CVE-2019-0009 — Networks Junos OS vulnerability

6 documents6 sources
Severity
5.5MEDIUMNVD
EPSS
0.1%
top 84.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Juniper Networks Junos OSJuniper JunosJuniper Junos OS
Timeline
PublishedJan 15
Latest updateMay 13

Description

On EX2300 and EX3400 series, high disk I/O operations may disrupt the communication between the routing engine (RE) and the packet forwarding engine (PFE). In a virtual chassis (VC) deployment, this issue disrupts communication between the VC members. This issue does not affect other Junos platforms. Affected releases are Junos OS on EX2300 and EX3400 series: 15.1X53 versions prior to 15.1X53-D590; 18.1 versions prior to 18.1R2-S2, 18.1R3; 18.2 versions prior to 18.2R2.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

▶CVEListV5juniper_networks/junos_os15.1X53 — 15.1X53-D113, 15.1X53-D590+2
▶NVDjuniper/junos15.1x53, 18.1, 18.2+2

🔴Vulnerability Details

1
GHSA
GHSA-29c6-mr8r-mfmj: On EX2300 and EX3400 series, high disk I/O operations may disrupt the communication between the routing engine (RE) and the packet forwarding engine (↗2022-05-13
▶

💥Exploits & PoCs

1
Exploit-DB
Microsoft Windows Server 2012 - 'Group Policy' Security Feature Bypass (MS15-014)↗2019-10-29
▶

📋Vendor Advisories

2
VMware
VMware Tools and Workstation updates address out of bounds read and use-after-free vulnerabilities. (CVE-2019-5522, CVE-2019-5525)↗2019-06-06
▶
Juniper
CVE-2019-0009: On EX2300 and EX3400 series, high disk I/O operations may disrupt the communication between the routing engine (RE) and the packet forwarding engine (↗2019-01-15
▶

💬Community

1
Bugzilla
CVE-2019-15551 rust-smallvec: Double-free and use-after-free in SmallVec::grow()↗2019-08-30
▶
CVE-2019-0009 — Juniper Networks Junos OS vulnerability | cvebase