CVE-2019-0008 Memory corruption in Junos OS

Critical 9.8 Published 10 Apr 2019 Updated 16 Sep 2024

A stack buffer overflow in Junos OS allows remote attackers to cause a crash or execute arbitrary code via crafted BGP or BFD packets.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2019-0008?

CVE-2019-0008 is a critical memory corruption vulnerability in Juniper Junos, published on 10 Apr 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A certain sequence of valid BGP or IPv6 BFD packets may trigger a stack based buffer overflow in the Junos OS Packet Forwarding Engine manager (FXPC) process on QFX5000 series, EX4300, EX4600 devices. This issue can result in a crash of the fxpc daemon or may potentially lead to remote code execution. Affected releases are Juniper Networks Junos OS on QFX 5000 series, EX4300, EX4600 are: 14.1X53; 15.1X53 versions prior to 15.1X53-D235; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R3-S2, 17.3R4; 17.4 versions prior to 17.4R2-S1, 17.4R3; 18.1 versions prior to 18.1R3-S1, 18.1R4; 18.2 versions prior to 18.2R2; 18.2X75 versions prior to 18.2X75-D30; 18.3 versions prior to 18.3R2.

Weakness: CWE-787, CWE-121

Which versions are affected by CVE-2019-0008?

It affects 1 product.

Products include Juniper Junos.

How do I fix CVE-2019-0008?

No fix has been published for CVE-2019-0008 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2019-0008 being exploited?

There is no known exploitation of CVE-2019-0008 in the wild and no public exploit code.

All Juniper Junos vulnerabilities

Sources

Also known as GHSA-w8p6-5qfp-c66p.