CVE-2019-0065: Junos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC

Published Oct 9, 2019

Updated

On MX Series, when the SIP ALG is enabled, receipt of a certain malformed SIP packet may crash the MS-PIC component on MS-MIC or MS-MPC. By continuously sending a crafted SIP packet, an attacker can repeatedly bring down MS-PIC on MS-MIC/MS-MPC causing a sustained Denial of Service. This issue affects Juniper Networks Junos OS on MX Series: 16.1 versions prior to 16.1R7-S5; 16.2 versions prior to 16.2R2-S11; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3-S3; 17.3 versions prior to 17.3R3-S6 ; 17.4 versions prior to 17.4R2-S8, 17.4R3; 18.1 versions prior to 18.1R3-S3; 18.2 versions prior to 18.2R3; 18.3 versions prior to 18.3R2; 18.4 versions prior to 18.4R2.

Affected Software

106 affected components

Juniper Junos=16.1

Juniper Junos=16.1-r1

Juniper Junos=16.1-r2

Juniper Junos=16.1-r3

Juniper Junos=16.1-r3-s10

Juniper Junos=16.1-r3-s11

Juniper Junos=16.1-r4

Juniper Junos=16.1-r5

Juniper Junos=16.1-r5-s4

Juniper Junos=16.1-r6

Juniper Junos=16.1-r6-s1

Juniper Junos=16.1-r6-s6

Juniper Junos=16.1-r7

Juniper Junos=16.1-r7-s3

Juniper Junos=16.1-r7-s4

Juniper MX10

Juniper MX10003

Juniper MX10008

Juniper MX10016

Juniper MX104

Juniper MX150

Juniper MX2008

Juniper MX2010

Juniper MX2020

Juniper MX204

Juniper MX240

Juniper Mx40

Juniper MX480

Juniper Mx5

Juniper Mx80

Juniper MX960

Juniper vMX

Juniper Junos=16.2

Juniper Junos=16.2-r1

Juniper Junos=16.2-r2

Juniper Junos=16.2-r2-s1

Juniper Junos=16.2-r2-s10

Juniper Junos=16.2-r2-s2

Juniper Junos=16.2-r2-s5

Juniper Junos=16.2-r2-s6

Juniper Junos=16.2-r2-s7

Juniper Junos=16.2-r2-s8

Juniper Junos=16.2-r2-s9

Juniper Junos=17.1

Juniper Junos=17.1-r1

Juniper Junos=17.1-r2-s1

Juniper Junos=17.1-r2-s10

Juniper Junos=17.1-r2-s2

Juniper Junos=17.1-r2-s3

Juniper Junos=17.1-r2-s4

Juniper Junos=17.1-r2-s5

Juniper Junos=17.1-r2-s6

Juniper Junos=17.1-r2-s7

Juniper Junos=17.2

Juniper Junos=17.2-r1-s2

Juniper Junos=17.2-r1-s4

Juniper Junos=17.2-r1-s7

Juniper Junos=17.2-r1-s8

Juniper Junos=17.2-r2-s6

Juniper Junos=17.2-r2-s7

Juniper Junos=17.2-r3-s1

Juniper Junos=17.2-r3-s2

Juniper Junos=17.3

Juniper Junos=17.3-r2

Juniper Junos=17.3-r2-s1

Juniper Junos=17.3-r2-s2

Juniper Junos=17.3-r3-s1

Juniper Junos=17.3-r3-s2

Juniper Junos=17.3-r3-s3

Juniper Junos=17.3-r3-s4

Juniper Junos=17.3-r3-s5

Juniper Junos=17.4

Juniper Junos=17.4-r1

Juniper Junos=17.4-r1-s1

Juniper Junos=17.4-r1-s2

Juniper Junos=17.4-r1-s4

Juniper Junos=17.4-r1-s6

Juniper Junos=17.4-r1-s7

Juniper Junos=17.4-r2

Juniper Junos=17.4-r2-s1

Juniper Junos=17.4-r2-s3

Juniper Junos=17.4-r2-s4

Juniper Junos=17.4-r2-s5

Juniper Junos=17.4-r2-s6

Juniper Junos=17.4-r2-s7

Juniper Junos=18.1

Juniper Junos=18.1-r2

Juniper Junos=18.1-r2-s1

Juniper Junos=18.1-r2-s2

Juniper Junos=18.1-r2-s4

Juniper Junos=18.1-r3

Juniper Junos=18.1-r3-s2

Juniper Junos=18.2

Juniper Junos=18.2-r1-s5

Juniper Junos=18.2-r2-s1

Juniper Junos=18.2-r2-s2

Juniper Junos=18.2-r2-s3

Juniper Junos=18.2-r2-s4

Juniper Junos=18.3

Juniper Junos=18.3-r1

Juniper Junos=18.3-r1-s1

Juniper Junos=18.3-r1-s2

Juniper Junos=18.3-r1-s3

Juniper Junos=18.4

Juniper Junos=18.4-r1

Juniper Junos=18.4-r1-s2

Remediation

Information

The following software releases have been updated to resolve these specific issues: 16.1R7-S5, 16.2R2-S11, 17.1R3, 17.2R3-S3, 17.3R3-S6, 17.4R2-S8, 17.4R3, 18.1R3-S3, 18.2R3, 18.3R2, 18.4R2, 19.1R1, and all subsequent releases.

Event History

Oct 9, 2019

CVE Published

via MITRE·07:26 PM

Data Sourced

via MITRE·07:26 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2019-0065?

CVE-2019-0065 has a severity rating that indicates it can cause a Denial of Service due to the vulnerable processing of malformed SIP packets.

How do I fix CVE-2019-0065?

To fix CVE-2019-0065, disable the SIP Application Layer Gateway (ALG) or upgrade to a patched version of Juniper Junos that is not affected.

Which devices are affected by CVE-2019-0065?

CVE-2019-0065 affects MX Series devices running specific versions of Juniper Junos, particularly 16.1 and 16.2 variants.

What types of attacks are possible with CVE-2019-0065?

An attacker can exploit CVE-2019-0065 by sending crafted SIP packets to repeatedly crash the MS-PIC component, leading to service disruptions.

Is CVE-2019-0065 remotely exploitable?

Yes, CVE-2019-0065 can be exploited remotely, enabling attackers to affect system availability.