CVE-2019-0003: Junos OS: A flowspec BGP update with a specific term-order causes routing protocol daemon (rpd) process to crash with a core.
First published: Tue Jan 15 2019(Updated: )
When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, a reachable assertion failure occurs, causing the routing protocol daemon (rpd) process to crash with a core file being generated. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D77 on SRX Series; 12.3 versions prior to 12.3R12-S10; 12.3X48 versions prior to 12.3X48-D70 on SRX Series; 14.1X53 versions prior to 14.1X53-D47 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100; 15.1 versions prior to 15.1R3; 15.1F versions prior to 15.1F3; 15.1X49 versions prior to 15.1X49-D140 on SRX Series; 15.1X53 versions prior to 15.1X53-D59 on EX2300/EX3400.
Credit: sirt@juniper.net
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Juniper JUNOS | =12.1x46 | |
| Juniper JUNOS | =12.1x46-d10 | |
| Juniper JUNOS | =12.1x46-d15 | |
| Juniper JUNOS | =12.1x46-d20 | |
| Juniper JUNOS | =12.1x46-d25 | |
| Juniper JUNOS | =12.1x46-d30 | |
| Juniper JUNOS | =12.1x46-d35 | |
| Juniper JUNOS | =12.1x46-d40 | |
| Juniper JUNOS | =12.1x46-d45 | |
| Juniper JUNOS | =12.1x46-d50 | |
| Juniper JUNOS | =12.1x46-d55 | |
| Juniper JUNOS | =12.1x46-d60 | |
| Juniper Srx100 | ||
| Juniper Srx110 | ||
| Juniper Srx1400 | ||
| Juniper Srx1500 | ||
| Juniper Srx210 | ||
| Juniper Srx220 | ||
| Juniper Srx240 | ||
| Juniper Srx300 | ||
| Juniper Srx320 | ||
| Juniper Srx340 | ||
| Juniper Srx3400 | ||
| Juniper Srx345 | ||
| Juniper Srx3600 | ||
| Juniper Srx4100 | ||
| Juniper Srx4200 | ||
| Juniper Srx5400 | ||
| Juniper Srx550 | ||
| Juniper Srx5600 | ||
| Juniper Srx5800 | ||
| Juniper Srx650 | ||
| Juniper JUNOS | =12.3 | |
| Juniper JUNOS | =12.3-r1 | |
| Juniper JUNOS | =12.3-r11 | |
| Juniper JUNOS | =12.3-r12 | |
| Juniper JUNOS | =12.3-r2 | |
| Juniper JUNOS | =12.3-r3 | |
| Juniper JUNOS | =12.3-r4 | |
| Juniper JUNOS | =12.3-r5 | |
| Juniper JUNOS | =12.3-r6 | |
| Juniper JUNOS | =12.3-r7 | |
| Juniper JUNOS | =12.3-r8 | |
| Juniper JUNOS | =12.3-r9 | |
| Juniper JUNOS | =12.3x48-d10 | |
| Juniper JUNOS | =12.3x48-d15 | |
| Juniper JUNOS | =12.3x48-d20 | |
| Juniper JUNOS | =12.3x48-d25 | |
| Juniper JUNOS | =12.3x48-d30 | |
| Juniper JUNOS | =12.3x48-d35 | |
| Juniper JUNOS | =12.3x48-d40 | |
| Juniper JUNOS | =12.3x48-d45 | |
| Juniper JUNOS | =12.3x48-d55 | |
| Juniper JUNOS | =12.3x48-d60 | |
| Juniper JUNOS | =12.3x48-d65 | |
| Juniper JUNOS | =14.1x53 | |
| Juniper JUNOS | =14.1x53-d10 | |
| Juniper JUNOS | =14.1x53-d15 | |
| Juniper JUNOS | =14.1x53-d16 | |
| Juniper JUNOS | =14.1x53-d25 | |
| Juniper JUNOS | =14.1x53-d26 | |
| Juniper JUNOS | =14.1x53-d27 | |
| Juniper JUNOS | =14.1x53-d30 | |
| Juniper JUNOS | =14.1x53-d35 | |
| Juniper JUNOS | =14.1x53-d40 | |
| Juniper JUNOS | =14.1x53-d42 | |
| Juniper JUNOS | =14.1x53-d43 | |
| Juniper JUNOS | =14.1x53-d44 | |
| Juniper JUNOS | =14.1x53-d45 | |
| Juniper JUNOS | =14.1x53-d46 | |
| Juniper Ex2200\/vc | ||
| Juniper Ex3200 | ||
