix
- juniper junos15.1x53-d235, 17.1r3, 17.2r3, 17.3r3-s2, 17.4r2-s1, 18.1r3-s1, 18.2r2, 18.2x75-d30, 18.3r2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper junos | 15.1x53 ≤ v < 15.1x53-d235, 17.1 ≤ v < 17.1r3, 17.2 ≤ v < 17.2r3, 17.3 ≤ v < 17.3r3-s2, 17.4 ≤ v < 17.4r2-s1, 18.1 ≤ v < 18.1r3-s1, 18.2 ≤ v < 18.2r2, 18.2x75 ≤ v < 18.2x75-d30, 18.3 ≤ v < 18.3r2, 14.1x53, 17.3, 17.4, 18.1 | 15.1x53-d235, 17.1r3, 17.2r3, 17.3r3-s2, 17.4r2-s1, 18.1r3-s1, 18.2r2, 18.2x75-d30, 18.3r2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.