Receipt of a malformed packet on MX Series devices with dynamic vlan configuration can trigger an uncontrolled recursion loop in the Broadband Edge subscriber management daemon (bbe-smgd), and lead to high CPU usage and a crash of the bbe-smgd service. Repeated receipt of the same packet can result in an extended denial of service condition for the device. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S1; 16.2 versions prior to 16.2R2-S7; 17.1 versions prior to 17.1R2-S10, 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R3-S1; 17.4 versions prior to 17.4R2; 18.1 versions prior to 18.1R3; 18.2 versions prior to 18.2R2.

tnef release 1.4.18. ==================== Security release to resolve [CVE-2019-18849](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-20 19-18849) in which it may be possible to attack via a crafted email message extracted via tnef.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Receipt of a malformed packet on MX Series devices with dynamic   vlan configuration can trigger an uncontrolled recursion loop in   the Broadband Edge subscriber management daemon (bbe-smgd),   and lead to high CPU usage and a crash of the bbe-smgd service.   Repeated receipt of the same packet can result in an extended denial of service condition for the device.

ID	Name	Product	Family	Severity
131712	Fedora 31 : tnef (2019-815807c020)	Nessus	Fedora Local Security Checks	high
131711	Fedora 30 : tnef (2019-5f14b810f8)	Nessus	Fedora Local Security Checks	high
121642	Juniper Junos MX Malformed Packet - DOS (JSA10900)	Nessus	Junos Local Security Checks	high

Detections

Analytics

CVE-2019-0001

high

Tenable Plugins

high

high

high