When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, a reachable assertion failure occurs, causing the routing protocol daemon (rpd) process to crash with a core file being generated. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D77 on SRX Series; 12.3 versions prior to 12.3R12-S10; 12.3X48 versions prior to 12.3X48-D70 on SRX Series; 14.1X53 versions prior to 14.1X53-D47 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100; 15.1 versions prior to 15.1R3; 15.1F versions prior to 15.1F3; 15.1X49 versions prior to 15.1X49-D140 on SRX Series; 15.1X53 versions prior to 15.1X53-D59 on EX2300/EX3400.
References
Link | Resource |
---|---|
https://kb.juniper.net/JSA10902 | Vendor Advisory |
http://www.securityfocus.com/bid/106544 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
|
Configuration 3 (hide)
AND |
|
Configuration 4 (hide)
AND |
|
Configuration 5 (hide)
|
Configuration 6 (hide)
AND |
|
Configuration 7 (hide)
AND |
|
Information
Published : 2019-01-15 13:29
Updated : 2020-09-28 18:49
NVD link : CVE-2019-0003
Mitre link : CVE-2019-0003
JSON object : View
CWE
CWE-617
Reachable Assertion
Products Affected
juniper
- srx210
- ex3200
- srx1500
- srx3600
- srx4100
- ex4300
- ex8200\/vc_\(xre\)
- ex3300\/vc
- qfx5100
- ex6200
- ex4550\/vc
- qfx3500
- ex3400
- ex4200
- srx650
- ex2300
- srx550
- srx300
- srx4200
- ex2200\/vc
- srx340
- srx5600
- srx5800
- srx5400
- junos
- srx240
- srx110
- srx3400
- srx320
- srx1400
- srx100
- ex4600
- srx345
- qfx3600
- srx220