| Juniper Ex3300\/vc | ||
| Juniper Ex4200 | ||
| Juniper Ex4300 | ||
| Juniper Ex4550\/vc | ||
| Juniper EX4600 | ||
| Juniper Ex6200 | ||
| Juniper Ex8200\/vc \(xre\) | ||
| Juniper Qfx3500 | ||
| Juniper Qfx3600 | ||
| Juniper Qfx5100 | ||
| Juniper JUNOS | =15.1-f1 | |
| Juniper JUNOS | =15.1-f2 | |
| Juniper JUNOS | =15.1-f3 | |
| Juniper JUNOS | =15.1-f4 | |
| Juniper JUNOS | =15.1-f5 | |
| Juniper JUNOS | =15.1-f6 | |
| Juniper JUNOS | =15.1-f7 | |
| Juniper JUNOS | =15.1-r1 | |
| Juniper JUNOS | =15.1-r2 | |
| Juniper JUNOS | =15.1-r7-s2 | |
| Juniper JUNOS | =15.1-r7-s3 | |
| Juniper JUNOS | =15.1x49-d10 | |
| Juniper JUNOS | =15.1x49-d100 | |
| Juniper JUNOS | =15.1x49-d110 | |
| Juniper JUNOS | =15.1x49-d120 | |
| Juniper JUNOS | =15.1x49-d130 | |
| Juniper JUNOS | =15.1x49-d20 | |
| Juniper JUNOS | =15.1x49-d30 | |
| Juniper JUNOS | =15.1x49-d35 | |
| Juniper JUNOS | =15.1x49-d40 | |
| Juniper JUNOS | =15.1x49-d45 | |
| Juniper JUNOS | =15.1x49-d50 | |
| Juniper JUNOS | =15.1x49-d55 | |
| Juniper JUNOS | =15.1x49-d60 | |
| Juniper JUNOS | =15.1x49-d65 | |
| Juniper JUNOS | =15.1x49-d70 | |
| Juniper JUNOS | =15.1x49-d75 | |
| Juniper JUNOS | =15.1x49-d80 | |
| Juniper JUNOS | =15.1x49-d90 | |
| Juniper JUNOS | =15.1x53-d20 | |
| Juniper JUNOS | =15.1x53-d21 | |
| Juniper JUNOS | =15.1x53-d210 | |
| Juniper JUNOS | =15.1x53-d25 | |
| Juniper JUNOS | =15.1x53-d30 | |
| Juniper JUNOS | =15.1x53-d32 | |
| Juniper JUNOS | =15.1x53-d33 | |
| Juniper JUNOS | =15.1x53-d34 | |
| Juniper JUNOS | =15.1x53-d40 | |
| Juniper JUNOS | =15.1x53-d45 | |
| Juniper JUNOS | =15.1x53-d56 | |
| Juniper Ex2300 | ||
| Juniper Ex3400 |
Remedy
The following software releases have been updated to resolve this specific issue: 12.1X46-D77, 12.3R12-S10, 12.3X48-D70, 14.1X53-D47, 15.1F3, 15.1R3, 15.1X49-D140, 15.1X53-D59, 16.1R1 and all subsequent releases.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/title
- agent/author
- agent/first-publish-date
- agent/event
- agent/tags
- agent/description
- vendor/juniper
- canonical/juniper junos
- version/juniper junos/12.1x46
- version/juniper junos/12.1x46-d10
- version/juniper junos/12.1x46-d15
- version/juniper junos/12.1x46-d20
- version/juniper junos/12.1x46-d25
- version/juniper junos/12.1x46-d30
- version/juniper junos/12.1x46-d35
- version/juniper junos/12.1x46-d40
- version/juniper junos/12.1x46-d45
- version/juniper junos/12.1x46-d50
- version/juniper junos/12.1x46-d55
- version/juniper junos/12.1x46-d60
- canonical/juniper srx100
- canonical/juniper srx110
- canonical/juniper srx1400
- canonical/juniper srx1500
- canonical/juniper srx210
- canonical/juniper srx220
- canonical/juniper srx240
- canonical/juniper srx300
- canonical/juniper srx320
- canonical/juniper srx340
- canonical/juniper srx3400
- canonical/juniper srx345
- canonical/juniper srx3600
- canonical/juniper srx4100
- canonical/juniper srx4200
- canonical/juniper srx5400
- canonical/juniper srx550
- canonical/juniper srx5600
- canonical/juniper srx5800
- canonical/juniper srx650
- version/juniper junos/12.3
- version/juniper junos/12.3-r1
