Rewterz
Rewterz Threat Advisory – IBM Security QRadar SIEM Multiple Vulnerabilities
April 19, 2019
Rewterz
Rewterz Threat Alert – Indicators of Compromise for Multiple Malspam Campaigns
April 19, 2019

Rewterz Threat Advisory – CVE-2019-0008 – Juniper QFX5000 / EX4300 / EX4600 Junos OS FXPC Buffer Overflow Vulnerability

Severity

Medium

Analysis Summary

A certain sequence of valid BGP or IPv6 BFD packets may trigger a stack based buffer overflow in the Junos OS Packet Forwarding Engine manager (FXPC) process on QFX5000 series, EX4300, EX4600 devices. This issue can result in a crash of the fxpc daemon or may potentially lead to remote code execution.

Impact

  • System access
  • Denial of Service

Affected Vendors

Juniper

Affected Products

  • Juniper Junos OS 14.1
  • Juniper Junos OS 15.1

Remediation

Update to version 14.1X53-D51 or 15.1X53-D235.