Files
vuln-nvd/data/2019/CVE-2019-0044.json
T

2 lines
12 KiB
JSON

{"affected":[{"affectedData":[{"platforms":["SRX5000 series"],"product":"Junos OS","vendor":"Juniper Networks","versions":[{"lessThan":"12.1X46-D82","status":"affected","version":"12.1X46","versionType":"custom"},{"lessThan":"12.3X48-D80","status":"affected","version":"12.3X48","versionType":"custom"},{"lessThan":"15.1X49-D160","status":"affected","version":"15.1X49","versionType":"custom"}]}],"source":"sirt@juniper.net"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:juniper:junos:12.3x48:*:*:*:*:*:*:*","matchCriteriaId":"7192552C-7D4A-4D95-BA79-CDF465E27D37","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*","matchCriteriaId":"4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*","matchCriteriaId":"A4AC2E1E-74FB-4DA3-8292-B2079F83FF54","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:*","matchCriteriaId":"6E296274-AFC1-4F56-A4B3-827C2E0BC9D5","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d30:*:*:*:*:*:*","matchCriteriaId":"3C82799B-BD25-4359-9E3D-4D7CA7367525","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d35:*:*:*:*:*:*","matchCriteriaId":"094485FF-960C-4533-A2AF-6C4D420D260D","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d40:*:*:*:*:*:*","matchCriteriaId":"F8BE3661-1DE5-4F57-9384-68C1B34F6812","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d45:*:*:*:*:*:*","matchCriteriaId":"B45E8A14-E7F4-41EB-9BFA-7A19E35D11FE","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d50:*:*:*:*:*:*","matchCriteriaId":"C6C694C6-C58C-4513-91E8-6CC22A2386E3","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d51:*:*:*:*:*:*","matchCriteriaId":"64A0CCD4-91BA-440E-A14C-48E67D1F03A1","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d55:*:*:*:*:*:*","matchCriteriaId":"6B65EF51-ED97-4973-94C4-8F66C553F190","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d60:*:*:*:*:*:*","matchCriteriaId":"9EE7C08A-2A4B-4A84-AD95-A890913E2EE3","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d66:*:*:*:*:*:*","matchCriteriaId":"6A793CCD-397E-45DA-9349-D01C69AB96D9","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d70:*:*:*:*:*:*","matchCriteriaId":"B6C38637-ABE0-419A-A053-CBE076766551","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d75:*:*:*:*:*:*","matchCriteriaId":"1F87EF0D-E609-4D4A-B228-CEF05C753E68","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.3x48:d80:*:*:*:*:*:*","matchCriteriaId":"4484081E-E2E9-4858-8960-144D820CF7D4","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*","matchCriteriaId":"2FDDC897-747F-44DD-9599-7266F9B5B7B1","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*","matchCriteriaId":"68CA098D-CBE4-4E62-9EC0-43E1B6098710","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*","matchCriteriaId":"66F474D4-79B6-4525-983C-9A9011BD958B","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:*:*:*:*:*:*:*","matchCriteriaId":"CFB89F64-16BB-4A14-9084-B338668D7FF1","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*","matchCriteriaId":"A71742CF-50B1-44BB-AB7B-27E5DCC9CF70","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*","matchCriteriaId":"4FD4237A-C257-4D8A-ABC4-9B2160530A4E","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*","matchCriteriaId":"5A449C87-C5C3-48FE-9E46-64ED5DD5F193","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*","matchCriteriaId":"F4B6215F-76BF-473F-B325-0975B0EB101E","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*","matchCriteriaId":"A1C4A10C-49A3-4103-9E56-F881113BC5D7","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*","matchCriteriaId":"50E7FD07-A309-48EC-A520-C7F0FA35865C","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d40:*:*:*:*:*:*","matchCriteriaId":"F868948A-04D7-473B-971F-721302653633","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d45:*:*:*:*:*:*","matchCriteriaId":"830A9EBA-88F1-4277-B98F-75AC52A60824","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d50:*:*:*:*:*:*","matchCriteriaId":"BFA2ADAB-E486-4DBB-8B84-CC095D102278","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d55:*:*:*:*:*:*","matchCriteriaId":"9ACD0C03-ACD9-4D47-B3EE-1D8753FF5A83","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d60:*:*:*:*:*:*","matchCriteriaId":"0DD32D8A-7531-4691-B45D-9EACC69A23D6","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d65:*:*:*:*:*:*","matchCriteriaId":"76DFA52F-5B2E-47DA-9A8E-7D17A7413929","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d66:*:*:*:*:*:*","matchCriteriaId":"4D363E73-ABC4-4E9F-9E7B-86087D3A3F9B","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d67:*:*:*:*:*:*","matchCriteriaId":"A7502F95-BADC-432A-B7BE-8E9931FA1448","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d71:*:*:*:*:*:*","matchCriteriaId":"C63E8B17-250D-4D74-9A1F-2F3577D9A071","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:12.1x46:d77:*:*:*:*:*:*","matchCriteriaId":"51732A2B-52E2-4356-8409-5CB6D79F23DE","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*","matchCriteriaId":"2FDDC897-747F-44DD-9599-7266F9B5B7B1","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