Main Vulnerability Database SB2019071120

SB2019071120 - Input validation error in Juniper Junos OS

Published: July 11, 2019

Security Bulletin ID SB2019071120

CSH Severity

Medium

Patch available

YES

Number of vulnerabilities 1

Exploitation vector Remote access

Highest impact Denial of service

Breakdown by Severity

Low
Medium
High
Critical

Description

This security bulletin contains information about 1 vulnerability.

1) Input validation error (CVE-ID: CVE-2019-0052)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to srxpfe process crash while JSF/UTM module parses specific HTTP packets. A remote attacker can send a specially crafted HTTP packet and perform a denial of service attack.

This vulnerability affects all SRX Series platforms that support URL-Filtering and have web-filtering enabled.

Remediation

Install update from vendor's website.

References

https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10946&cat=SIRT_1&actp=LIST