CRITICAL🇵🇱 Wersja polska

CVE-2019-0008

CVSS 9.8v3.1pub. 2019-04-10upd. 2024-11-21

A certain sequence of valid BGP or IPv6 BFD packets may trigger a stack based buffer overflow in the Junos OS Packet Forwarding Engine manager (FXPC) process on QFX5000 series, EX4300, EX4600 devices. This issue can result in a crash of the fxpc daemon or may potentially lead to remote code execution. Affected releases are Juniper Networks Junos OS on QFX 5000 series, EX4300, EX4600 are: 14.1X53; 15.1X53 versions prior to 15.1X53-D235; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R3-S2, 17.3R4; 17.4 versions prior to 17.4R2-S1, 17.4R3; 18.1 versions prior to 18.1R3-S1, 18.1R4; 18.2 versions prior to 18.2R2; 18.2X75 versions prior to 18.2X75-D30; 18.3 versions prior to 18.3R2.

🇵🇱 Read Polish description →

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Juniper Ex4300
HW
Juniper
all versions
Juniper Ex4300m
HW
Juniper
all versions
Juniper Ex4600
HW
Juniper
all versions
Juniper Ex4650
HW
Juniper
all versions
Juniper Junos
OS
Juniper
14.1x5317.317.418.118.3 – 18.3r2 (excl.)15.1x53 – 15.1x53-d235 (excl.)17.1 – 17.1r3 (excl.)17.2 – 17.2r3 (excl.)17.3 – 17.3r3-s2 (excl.)17.4 – 17.4r2-s1 (excl.)18.1 – 18.1r3-s1 (excl.)18.2 – 18.2r2 (excl.)18.2x75 – 18.2x75-d30 (excl.)
Juniper Qfx5100
HW
Juniper
all versions
Juniper Qfx5110
HW
Juniper
all versions
Juniper Qfx5120
HW
Juniper
all versions
Juniper Qfx5200 32c
HW
Juniper
all versions
Juniper Qfx5200 48y
HW
Juniper
all versions
Juniper Qfx5210 64c
HW
Juniper
all versions