What is CVE-2019-0005?

CVE-2019-0005 is a medium-severity vulnerability in Juniper Ex2300, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 5.3/10. Published 2019-01-15.

How severe is CVE-2019-0005?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Resource exhaustion in Juniper Ex2300

CVE-2019-0005

On EX2300, EX3400, EX4600, QFX3K and QFX5K series, firewall filter configuration cannot perform packet matching on any IPv6 extension headers. This issue may allow IPv6 packets that should have been blocked to be forwarded. IPv4 packet filtering is unaffected by this vulnerability. Affected releases are Juniper Networks Junos OS on EX and QFX series;: 14.1X53 versions prior to 14.1X53-D47; 15.1 versions prior to 15.1R7; 15.1X53 versions prior to 15.1X53-D234 on QFX5200/QFX5110 series; 15.1X53 versions prior to 15.1X53-D591 on EX2300/EX3400 series; 16.1 versions prior to 16.1R7; 17.1 versions prior to 17.1R2-S10, 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R3; 17.4 versions prior to 17.4R2; 18.1 versions prior to 18.1R2.

EPSS: 0.012 (65.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Juniper Ex2300
Juniper Ex2300-c
Juniper Ex3400
Juniper Ex4600
Juniper Ex4650
Juniper Gfx3600
Juniper Junos — versions 14.1x53, 15.1, 15.1x53
Juniper Qfx3500
Juniper Qfx3600
Juniper Qfx5100

Weakness classification (CWE)

CWE-770 — Allocation of Resources Without Limits or Throttling

References

sirt@juniper.net (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
sirt@juniper.net (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-0005?: CVE-2019-0005 is a medium-severity vulnerability in Juniper Ex2300, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 5.3/10. Published 2019-01-15.
How severe is CVE-2019-0005?: Medium severity. CVSS v3 base score is 5.3 out of 10.