CVE-2019-0033: SRX Series: A remote attacker may cause a high CPU Denial of Service to the device when proxy ARP is configured.

First published: Wed Apr 10 2019(Updated: )

A firewall bypass vulnerability in the proxy ARP service of Juniper Networks Junos OS allows an attacker to cause a high CPU condition leading to a Denial of Service (DoS). This issue affects only IPv4. Affected releases are Juniper Networks Junos OS: 12.1X46 versions above and including 12.1X46-D25 prior to 12.1X46-D71, 12.1X46-D73 on SRX Series; 12.3X48 versions prior to 12.3X48-D50 on SRX Series; 15.1X49 versions prior to 15.1X49-D75 on SRX Series.

Credit: sirt@juniper.net

Affected Software	Affected Version	How to fix
Juniper JUNOS	>=12.1x46<=12.1x46-d10
Juniper JUNOS	>=12.1x46-d25<12.1x46-d71
Juniper JUNOS	>=12.3x48<12.3x48-d50
Juniper JUNOS	>=15.1x49<15.1x49-d75
Juniper Srx100
Juniper Srx110
Juniper Srx1400
Juniper Srx210
Juniper Srx220
Juniper Srx240
Juniper Srx3400
Juniper Srx3600
Juniper Srx5400
Juniper Srx550
Juniper Srx5600
Juniper Srx5800
Juniper Srx650

Remedy

The following software releases have been updated to resolve this specific issue: 12.1X46-D71, 12.1X46-D73, 12.3X48-D50, 15.1X49-D75, 17.3R1, and all subsequent releases.

Never miss a vulnerability like this again

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.