CVE-2019-0008
published 2019-04-10CVE-2019-0008: A certain sequence of valid BGP or IPv6 BFD packets may trigger a stack based buffer overflow in the Junos OS Packet Forwarding Engine manager (FXPC) process…
PriorityP264critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
4.54%
90.4th percentile
A certain sequence of valid BGP or IPv6 BFD packets may trigger a stack based buffer overflow in the Junos OS Packet Forwarding Engine manager (FXPC) process on QFX5000 series, EX4300, EX4600 devices. This issue can result in a crash of the fxpc daemon or may potentially lead to remote code execution. Affected releases are Juniper Networks Junos OS on QFX 5000 series, EX4300, EX4600 are: 14.1X53; 15.1X53 versions prior to 15.1X53-D235; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R3-S2, 17.3R4; 17.4 versions prior to 17.4R2-S1, 17.4R3; 18.1 versions prior to 18.1R3-S1, 18.1R4; 18.2 versions prior to 18.2R2; 18.2X75 versions prior to 18.2X75-D30; 18.3 versions prior to 18.3R2.
Affected
25 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | >= 15.1x53 < 15.1x53-d235 | 15.1x53-d235 |
| juniper | junos | >= 17.1 < 17.1r3 | 17.1r3 |
| juniper | junos | >= 17.2 < 17.2r3 | 17.2r3 |
| juniper | junos | >= 17.3 < 17.3r3-s2 | 17.3r3-s2 |
| juniper | junos | >= 17.4 < 17.4r2-s1 | 17.4r2-s1 |
| juniper | junos | >= 18.1 < 18.1r3-s1 | 18.1r3-s1 |
| juniper | junos | >= 18.2 < 18.2r2 | 18.2r2 |
| juniper | junos | >= 18.2x75 < 18.2x75-d30 | 18.2x75-d30 |
| juniper | junos | >= 18.3 < 18.3r2 | 18.3r2 |
| juniper | junos_os | — | — |
| juniper | qfx_series | — | — |
| juniper_networks | junos_os | — | — |
| juniper_networks | junos_os | >= 15.1X53 < 15.1X53-D235 | 15.1X53-D235 |
| juniper_networks | junos_os | >= 17.1 < 17.1R3 | 17.1R3 |
| juniper_networks | junos_os | >= 17.2 < 17.2R3 | 17.2R3 |
| juniper_networks | junos_os | >= 17.3 < 17.3R3-S2, 17.3R4 | 17.3R3-S2, 17.3R4 |
| juniper_networks | junos_os | >= 17.4 < 17.4R2-S1, 17.4R3 | 17.4R2-S1, 17.4R3 |
| juniper_networks | junos_os | >= 18.1 < 18.1R3-S1, 18.1R4 | 18.1R3-S1, 18.1R4 |
| juniper_networks | junos_os | >= 18.2 < 18.2R2 | 18.2R2 |
| juniper_networks | junos_os | >= 18.2X75 < 18.2X75-D30 | 18.2X75-D30 |
| juniper_networks | junos_os | >= 18.3 < 18.3R2 | 18.3R2 |
Detection & IOCsextracted from sources · hover to see the quote
- →Monitor for crashes of the fxpc (Packet Forwarding Engine manager) daemon on QFX5000 series, EX4300, and EX4600 devices, which may indicate exploitation of this stack-based buffer overflow via crafted BGP or IPv6 BFD packets. ↗
- →Inspect BGP and IPv6 BFD traffic destined for vulnerable Junos OS devices (QFX5000, EX4300, EX4600) for anomalous or malformed packet sequences that could trigger the FXPC buffer overflow. ↗
- ·Only QFX5000 series, EX4300, and EX4600 devices running affected Junos OS versions are vulnerable. Devices on fixed releases (e.g., 15.1X53-D235+, 17.1R3+, 17.2R3+, 17.3R3-S2/17.3R4+, 17.4R2-S1/17.4R3+, 18.1R3-S1/18.1R4+, 18.2R2+, 18.2X75-D30+, 18.3R2+) are not affected. ↗
- ·The triggering packets are described as 'valid' BGP or IPv6 BFD packets, meaning standard protocol-conformant traffic can trigger the vulnerability — simple malformed-packet filters may not be sufficient to block exploitation. ↗
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Palo Alto
PAN-SA-2024-0008 Informational Bulletin: Impact of OSS CVEs in PAN-OS
vendor_paloalto·2024-09-04·CVSS 6.0
CVE-2022-22965 [MEDIUM] PAN-SA-2024-0008 Informational Bulletin: Impact of OSS CVEs in PAN-OS
PAN-SA-2024-0008 Informational Bulletin: Impact of OSS CVEs in PAN-OS
The Palo Alto Networks Product Security Assurance team has evaluated the following open source software (OSS) CVEs as they relate to PAN-OS software. While PAN-OS software may include the
