What is CVE-2019-0005?

CVE-2019-0005 is a medium-severity vulnerability in Juniper Ex2300, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 5.3/10. Published 2019-01-15.

How severe is CVE-2019-0005?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Resource exhaustion in Juniper Ex2300

CVE-2019-0005

On EX2300, EX3400, EX4600, QFX3K and QFX5K series, firewall filter configuration cannot perform packet matching on any IPv6 extension headers. This issue may allow IPv6 packets that should have been blocked to be forwarded. IPv4 packet fil…

EPSS: 0.012 (63.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Juniper Ex2300
Juniper Ex2300-c
Juniper Ex3400
Juniper Ex4600
Juniper Ex4650
Juniper Gfx3600
Juniper Junos — versions 14.1x53, 15.1, 15.1x53
Juniper Qfx3500
Juniper Qfx3600
Juniper Qfx5100

Weakness classification (CWE)

CWE-770 — Allocation of Resources Without Limits or Throttling

References

sirt@juniper.net (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
sirt@juniper.net (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-0005?: CVE-2019-0005 is a medium-severity vulnerability in Juniper Ex2300, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 5.3/10. Published 2019-01-15.
How severe is CVE-2019-0005?: Medium severity. CVSS v3 base score is 5.3 out of 10.