CRITICAL🇵🇱 Wersja polska

CVE-2019-0006

CVSS 9.8v3.1pub. 2019-01-15upd. 2024-11-21

A certain crafted HTTP packet can trigger an uninitialized function pointer deference vulnerability in the Packet Forwarding Engine manager (fxpc) on all EX, QFX and MX Series devices in a Virtual Chassis configuration. This issue can result in a crash of the fxpc daemon or may potentially lead to remote code execution. This issue only occurs when the crafted packet it destined to the device. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D47 on EX and QFX Virtual Chassis Platforms; 15.1 versions prior to 15.1R7-S3 all Virtual Chassis Platforms 15.1X53 versions prior to 15.1X53-D50 on EX and QFX Virtual Chassis Platforms.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Juniper Ex2200

    HW
    Juniper
    all versions

  • Juniper Ex2200 C

    HW
    Juniper
    all versions

  • Juniper Ex2300

    HW
    Juniper
    all versions

  • Juniper Ex2300 C

    HW
    Juniper
    all versions

  • Juniper Ex3300

    HW
    Juniper
    all versions

  • Juniper Ex3400

    HW
    Juniper
    all versions

  • Juniper Ex4200

    HW
    Juniper
    all versions

  • Juniper Ex4300

    HW
    Juniper
    all versions

  • Juniper Ex4500

    HW
    Juniper
    all versions

  • Juniper Ex4550

    HW
    Juniper
    all versions

  • Juniper Ex4600

    HW
    Juniper
    all versions

  • Juniper Ex4650

    HW
    Juniper
    all versions

  • Juniper Ex6210

    HW
    Juniper
    all versions

  • Juniper Ex8208

    HW
    Juniper
    all versions

  • Juniper Ex8216

    HW
    Juniper
    all versions

  • Juniper Ex9204

    HW
    Juniper
    all versions

  • Juniper Ex9208

    HW
    Juniper
    all versions

  • Juniper Ex9214

    HW
    Juniper
    all versions

  • Juniper Ex9251

    HW
    Juniper
    all versions

  • Juniper Ex9253

    HW
    Juniper
    all versions

  • Juniper Junos

    OS
    Juniper
    14.1x5315.115.1x53

  • Juniper Qfx10002

    HW
    Juniper
    all versions

  • Juniper Qfx10008

    HW
    Juniper
    all versions

  • Juniper Qfx10016

    HW
    Juniper
    all versions

  • Juniper Qfx3500

    HW
    Juniper
    all versions

  • Juniper Qfx3600

    HW
    Juniper
    all versions

  • Juniper Qfx5100

    HW
    Juniper
    all versions

  • Juniper Qfx5110

    HW
    Juniper
    all versions

  • Juniper Qfx5120

    HW
    Juniper
    all versions

  • Juniper Qfx5200

    HW
    Juniper
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2023-36845CRITICAL9.8⚠ KEVPL ✓same product

RCE przez modyfikację zmiennej PHP w J-Web Juniper Junos OS (EX/SRX)

CVE-2024-21591CRITICAL9.8PL ✓same product

Out-of-bounds Write w J-Web Juniper Junos OS — RCE z uprawnieniami root

CVE-2021-0248CRITICAL10.0PL ✓same product

Hard-coded Credentials w Juniper Junos OS na urządzeniach NFX Series

CVE-2021-0254CRITICAL9.8PL ✓same product

Buffer overflow w usłudze overlayd Juniper Junos OS — RCE i DoS

CVE-2021-0211CRITICAL10.0PL ✓same product

Juniper Junos RPD: DoS przez nieprawidłowy BGP FlowSpec message