Main Vulnerability Database SB2019071120

SB2019071120 - Input validation error in Juniper Junos OS

Published: July 11, 2019

Security Bulletin ID SB2019071120

Severity

Medium

Patch available

YES

Number of vulnerabilities 1

Exploitation vector Remote access

Highest impact Denial of service

Breakdown by Severity

Low
Medium
High
Critical

Description

This security bulletin contains information about 1 security vulnerability.

1) Input validation error (CVE-ID: CVE-2019-0052)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to srxpfe process crash while JSF/UTM module parses specific HTTP packets. A remote attacker can send a specially crafted HTTP packet and perform a denial of service attack.

This vulnerability affects all SRX Series platforms that support URL-Filtering and have web-filtering enabled.

Remediation

Install update from vendor's website.

References

https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10946&cat=SIRT_1&actp=LIST