CVE-2019-0055: Junos OS: SRX Series: An attacker may cause flowd to crash by sending certain valid SIP traffic to a device with SIP ALG enabled.

Published Oct 9, 2019

Updated

A vulnerability in the SIP ALG packet processing service of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending specific types of valid SIP traffic to the device. In this case, the flowd process crashes and generates a core dump while processing SIP ALG traffic. Continued receipt of these valid SIP packets will result in a sustained Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D61, 12.3X48-D65 on SRX Series; 15.1X49 versions prior to 15.1X49-D130 on SRX Series; 17.3 versions prior to 17.3R3 on SRX Series; 17.4 versions prior to 17.4R2 on SRX Series.

Affected Software

63 affected components

Juniper Junos=12.3x48-d10

Juniper Junos=12.3x48-d15

Juniper Junos=12.3x48-d25

Juniper Junos=12.3x48-d30

Juniper Junos=12.3x48-d35

Juniper Junos=12.3x48-d40

Juniper Junos=12.3x48-d45

Juniper Junos=12.3x48-d50

Juniper Junos=12.3x48-d55

Juniper Junos=12.3x48-d60

Juniper cSRX

Juniper SRX100

Juniper SRX110

Juniper SRX1400

Juniper SRX1500

Juniper SRX210

Juniper SRX220

Juniper SRX240

Juniper SRX300

Juniper SRX320

Juniper SRX340

Juniper SRX3400

Juniper SRX345

Juniper SRX3600

Juniper SRX4100

Juniper SRX4200

Juniper SRX4600

Juniper SRX5400

Juniper SRX550

Juniper Srx550 Hm

Juniper SRX5600

Juniper SRX5800

Juniper SRX650

Juniper vSRX

Juniper Junos=15.1x49

Juniper Junos=15.1x49-d10

Juniper Junos=15.1x49-d100

Juniper Junos=15.1x49-d110

Juniper Junos=15.1x49-d120

Juniper Junos=15.1x49-d20

Juniper Junos=15.1x49-d30

Juniper Junos=15.1x49-d35

Juniper Junos=15.1x49-d40

Juniper Junos=15.1x49-d45

Juniper Junos=15.1x49-d50

Juniper Junos=15.1x49-d55

Juniper Junos=15.1x49-d60

Juniper Junos=15.1x49-d65

Juniper Junos=15.1x49-d70

Juniper Junos=15.1x49-d75

Juniper Junos=15.1x49-d80

Juniper Junos=15.1x49-d90

Juniper Junos=17.3

Juniper Junos=17.3-r2

Juniper Junos=17.3-r2-s1

Juniper Junos=17.3-r2-s2

Juniper Junos=17.4

Juniper Junos=17.4-r1

Juniper Junos=17.4-r1-s1

Juniper Junos=17.4-r1-s2

Juniper Junos=17.4-r1-s4

Juniper Junos=17.4-r1-s6

Juniper Junos=17.4-r1-s7

Remediation

Information

The following software releases have been updated to resolve this specific issue: 12.3X48-D61, 12.3X48-D65, 15.1X49-D130, 17.3R3, 17.4R2, 18.1R1, and all subsequent releases.

Event History

Oct 9, 2019

CVE Published

via MITRE·07:26 PM

Data Sourced

via MITRE·07:26 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2019-0055?

CVE-2019-0055 has been assigned a severity rating of high due to its potential to cause a Denial of Service (DoS) by crashing the flowd process.

How do I fix CVE-2019-0055?

To fix CVE-2019-0055, upgrade to a version of Junos OS that is not vulnerable, specifically versions after 12.3x48-d60 and 15.1x49-d90.

What products are affected by CVE-2019-0055?

CVE-2019-0055 affects specific Juniper Networks Junos OS versions, including 12.3x48-d10 through 12.3x48-d60 and 15.1x49 versions.

What type of attack can exploit CVE-2019-0055?

CVE-2019-0055 can be exploited by sending specific types of valid Session Initiation Protocol (SIP) traffic to trigger a Denial of Service.

Are all Juniper products vulnerable to CVE-2019-0055?

No, only certain versions of the Junos OS are affected; many devices, such as various models of the SRX series, are not vulnerable.