CVE-2019-0075

Description

A vulnerability in the srxpfe process on Protocol Independent Multicast (PIM) enabled SRX series devices may lead to crash of the srxpfe process and an FPC reboot while processing (PIM) messages. Sustained receipt of these packets may lead to an extended denial of service condition. Affected releases are Juniper Networks Junos OS on SRX Series: 12.3X48 versions prior to 12.3X48-D80; 15.1X49 versions prior to 15.1X49-D160; 17.3 versions prior to 17.3R3-S7 17.4 versions prior to 17.4R2-S8, 17.4R3; 18.1 versions prior to 18.1R3-S8; 18.2 versions prior to 18.2R2; 18.3 versions prior to 18.3R2.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.389

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2019-0044,CVE-2019-0058,CVE-2019-0075 are fixed in junos 12.3x48-d80NCM
Vulnerabilities CVE-2019-0038,CVE-2019-0044,CVE-2019-0075 are fixed in junos 15.1x49-d160NCM
Vulnerabilities CVE-2019-0073,CVE-2019-0075 are fixed in junos 17.3r3-s7*NCM
Vulnerabilities CVE-2019-0075 are fixed in junos 17.4r2-s8*NCM
Multiple Vulnerabilities are fixed in junos 18.2r2NCM
Multiple Vulnerabilities are fixed in junos 18.3R2NCM
CVE-2019-0075NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234