CVE-2019-0068
published 2019-10-09CVE-2019-0068: The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending the…
PriorityP341high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
1.31%
67.4th percentile
The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending the specific multicast packets, an attacker can repeatedly crash the flowd process causing a sustained Denial of Service. This issue affects Juniper Networks Junos OS on SRX Series: 12.3X48 versions prior to 12.3X48-D90; 15.1X49 versions prior to 15.1X49-D180; 17.3 versions; 17.4 versions prior to 17.4R2-S5, 17.4R3; 18.1 versions prior to 18.1R3-S6; 18.2 versions prior to 18.2R2-S4, 18.2R3; 18.3 versions prior to 18.3R2-S1, 18.3R3; 18.4 versions prior to 18.4R2; 19.1 versions prior to 19.1R1-S1, 19.1R2.
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos_os | — | — |
| juniper | srx_series | — | — |
| juniper_networks | junos_os | — | — |
| juniper_networks | junos_os | >= 12.3X48 < 12.3X48-D90 | 12.3X48-D90 |
| juniper_networks | junos_os | >= 15.1X49 < 15.1X49-D180 | 15.1X49-D180 |
| juniper_networks | junos_os | >= 17.4 < 17.4R2-S5, 17.4R3 | 17.4R2-S5, 17.4R3 |
| juniper_networks | junos_os | >= 18.1 < 18.1R3-S6 | 18.1R3-S6 |
| juniper_networks | junos_os | >= 18.2 < 18.2R2-S4, 18.2R3 | 18.2R2-S4, 18.2R3 |
| juniper_networks | junos_os | >= 18.3 < 18.3R2-S1, 18.3R3 | 18.3R2-S1, 18.3R3 |
| juniper_networks | junos_os | >= 18.4 < 18.4R2 | 18.4R2 |
| juniper_networks | junos_os | >= 19.1 < 19.1R1-S1, 19.1R2 | 19.1R1-S1, 19.1R2 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Juniper
CVE-2019-0068: The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending th
vendor_juniper·2019-10-09·CVSS 6.5
CVE-2019-0068 [MEDIUM] CWE-754 CVE-2019-0068: The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending th
CVE-2019-0068: The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending the specific multicast packets, an attacker can repeatedly crash the flowd process causing a sustained Denial of Service. This issue affects Juniper Networks Junos OS on SRX Series: 12.3X48 versions prior to 12.3X48-D90; 15.1X49 versions prior to 15.1X49-D180; 17.3 versions; 17.4 versions prior to 17.4R2-S5, 17.4R3; 18.1 versions prior to 18.1R3-S6; 18.2 versions prior to 18.2R2-S4, 18.2R3; 18.3 versions prior to 18.3R2-S1, 18.3R3; 18.4 versions prior to 18.4R2; 19.1 versions prior to 19.1R1-S1, 19.1R2.
GHSA
GHSA-wf66-qg8f-m4r9: The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets
ghsa_unreviewed·2022-05-24
CVE-2019-0068 [MEDIUM] CWE-754 GHSA-wf66-qg8f-m4r9: The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets
The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending the specific multicast packets, an attacker can repeatedly crash the flowd process causing a sustained Denial of Service. This issue affects Juniper Networks Junos OS on SRX Series: 12.3X48 versions prior to 12.3X48-D90; 15.1X49 versions prior to 15.1X49-D180; 17.3 versions; 17.4 versions prior to 17.4R2-S5, 17.4R3; 18.1 versions prior to 18.1R3-S6; 18.2 versions prior to 18.2R2-S4, 18.2R3; 18.3 versions prior to 18.3R2-S1, 18.3R3; 18.4 versions prior to 18.4R2; 19.1 versions prior to 19.1R1-S1, 19.1R2.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-10-09
Published