CVE-2019-0014 Details
Description
On QFX and PTX Series, receipt of a malformed packet for J-Flow sampling might crash the FPC (Flexible PIC Concentrator) process which causes all interfaces to go down. By continuously sending the offending packet, an attacker can repeatedly crash the FPC process causing a sustained Denial of Service (DoS). This issue affects both IPv4 and IPv6 packet processing. Affected releases are Juniper Networks Junos OS on QFX and PTX Series: 17.4 versions prior to 17.4R2-S1, 17.4R3; 18.1 versions prior to 18.1R3-S1; 18.2 versions prior to 18.2R1-S3, 18.2R2; 17.2X75 versions prior to 17.2X75-D91, 17.2X75-D100.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://kb.juniper.net/JSA10914 | CVE | MitigationPatchVendor Advisory |
| http://www.securityfocus.com/bid/106556 | CVE | Third Party AdvisoryVDB Entry |
| https://kb.juniper.net/JSA10914 | [email protected] | MitigationPatchVendor Advisory |
| http://www.securityfocus.com/bid/106556 | [email protected] | Third Party AdvisoryVDB Entry |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-19 | Data Processing Errors | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| juniper junos | 17.2x75 d102 17.2x75 d50 17.2x75 d70 17.4 17.4 r1 17.4 r2 18.2 r1 |
CPE
Remediation
| |
| juniper ptx1000 | All versions |
CPE
Remediation
| |
| juniper ptx10002 | All versions |
CPE
Remediation
| |
| juniper ptx10008 | All versions |
CPE
Remediation
| |
| juniper ptx10016 | All versions |
CPE
Remediation
| |
| juniper ptx3000 | All versions |
CPE
Remediation
| |
| juniper ptx5000 | All versions |
CPE
Remediation
| |
| juniper qfx10002 | All versions |
CPE
Remediation
| |
| juniper qfx10008 | All versions |
CPE
Remediation
| |
| juniper qfx10016 | All versions |
CPE
Remediation
| |
| juniper qfx3500 | All versions |
CPE
Remediation
| |
| juniper qfx3600 | All versions |
CPE
Remediation
| |
| juniper qfx5100 | All versions |
CPE
Remediation
| |
| juniper qfx5110 | All versions |
CPE
Remediation
| |
| juniper qfx5120 | All versions |
CPE
Remediation
| |
| juniper qfx5200 | All versions |
CPE
Remediation
| |
| juniper qfx5210 | All versions |
CPE
Remediation
| |
Change History
9 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Jul 22, 2020 | CPE Deprecation Remap | [email protected] |
| Jul 22, 2020 | CPE Deprecation Remap | [email protected] |
| Jul 22, 2020 | CPE Deprecation Remap | [email protected] |
| Oct 9, 2019 | CVE Modified | [email protected] |
| Feb 8, 2019 | Initial Analysis | [email protected] |
| Jan 16, 2019 | CVE Modified | [email protected] |