CVEs: CVE-2010-1622, CVE-2015-7552, CVE-2018-16840, CVE-2019-7639, CVE-2020-17049, CVE-2020-7774, CVE-2021-0131, CVE-2021-0132, CVE-2021-0133, CVE-2021-0134, CVE-2021-4044, CVE-2021-4160, CVE-2021-41773, CVE-2022-1343, CVE-2022-21449, CVE-2022-2274, CVE-2022-22963, CVE-2022-22965, CVE-2022-24697, CVE-2022-32207, CVE-2022-3358, CVE-2022-3996, CVE-2022-40664, CVE-2022-44792, CVE-2022-44793, CVE-2023-1255, CVE-2023-22809, CVE-2023-23919, CVE-2023-3341, CVE-2023-4236, CVE-2023-4863, CVE-2023-51767
Affected products: PAN-OS
VMware
VMware product updates enable Hypervisor-Specific Mitigations, Hypervisor-Assisted Guest Mitigations, and Operating System-Specific Mitigations for Microarchitectural Data Sampling (MDS) Vulnerabiliti
vendor_vmware·2019-05-14·CVSS 5.6
CVE-2018-12126 [MEDIUM] VMware product updates enable Hypervisor-Specific Mitigations, Hypervisor-Assisted Guest Mitigations, and Operating System-Specific Mitigations for Microarchitectural Data Sampling (MDS) Vulnerabiliti
VMSA-2019-0008: VMware product updates enable Hypervisor-Specific Mitigations, Hypervisor-Assisted Guest Mitigations, and Operating System-Specific Mitigations for Microarchitectural Data Sampling (MDS) Vulnerabilities (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, and CVE-2019-11091)
| Advisory Severity | Moderate | CVSSv3 Range | 3.8 - 6.5 | Synopsis | VMware product updates enable Hypervisor-Specific Mitigations, Hypervisor-Assisted Guest Mitigations, and Operating System-Specific Mitigations for Microarchitectural Data Sampling (MDS) Vulnerabilities (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, and CVE-2019-11091) | Issue Date | 2019-05-14 | Updated On | 2019-11-12 | CVE(s) | CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, and CVE-2019-11091 VMware vCenter Server (VC) VMware vSph
Juniper
CVE-2019-0008: A certain sequence of valid BGP or IPv6 BFD packets may trigger a stack based buffer overflow in the Junos OS Packet Forwarding Engine manager (FXPC)
vendor_juniper·2019-04-10·CVSS 9.8
CVE-2019-0008 [CRITICAL] CWE-121 CVE-2019-0008: A certain sequence of valid BGP or IPv6 BFD packets may trigger a stack based buffer overflow in the Junos OS Packet Forwarding Engine manager (FXPC)
CVE-2019-0008: A certain sequence of valid BGP or IPv6 BFD packets may trigger a stack based buffer overflow in the Junos OS Packet Forwarding Engine manager (FXPC) process on QFX5000 series, EX4300, EX4600 devices. This issue can result in a crash of the fxpc daemon or may potentially lead to remote code execution. Affected releases are Juniper Networks Junos OS on QFX 5000 series, EX4300, EX4600 are: 14.1X53; 15.1X53 versions prior to 15.1X53-D235; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R3-S2, 17.3R4; 17.4 versions prior to 17.4R2-S1, 17.4R3; 18.1 versions prior to 18.1R3-S1, 18.1R4; 18.2 versions prior to 18.2R2; 18.2X75 versions prior to 18.2X75-D30; 18.3 versions prior to 18.3R2.
GHSA
GHSA-w8p6-5qfp-c66p: A certain sequence of valid BGP or IPv6 BFD packets may trigger a stack based buffer overflow in the Junos OS Packet Forwarding Engine manager (FXPC)
ghsa_unreviewed·2022-05-13
CVE-2019-0008 [CRITICAL] CWE-787 GHSA-w8p6-5qfp-c66p: A certain sequence of valid BGP or IPv6 BFD packets may trigger a stack based buffer overflow in the Junos OS Packet Forwarding Engine manager (FXPC)
A certain sequence of valid BGP or IPv6 BFD packets may trigger a stack based buffer overflow in the Junos OS Packet Forwarding Engine manager (FXPC) process on QFX5000 series, EX4300, EX4600 devices. This issue can result in a crash of the fxpc daemon or may potentially lead to remote code execution. Affected releases are Juniper Networks Junos OS on QFX 5000 series, EX4300, EX4600 are: 14.1X53; 15.1X53 versions prior to 15.1X53-D235; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R3-S2, 17.3R4; 17.4 versions prior to 17.4R2-S1, 17.4R3; 18.1 versions prior to 18.1R3-S1, 18.1R4; 18.2 versions prior to 18.2R2; 18.2X75 versions prior to 18.2X75-D30; 18.3 versions prior to 18.3R2.
No detection rules found.
No writeups or analysis indexed.
2019-04-10
Published