Juniper Junos CVE-2019-0028 Remote Denial of Service Vulnerability

Bugtraq ID:	107892
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2019-0028
Remote:	Yes
Local:	No
Published:	Apr 10 2019 12:00AM
Updated:	Apr 10 2019 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Juniper Junos 18.1R1 Juniper Junos 18.1 Juniper Junos 17.4R1-S1 Juniper Junos 17.4R1 Juniper Junos 17.4 Juniper Junos 17.3R2-S1 Juniper Junos 17.3R2 Juniper Junos 17.3R1 Juniper Junos 17.3 Juniper Junos 17.2X75-D91 Juniper Junos 17.2X75-D70 Juniper Junos 17.2X75-D50 Juniper Junos 17.2X75 Juniper Junos 17.2R2 Juniper Junos 17.2R1-S5 Juniper Junos 17.2R1-S3 Juniper Junos 17.2R1-S1 Juniper Junos 17.2R1 Juniper Junos 17.2 Juniper Junos 17.1R2-S6 Juniper Junos 17.1R2-S5 Juniper Junos 17.1R2-S4 Juniper Junos 17.1R2-S3 Juniper Junos 17.1R2-S2 Juniper Junos 17.1R2 Juniper Junos 17.1R1 Juniper Junos 17.1 Juniper Junos 16.2R2-S7 Juniper Junos 16.2R2-S6 Juniper Junos 16.2R2-S5 Juniper Junos 16.2R2-S2 Juniper Junos 16.2 Juniper Junos 16.1X65-D47 Juniper Junos 16.1X65-D45 Juniper Junos 16.1X65 Juniper Junos 16.1R6 Juniper Junos 16.1R5 Juniper Junos 16.1R3 Juniper Junos 16.1R2 Juniper Junos 16.1R1 Juniper Junos 16.1
Not Vulnerable:	Juniper Junos 18.1R2 Juniper Junos 17.4R2 Juniper Junos 17.4R1-S4 Juniper Junos 17.3R3 Juniper Junos 17.3R2-S2 Juniper Junos 17.2X75-D92 Juniper Junos 17.2X75-D110 Juniper Junos 17.2X75-D102 Juniper Junos 17.2R3 Juniper Junos 17.2R1-S7 Juniper Junos 17.1R3 Juniper Junos 17.1R2-S7 Juniper Junos 16.2R2-S8 Juniper Junos 16.1X65-D48 Juniper Junos 16.1R7

Juniper Junos CVE-2019-0028 Remote Denial of Service Vulnerability

Juniper Junos is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause a denial-of-service condition, effectively denying service to legitimate users.

The following versions are affected:

Juniper Junos 16.1 versions prior to 16.1R7;
Juniper Junos 16.1X65 versions prior to 16.1X65-D48;
Juniper Junos 16.2 versions prior to 16.2R2-S8;
Juniper Junos 17.1 versions prior to 17.1R2-S7, 17.1R3;
Juniper Junos 17.2 versions prior to 17.2R1-S7, 17.2R3;
Juniper Junos 17.2X75 versions prior to 17.2X75-D92, 17.2X75-D102, 17.2X75-D110;
Juniper Junos 17.3 versions prior to 17.3R2-S2, 17.3R3;
Juniper Junos 17.4 versions prior to 17.4R1-S4, 17.4R2;
Juniper Junos 18.1 versions prior to 18.1R2.

Juniper Junos CVE-2019-0028 Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Juniper Junos CVE-2019-0028 Remote Denial of Service Vulnerability

References:

• Juniper HomePage (Juniper)
  
• Junos Homepage (Juniper Networks)
  
• 2019-04 Security Bulletin: Junos OS: RPD process crashes due to specific BGP pee (Juniper)