*","matchCriteriaId":"68CA098D-CBE4-4E62-9EC0-43E1B6098710","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*","matchCriteriaId":"66F474D4-79B6-4525-983C-9A9011BD958B","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*","matchCriteriaId":"D90D8985-34EF-44CC-A9A7-CB0FD22676F2","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d100:*:*:*:*:*:*","matchCriteriaId":"856A5668-FA4F-44E9-A3F0-BE4979F631E2","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d110:*:*:*:*:*:*","matchCriteriaId":"F3B2DA4D-5E5D-4E09-BE4D-5B3371703D8F","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d120:*:*:*:*:*:*","matchCriteriaId":"FA2459ED-DFA5-4701-AF92-C2928C3BD64D","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d130:*:*:*:*:*:*","matchCriteriaId":"8830C4BC-2B3D-4CCF-A37E-79C2D46159BD","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d140:*:*:*:*:*:*","matchCriteriaId":"C808E08F-1992-43DD-A106-E920DC784831","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d150:*:*:*:*:*:*","matchCriteriaId":"E288F54B-AEA3-412F-85A4-EBDFE74DB84F","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*","matchCriteriaId":"18468579-0195-4DDE-BAA5-4BE4068F3A69","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*","matchCriteriaId":"0E5FAA97-171F-4DB9-B78E-6E1A5F34336A","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*","matchCriteriaId":"870244F3-1C05-4F10-A205-5189BB860F46","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*","matchCriteriaId":"235EE40B-AA15-4F39-8087-A051F4F70995","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*","matchCriteriaId":"17330544-3AFC-463E-A146-2840A8AE17D2","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*","matchCriteriaId":"8ABA301F-7866-42A5-8391-E07BEAFF06FA","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*","matchCriteriaId":"884E4A85-ED42-4391-9FDD-9052F957743A","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*","matchCriteriaId":"1901864B-688B-4352-A587-4B96B4E49FB1","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*","matchCriteriaId":"78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*","matchCriteriaId":"1B6670FB-9F5A-469B-97F2-074C28572065","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*","matchCriteriaId":"71198992-83AA-4E28-BA7D-A3C1897B5E2B","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:*","matchCriteriaId":"4323D874-C317-4D76-8E2D-C82376D84CBE","vulnerable":true},{"criteria":"cpe:2.3:o:juniper:junos:15.1x49:d90:*:*:*:*:*:*","matchCriteriaId":"F56067DA-EBA9-481A-B60B-52148584EFBD","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*","matchCriteriaId":"2FDDC897-747F-44DD-9599-7266F9B5B7B1","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*","matchCriteriaId":"68CA098D-CBE4-4E62-9EC0-43E1B6098710","vulnerable":false},{"criteria":"cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*","matchCriteriaId":"66F474D4-79B6-4525-983C-9A9011BD958B","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Receipt of a specific packet on the out-of-band management interface fxp0 may cause the system to crash and restart (vmcore). By continuously sending a specially crafted packet to the fxp0 interface, an attacker can repetitively crash the rpd process causing prolonged Denial of Service (DoS). Affected releases are Juniper Networks SRX5000 Series: 12.1X46 versions prior to 12.1X46-D82; 12.3X48 versions prior to 12.3X48-D80; 15.1X49 versions prior to 15.1X49-D160."},{"lang":"es","value":"La recepción de un paquete específico en la interfaz de administración fuera de banda fxp0 puede hacer que el sistema se bloquee y se reinicie (vmcore). Mediante el envío continuo de un paquete especialmente creado a la interfaz fxp0, un atacante puede bloquear repetitivamente el proceso rpd y provocar una denegación de servicio (DoS) prolongada. Las versiones afectadas son la serie SRX5000 de Juniper Networks: versiones 12.1X46 anteriores a 12.1X46-D82; Versiones 12.3X48 anteriores a 12.3X48-D80; Versiones 15.1X49 anteriores a 15.1X49-D160."}],"id":"CVE-2019-0044","lastModified":"2026-06-17T02:07:35.183","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":5.0,"confidentialityImpact":"NONE","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","version":"2.0"},"exploitabilityScore":10.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.0"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"sirt@juniper.net","type":"Secondary"}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-04-10T20:29:01.053","references":[{"source":"sirt@juniper.net","tags":["Broken Link"],"url":"http://www.securityfocus.com/bid/107872"},{"source":"sirt@juniper.net","tags":["Patch","Vendor Advisory"],"url":"https://kb.juniper.net/JSA10936"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"],"url":"http://www.securityfocus.com/bid/107872"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://kb.juniper.net/JSA10936"}],"sourceIdentifier":"sirt@juniper.net","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-404"}],"source":"sirt@juniper.net","type":"Secondary"},{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}