CVE-2019-0044 Junos OS: SRX5000 series: Kernel crash (vmcore) upon receipt of a specific packet on fxp0 interface

High 7.5 Published 10 Apr 2019 Updated 16 Sep 2024

An attacker can cause a kernel crash and prolonged denial of service on Juniper SRX5000 devices by sending crafted packets to the management interface.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2019-0044?

CVE-2019-0044 is a high-severity denial of service vulnerability in Juniper Junos, published on 10 Apr 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Receipt of a specific packet on the out-of-band management interface fxp0 may cause the system to crash and restart (vmcore). By continuously sending a specially crafted packet to the fxp0 interface, an attacker can repetitively crash the rpd process causing prolonged Denial of Service (DoS). Affected releases are Juniper Networks SRX5000 Series: 12.1X46 versions prior to 12.1X46-D82; 12.3X48 versions prior to 12.3X48-D80; 15.1X49 versions prior to 15.1X49-D160.

Weakness: CWE-404

Which versions are affected by CVE-2019-0044?

It affects 1 product.

Products include Juniper Junos.

How do I fix CVE-2019-0044?

No fix has been published for CVE-2019-0044 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2019-0044 being exploited?

There is no known exploitation of CVE-2019-0044 in the wild and no public exploit code.

All Juniper Junos vulnerabilities

Sources

Also known as GHSA-6wr3-43g5-j2g3.