PT-2019-2078
CVE-2019-0041
·
Publicado
2019-04-10
·
Atualizado
2020-09-29
Descrição por
CVSS 3.1
8.6
AltaMétricasAV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Junos OS versions prior to 18.2R1-S2
Junos OS version 18.2R2
Description
The issue is related to errors in security settings, allowing a remote attacker to impact the integrity and availability of protected information. On EX4300-MP Series devices with any lo0 filters applied, transit network traffic may reach the control plane via loopback interface, potentially causing the device to fail to forward such traffic.
Recommendations
For Junos OS versions prior to 18.2R1-S2, update to version 18.2R1-S2 or later.
For Junos OS version 18.2R2, consider applying configuration changes to restrict access to the control plane via loopback interface until a patch is available.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