CVE-2019-0019
Published Apr 10, 2019
Last updated 3 years ago
Overview
- Description
- When BGP tracing is enabled an incoming BGP message may cause the Junos OS routing protocol daemon (rpd) process to crash and restart. While rpd restarts after a crash, repeated crashes can result in an extended DoS condition. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S4, 16.1R7-S5; 16.2 versions prior to 16.2R2-S9, 16.2R3; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3-S1; 17.3 versions prior to 17.3R3-S3, 17.3R3-S4, 17.3R4; 17.4 versions prior to 17.4R1-S7, 17.4R2-S3, 17.4R2-S4, 17.4R3; 18.1 versions prior to 18.1R2-S4, 18.1R3-S4, 18.1R4; 18.2 versions prior to 18.2R2-S2, 18.2R2-S3, 18.2R3; 18.2X75 versions prior to 18.2X75-D40; 18.3 versions prior to 18.3R1-S3, 18.3R2; 18.4 versions prior to 18.4R1-S2, 18.4R2. This issue does not affect Junos releases prior to 16.1R1.
- Source
- sirt@juniper.net
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 7.5
- Impact score
- 3.6
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Severity
- HIGH
CVSS 3.0
- Type
- Secondary
- Base score
- 7.5
- Impact score
- 3.6
- Exploitability score
- 3.9
- Vector string
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Severity
- HIGH
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-noinfo
- sirt@juniper.net
- CWE-404
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:juniper:junos:16.1:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "258A380C-1EA0-407D-B7E3-4A2E8820119C"
},
{
"criteria": "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
},
{
"criteria": "cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2DC47132-9EEA-4518-8F86-5CD231FBFB61"
},
{
"criteria": "cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD5A30CE-9498-4007-8E66-FD0CC6CF1836"
},
{
"criteria": "cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6D3E38C1-808C-4BD3-993D-F30855F5390F"
},
{
"criteria": "cpe:2.3:o:juniper:junos:16.1:r5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "72194CB7-FFDC-4897-9D6E-EA3459DDDEB5"
},
{
"criteria": "cpe:2.3:o:juniper:junos:16.1:r6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "92F35C19-5AD2-4F98-8313-2E880714DF3B"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:juniper:junos:16.2:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9677CE18-B955-432F-BA2B-AAE3D0CA0F16"
},
{
"criteria": "cpe:2.3:o:juniper:junos:16.2:r1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3661BC68-6F32-447F-8D20-FD73FBBED9C6"
},
{
"criteria": "cpe:2.3:o:juniper:junos:16.2:r2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5B6097D4-3856-4696-9A26-5B6C0FD9AD6C"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:juniper:junos:17.1:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CC9B5CDE-3A50-4CD3-962A-FA0989939F37"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.1:r1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7572C187-4D58-4E0D-A605-B2B13EFF5C6B"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.1:r2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E34A149E-C2ED-4D86-A105-0A2775654AE7"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:juniper:junos:17.2:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BCEE8D9C-6D64-4A9B-A74A-57A0BF4086C6"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E889BF9C-BDDF-4A6A-97BB-00A097EF6D91"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.2:r2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7D45F2C3-20FF-4A91-A440-E109B3CCE7C9"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.2:r3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11E055AC-5626-4EBB-8611-17BB1E8AEF15"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A283D32F-1CAF-4A5A-83E1-585F2801771F"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38A40E03-F915-4888-87B0-5950F75F097D"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C433359-BC8B-4E69-BE74-A31EB148083A"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25C7C3D0-A203-4979-8375-A610ADD48E9E"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "988D317A-0646-491F-9B97-853E8E208276"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0DFDD907-5305-4602-8A9C-685AA112C342"
},
{
"criteria": "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B0A756E2-C320-405A-B24F-7C5022649E5A"
},
{
"criteria": "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:juniper:junos:18.2x75:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EEC6BBCF-6429-4BD8-9728-4A1B0616D7C9"
},
{
"criteria": "cpe:2.3:o:juniper:junos:18.2x75:d20:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "12805C4D-2737-41E4-8950-5B48636765F9"
},
{
"criteria": "cpe:2.3:o:juniper:junos:18.2x75:d5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "94667657-E6B9-4245-A30C-3A51202E7551"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
},
{
"criteria": "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5342C3DC-D640-47AB-BD76-3444852988A2"
},
{
"criteria": "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
},
{
"criteria": "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
},
{
"criteria": "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
}
],
"operator": "OR"
}
]
}
]