What is CVE-2019-0075?

CVE-2019-0075 is a high-severity vulnerability in Juniper Csrx. CVSS score: 7.5/10. Published 2019-10-09.

How severe is CVE-2019-0075?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Juniper Csrx

CVE-2019-0075

A vulnerability in the srxpfe process on Protocol Independent Multicast (PIM) enabled SRX series devices may lead to crash of the srxpfe process and an FPC reboot while processing (PIM) messages. Sustained receipt of these packets may lead to an extended denial of service condition. Affected releases are Juniper Networks Junos OS on SRX Series: 12.3X48 versions prior to 12.3X48-D80; 15.1X49 versions prior to 15.1X49-D160; 17.3 versions prior to 17.3R3-S7 17.4 versions prior to 17.4R2-S8, 17.4R3; 18.1 versions prior to 18.1R3-S8; 18.2 versions prior to 18.2R2; 18.3 versions prior to 18.3R2.

EPSS: 0.013 (69.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Juniper Csrx
Juniper Junos — versions 12.3x48, 15.1x49, 17.3
Juniper Srx100
Juniper Srx110
Juniper Srx1400
Juniper Srx1500
Juniper Srx210
Juniper Srx220
Juniper Srx240
Juniper Srx300

References

sirt@juniper.net (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2019-0075?: CVE-2019-0075 is a high-severity vulnerability in Juniper Csrx. CVSS score: 7.5/10. Published 2019-10-09.
How severe is CVE-2019-0075?: High severity. CVSS v3 base score is 7.5 out of 10.