← CVE Intelligence

CVE-2019-0019

BGP packets can trigger rpd crash when BGP tracing is enabled. PUBLISHED

Description (CNA)

When BGP tracing is enabled an incoming BGP message may cause the Junos OS routing protocol daemon (rpd) process to crash and restart. While rpd restarts after a crash, repeated crashes can result in an extended DoS condition. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S4, 16.1R7-S5; 16.2 versions prior to 16.2R2-S9, 16.2R3; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3-S1; 17.3 versions prior to 17.3R3-S3, 17.3R3-S4, 17.3R4; 17.4 versions prior to 17.4R1-S7, 17.4R2-S3, 17.4R2-S4, 17.4R3; 18.1 versions prior to 18.1R2-S4, 18.1R3-S4, 18.1R4; 18.2 versions prior to 18.2R2-S2, 18.2R2-S3, 18.2R3; 18.2X75 versions prior to 18.2X75-D40; 18.3 versions prior to 18.3R1-S3, 18.3R2; 18.4 versions prior to 18.4R1-S2, 18.4R2. This issue does not affect Junos releases prior to 16.1R1.

Affected (CNA)

Vendor / productVersions
Juniper Networks / Junos OSaffected 16.1 before 16.1R7-S4, 16.1R7-S5; affected 16.2 before 16.2R2-S9, 16.2R3; affected 17.1 before 17.1R3; affected 17.2 before 17.2R3-S1; affected 17.3 before 17.3R3-S3, 17.3R3-S4, 17.3R4; affected 17.4 before 17.4R1-S7, 17.4R2-S3, 17.4R2-S4, 17.4R3; affected 18.1 before 18.1R2-S4, 18.1R3-S4, 18.1R4; affected 18.2 before 18.2R2-S2, 18.2R2-S3, 18.2R3; affected 18.2X75 before 18.2X75-D40; affected 18.3 before 18.3R1-S3, 18.3R2; affected 18.4 before 18.4R1-S2, 18.4R2; unaffected all before 16.1

CWE

CWE-404

References

ADP enrichment

CVE

No English description supplied.