CVE-2019-0001(fedoraproject / fedora)

CVE-2019-0001 | A help desk trapped in its own loop Imagine a help desk repeatedly forwarding the same request to itself until nobody else can get help. On affected Juniper MX devices with dynamic VLAN configuration, a malformed packet could trigger uncontrolled recursion in the bbe-smgd subscriber-management service. The result: high CPU usage and a service crash. Repeated packets could prolong the denial of service. This was not a claim of data theft. The lesson: availability is security too. Check affected Junos release ranges and apply the relevant fixes.

The affected daemon was bbe-smgd in Junos OS. The condition depended on MX Series devices with dynamic VLAN configuration. Lesson: resource exhaustion can disrupt service even when no data is stolen. Official record: https://github.com/CVEProject/cvelistV5/blob/main/cves/2019/0xxx/CVE-2019-0001.json