What is CVE-2019-0068?

CVE-2019-0068 is a medium-severity vulnerability in Juniper Csrx, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 6.5/10. Published 2019-10-09.

How severe is CVE-2019-0068?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Juniper Csrx

CVE-2019-0068

The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending the specific multicast packets, an attacker can repeatedly crash the flowd process causing a sustained Denial of Service. This issue affects Juniper Networks Junos OS on SRX Series: 12.3X48 versions prior to 12.3X48-D90; 15.1X49 versions prior to 15.1X49-D180; 17.3 versions; 17.4 versions prior to 17.4R2-S5, 17.4R3; 18.1 versions prior to 18.1R3-S6; 18.2 versions prior to 18.2R2-S4, 18.2R3; 18.3 versions prior to 18.3R2-S1, 18.3R3; 18.4 versions prior to 18.4R2; 19.1 versions prior to 19.1R1-S1, 19.1R2.

EPSS: 0.013 (69.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Juniper Csrx
Juniper Junos — versions 12.3x48, 15.1x49, 17.3
Juniper Srx100
Juniper Srx110
Juniper Srx1400
Juniper Srx1500
Juniper Srx210
Juniper Srx220
Juniper Srx240
Juniper Srx300

Weakness classification (CWE)

CWE-754 — Improper Check for Unusual or Exceptional Conditions

References

sirt@juniper.net (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-0068?: CVE-2019-0068 is a medium-severity vulnerability in Juniper Csrx, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 6.5/10. Published 2019-10-09.
How severe is CVE-2019-0068?: Medium severity. CVSS v3 base score is 6.5 out of 10.