CVE-2019-0033 SRX Series: A remote attacker may cause a high CPU Denial of Service to the device when proxy ARP is configured.

High 7.5 Published 10 Apr 2019 Updated 17 Sep 2024

Remote attackers can cause high CPU denial of service on Juniper SRX devices when proxy ARP is enabled.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2019-0033?

CVE-2019-0033 is a high-severity denial of service vulnerability in Juniper Junos, published on 10 Apr 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A firewall bypass vulnerability in the proxy ARP service of Juniper Networks Junos OS allows an attacker to cause a high CPU condition leading to a Denial of Service (DoS). This issue affects only IPv4. Affected releases are Juniper Networks Junos OS: 12.1X46 versions above and including 12.1X46-D25 prior to 12.1X46-D71, 12.1X46-D73 on SRX Series; 12.3X48 versions prior to 12.3X48-D50 on SRX Series; 15.1X49 versions prior to 15.1X49-D75 on SRX Series.

Weakness: CWE-400

Which versions are affected by CVE-2019-0033?

It affects 1 product.

Products include Juniper Junos.

How do I fix CVE-2019-0033?

No fix has been published for CVE-2019-0033 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2019-0033 being exploited?

There is no known exploitation of CVE-2019-0033 in the wild and no public exploit code.

All Juniper Junos vulnerabilities

Sources

Also known as GHSA-cfxp-vw2r-fmfh.