On EX2300 and EX3400 series, high disk I/O operations may disrupt the communication between the routing engine (RE) and the packet forwarding engine (PFE).

In a virtual chassis (VC) deployment, this issue disrupts communication between the VC members.

This issue does not affect other Junos platforms.

Affected releases are Junos OS on EX2300 and EX3400 series:

• 15.1X53 versions prior to 15.1X53-D590;
• 18.1 versions prior to 18.1R2-S2, 18.1R3;
• 18.2 versions prior to 18.2R2.

This issue was seen during production usage.

This issue has been assigned CVE-2019-0009 .

The following software releases have been updated to resolve this specific issue: Junos OS 15.1X53-D113, 15.1X53-D590, 18.1R2-S2, 18.1R3, 18.2R2, 18.3R1, and all subsequent releases.

This issue is being tracked as PR 1355593 which is visible on the Customer Support website.

Note: Juniper SIRT's policy is not to evaluate releases which are beyond End of Engineering (EOE) or End of Life (EOL).

Software Releases, patches and updates are available at https://www.juniper.net/support/downloads/ .

Avoid performing operation that may generate high disk I/O.

Limiting the access to the device to only trusted administrators from trusted administrative networks or hosts would minimize the risk.

• 2019-01-09: Initial Publication.

• KB16613: Overview of the Juniper Networks SIRT Quarterly Security Bulletin Publication Process [juniper.net]
• KB16765: In which releases are vulnerabilities fixed? [juniper.net]
• KB16446: Common Vulnerability Scoring System (CVSS) and Juniper's Security Advisories [juniper.net]
• Report a Security Vulnerability - How to Contact the Juniper Networks Security Incident Response Team
• CVE-2019-0009 at cve.mitre.org
• https://kb.juniper.net/JSA10909 [juniper.net]