CVE-2019-0038 : Crafted packets destined to the management interface (fxp0) of an SRX340 or SRX3

Crafted packets destined to the management interface (fxp0) of an SRX340 or SRX345 services gateway may create a denial of service (DoS) condition due to buffer space exhaustion. This issue only affects the SRX340 and SRX345 services gateways. No other products or platforms are affected by this vulnerability. Affected releases are Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D160 on SRX340/SRX345; 17.3 on SRX340/SRX345; 17.4 versions prior to 17.4R2-S3, 17.4R3 on SRX340/SRX345; 18.1 versions prior to 18.1R3-S1 on SRX340/SRX345; 18.2 versions prior to 18.2R2 on SRX340/SRX345; 18.3 versions prior to 18.3R1-S2, 18.3R2 on SRX340/SRX345. This issue does not affect Junos OS releases prior to 15.1X49 on any platform.

Published 2019-04-10 20:29:01

Updated 2021-10-25 16:21:48

Source Juniper Networks, Inc.

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2019-0038

Juniper » Junos » Version: 15.1x49 Update D10
cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 15.1x49 Update D20
cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 15.1x49 Update D150
cpe:2.3:o:juniper:junos:15.1x49:d150:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 15.1x49 Update D30
cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 15.1x49 Update D35
cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 15.1x49 Update D45
cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 15.1x49 Update D50
cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 15.1x49 Update D55
cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 15.1x49 Update D40
cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 15.1x49 Update D65
cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 15.1x49 Update D75
cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 15.1x49 Update D80
cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 15.1x49 Update D60
cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 15.1x49 Update D70
cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 15.1x49
cpe:2.3:o:juniper:junos:15.1x49:-:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 18.1 Update R1
cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 18.1 Update R2
cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 18.2 Update R1
cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 17.3
cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 17.4
cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 18.1
cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 18.3 Update R1
cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 18.3 Update R1-s1
cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 18.3
cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 17.4 Update R2-s2
cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 18.1 Update R3
cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 17.4 Update R2-s1
cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 18.1 Update R2-s1
cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 18.1 Update R2-s2
cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 18.2
cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A
Juniper » Junos » Version: 18.3 Update R2
cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*
Matching versions
When used together with: Juniper » Srx340 » Version: N/A
When used together with: Juniper » Srx345 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2019-0038

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 16 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-0038

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.1	MEDIUM	AV:A/AC:L/Au:N/C:N/I:N/A:C	6.5	6.9	NIST
Access Vector: Adjacent Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
6.5	MEDIUM	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	2.8	3.6	Juniper Networks, Inc.
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High
6.5	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	2.8	3.6	NIST
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2019-0038

CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

Assigned by: sirt@juniper.net (Secondary)
CWE-770 Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2019-0038

http://www.securityfocus.com/bid/107873

Juniper Junos CVE-2019-0038 Denial of Service Vulnerability
Third Party Advisory;VDB Entry
https://kb.juniper.net/JSA10927

Juniper Networks - 2019-04 Security Bulletin: SRX Series: Crafted packets destined to fxp0 management interface on SRX340/SRX345 devices can lead to DoS (CVE-2019-0038)
Vendor Advisory

Jump to

Vulnerability Details : CVE-2019-0038

Products affected by CVE-2019-0038

Exploit prediction scoring system (EPSS) score for CVE-2019-0038

CVSS scores for CVE-2019-0038

CWE ids for CVE-2019-0038

References for CVE-2019-0038