- version/juniper junos/12.3-r11
- version/juniper junos/12.3-r12
- version/juniper junos/12.3-r2
- version/juniper junos/12.3-r3
- version/juniper junos/12.3-r4
- version/juniper junos/12.3-r5
- version/juniper junos/12.3-r6
- version/juniper junos/12.3-r7
- version/juniper junos/12.3-r8
- version/juniper junos/12.3-r9
- version/juniper junos/12.3x48-d10
- version/juniper junos/12.3x48-d15
- version/juniper junos/12.3x48-d20
- version/juniper junos/12.3x48-d25
- version/juniper junos/12.3x48-d30
- version/juniper junos/12.3x48-d35
- version/juniper junos/12.3x48-d40
- version/juniper junos/12.3x48-d45
- version/juniper junos/12.3x48-d55
- version/juniper junos/12.3x48-d60
- version/juniper junos/12.3x48-d65
- version/juniper junos/14.1x53
- version/juniper junos/14.1x53-d10
- version/juniper junos/14.1x53-d15
- version/juniper junos/14.1x53-d16
- version/juniper junos/14.1x53-d25
- version/juniper junos/14.1x53-d26
- version/juniper junos/14.1x53-d27
- version/juniper junos/14.1x53-d30
- version/juniper junos/14.1x53-d35
- version/juniper junos/14.1x53-d40
- version/juniper junos/14.1x53-d42
- version/juniper junos/14.1x53-d43
- version/juniper junos/14.1x53-d44
- version/juniper junos/14.1x53-d45
- version/juniper junos/14.1x53-d46
- canonical/juniper ex2200\/vc
- canonical/juniper ex3200
- canonical/juniper ex3300\/vc
- canonical/juniper ex4200
- canonical/juniper ex4300
- canonical/juniper ex4550\/vc
- canonical/juniper ex4600
- canonical/juniper ex6200
- canonical/juniper ex8200\/vc \(xre\)
- canonical/juniper qfx3500
- canonical/juniper qfx3600
- canonical/juniper qfx5100
- version/juniper junos/15.1-f1
- version/juniper junos/15.1-f2
- version/juniper junos/15.1-f3
- version/juniper junos/15.1-f4
- version/juniper junos/15.1-f5
- version/juniper junos/15.1-f6
- version/juniper junos/15.1-f7
- version/juniper junos/15.1-r1
- version/juniper junos/15.1-r2
- version/juniper junos/15.1-r7-s2
- version/juniper junos/15.1-r7-s3
- version/juniper junos/15.1x49-d10
- version/juniper junos/15.1x49-d100
- version/juniper junos/15.1x49-d110
- version/juniper junos/15.1x49-d120
- version/juniper junos/15.1x49-d130
- version/juniper junos/15.1x49-d20
- version/juniper junos/15.1x49-d30
- version/juniper junos/15.1x49-d35
- version/juniper junos/15.1x49-d40
- version/juniper junos/15.1x49-d45
- version/juniper junos/15.1x49-d50
- version/juniper junos/15.1x49-d55
- version/juniper junos/15.1x49-d60
- version/juniper junos/15.1x49-d65
- version/juniper junos/15.1x49-d70
- version/juniper junos/15.1x49-d75
- version/juniper junos/15.1x49-d80
- version/juniper junos/15.1x49-d90
- version/juniper junos/15.1x53-d20
- version/juniper junos/15.1x53-d21
- version/juniper junos/15.1x53-d210
- version/juniper junos/15.1x53-d25
- version/juniper junos/15.1x53-d30
- version/juniper junos/15.1x53-d32
- version/juniper junos/15.1x53-d33
- version/juniper junos/15.1x53-d34
- version/juniper junos/15.1x53-d40
- version/juniper junos/15.1x53-d45
- version/juniper junos/15.1x53-d56
- canonical/juniper ex2300
- canonical/juniper ex3400