Home

CVE-2019-0013

Description

The routing protocol daemon (RPD) process will crash and restart when a specific invalid IPv4 PIM Join packet is received. While RPD restarts after a crash, repeated crashes can result in an extended Denial of Service (DoS) condition. This issue only affects IPv4 PIM. IPv6 PIM is unaffected by this vulnerability. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D77; 12.3X48 versions prior to 12.3X48-D77; 15.1 versions prior to 15.1F6-S10, 15.1R6-S6, 15.1R7; 15.1X49 versions prior to 15.1X49-D150; 15.1X53 versions prior to 15.1X53-D233, 15.1X53-D59; 16.1 versions prior to 16.1R3-S8, 16.1R4-S8, 16.1R7; 16.2 versions prior to 16.2R2-S6; 17.1 versions prior to 17.1R2-S6, 17.1R3; 17.2 versions prior to 17.2R2-S3, 17.2R3; 17.3 versions prior to 17.3R2-S4, 17.3R3; 17.4 versions prior to 17.4R2.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.308

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are fixed in junos 12.1x46-d77NCM
Vulnerabilities CVE-2019-0010,CVE-2019-0013 are fixed in junos 12.3x48-d77NCM
Multiple Vulnerabilities are fixed in junos 15.1f6-s10NCM
Multiple Vulnerabilities are fixed in junos 16.1r3-s8NCM
Vulnerabilities CVE-2018-0003,CVE-2018-0062,CVE-2019-0013,CVE-2019-0043 are fixed in junos 16.2r2-s6NCM
Vulnerabilities CVE-2018-0019,CVE-2018-0062,CVE-2019-0013 are fixed in junos 17.1r2-s6NCM
Vulnerabilities CVE-2019-0013 are fixed in junos 17.2r2-s3NCM
Multiple Vulnerabilities are fixed in junos 17.3r2-s4NCM
Multiple Vulnerabilities are fixed in junos 17.4R2NCM
CVE-2019-0013NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234