CVE-2019-0041: Junos OS: EX4300-MP Series: IP transit traffic can reach the control plane via loopback interface.

Published Apr 10, 2019

Updated

On EX4300-MP Series devices with any lo0 filters applied, transit network traffic may reach the control plane via loopback interface (lo0). The device may fail to forward such traffic. This issue affects Juniper Networks Junos OS 18.2 versions prior to 18.2R1-S2, 18.2R2 on EX4300-MP Series. This issue does not affect any other EX series devices.

Affected Software

3 affected components

Juniper JUNOS=18.2

Juniper JUNOS=18.2-r1

Juniper EX4300-MP

Remediation

Information

The following software releases have been updated to resolve this specific issue: 18.2R1-S2, 18.2R2, 18.3R1, and all subsequent releases.

Event History

Apr 10, 2019

CVE Published

via MITRE·08:13 PM

Data Sourced

via MITRE·08:13 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2019-0041?

CVE-2019-0041 is a vulnerability found in Juniper Networks Junos OS 18.2 versions prior to 18.2R1-S2, 18.2R2 on EX4300-MP Series devices. It allows transit network traffic to reach the control plane via loopback interface (lo0).

How does CVE-2019-0041 affect Juniper EX4300-MP Series devices?

CVE-2019-0041 affects Juniper EX4300-MP Series devices by allowing transit network traffic to reach the control plane via the loopback interface (lo0), which can cause the device to fail to forward such traffic.

What is the severity of CVE-2019-0041?

The severity of CVE-2019-0041 is high with a severity score of 8.6.

How can I fix CVE-2019-0041 on Juniper networks Junos OS 18.2 devices?

To fix CVE-2019-0041 on Juniper Networks Junos OS 18.2 devices, it is recommended to upgrade to versions 18.2R1-S2 or 18.2R2.

Is Juniper EX4300-MP vulnerable to CVE-2019-0041?

No, Juniper EX4300-MP devices are not vulnerable to CVE-2019-0041.