CVE-2019-0005 Security feature bypass in n/a

Medium 5.3 Published 15 Jan 2019 Updated 4 Aug 2024

Attackers can bypass IPv6 firewall filters on Juniper EX and QFX switches by using extension headers, allowing blocked packets to be forwarded.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2019-0005?

CVE-2019-0005 is a medium-severity vulnerability in Juniper Junos, published on 15 Jan 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

On EX2300, EX3400, EX4600, QFX3K and QFX5K series, firewall filter configuration cannot perform packet matching on any IPv6 extension headers. This issue may allow IPv6 packets that should have been blocked to be forwarded. IPv4 packet filtering is unaffected by this vulnerability. Affected releases are Juniper Networks Junos OS on EX and QFX series;: 14.1X53 versions prior to 14.1X53-D47; 15.1 versions prior to 15.1R7; 15.1X53 versions prior to 15.1X53-D234 on QFX5200/QFX5110 series; 15.1X53 versions prior to 15.1X53-D591 on EX2300/EX3400 series; 16.1 versions prior to 16.1R7; 17.1 versions prior to 17.1R2-S10, 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R3; 17.4 versions prior to 17.4R2; 18.1 versions prior to 18.1R2.

Weakness: CWE-770

Which versions are affected by CVE-2019-0005?

It affects 1 product.

Products include Juniper Junos.

How do I fix CVE-2019-0005?

No fix has been published for CVE-2019-0005 yet. Limit exposure of the affected software until one is available.

Is CVE-2019-0005 being exploited?

There is no known exploitation of CVE-2019-0005 in the wild and no public exploit code.

All Juniper Junos vulnerabilities

Sources

Also known as GHSA-8r5w-fx9q-rh85.