What is CVE-2019-0014?

CVE-2019-0014 is a high-severity vulnerability in Juniper Junos, classified under CWE-19. CVSS score: 7.5/10. Published 2019-01-15.

How severe is CVE-2019-0014?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Juniper Junos

CVE-2019-0014

On QFX and PTX Series, receipt of a malformed packet for J-Flow sampling might crash the FPC (Flexible PIC Concentrator) process which causes all interfaces to go down. By continuously sending the offending packet, an attacker can repeatedly crash the FPC process causing a sustained Denial of Service (DoS). This issue affects both IPv4 and IPv6 packet processing. Affected releases are Juniper Networks Junos OS on QFX and PTX Series: 17.4 versions prior to 17.4R2-S1, 17.4R3; 18.1 versions prior to 18.1R3-S1; 18.2 versions prior to 18.2R1-S3, 18.2R2; 17.2X75 versions prior to 17.2X75-D91, 17.2X75-D100.

EPSS: 0.017 (76.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Juniper Junos — versions 17.2x75, 17.4, 18.2
Juniper Ptx1000
Juniper Ptx10002
Juniper Ptx10008
Juniper Ptx10016
Juniper Ptx3000
Juniper Ptx5000
Juniper Qfx10002
Juniper Qfx10008
Juniper Qfx10016

Weakness classification (CWE)

CWE-19

References

sirt@juniper.net (x_refsource_CONFIRM, Patch, Mitigation, Vendor Advisory)
sirt@juniper.net (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2019-0014?: CVE-2019-0014 is a high-severity vulnerability in Juniper Junos, classified under CWE-19. CVSS score: 7.5/10. Published 2019-01-15.
How severe is CVE-2019-0014?: High severity. CVSS v3 base score is 7.5 out of 10.