CVE-2019-0019

{"id": "CVE-2019-0019", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Secondary", "source": "sirt@juniper.net", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2019-04-10T20:29:00.413", "references": [{"url": "http://www.securityfocus.com/bid/107893", "tags": ["Broken Link"], "source": "sirt@juniper.net"}, {"url": "https://kb.juniper.net/JSA10931", "tags": ["Mitigation", "Vendor Advisory"], "source": "sirt@juniper.net"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "sirt@juniper.net", "description": [{"lang": "en", "value": "CWE-404"}]}], "descriptions": [{"lang": "en", "value": "When BGP tracing is enabled an incoming BGP message may cause the Junos OS routing protocol daemon (rpd) process to crash and restart. While rpd restarts after a crash, repeated crashes can result in an extended DoS condition. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S4, 16.1R7-S5; 16.2 versions prior to 16.2R2-S9, 16.2R3; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3-S1; 17.3 versions prior to 17.3R3-S3, 17.3R3-S4, 17.3R4; 17.4 versions prior to 17.4R1-S7, 17.4R2-S3, 17.4R2-S4, 17.4R3; 18.1 versions prior to 18.1R2-S4, 18.1R3-S4, 18.1R4; 18.2 versions prior to 18.2R2-S2, 18.2R2-S3, 18.2R3; 18.2X75 versions prior to 18.2X75-D40; 18.3 versions prior to 18.3R1-S3, 18.3R2; 18.4 versions prior to 18.4R1-S2, 18.4R2. This issue does not affect Junos releases prior to 16.1R1."}, {"lang": "es", "value": "Cuando la funci\u00f3n de rastreo BGP (Border Gateway Protocol) est\u00e1 activada, un mensaje BGP entrante puede provocar que el proceso rpd (Routing Protocol Daemon) del Junos OS se cierre inesperadamente y se reinicie. Cuando el rpd se reinicia despu\u00e9s de un cierre inesperado, y estos se repiten, puede resultar en una condici\u00f3n de denegaci\u00f3n de servicio extendida. Las versiones afectadas son el Juniper Networks Junos OS: 16.1 versiones anteriores a 16.1R7-S4, 16.1R7-S5; 16.2 versiones anteriores a 16.2R2-S9, 16.2R3; 17.1 versiones anteriores a 17.1R3-S1; 17.2 versiones anteriores a 17.2R3-S1; 17.3 versiones anteriores a 17.3R3-S3, 17.3R3-S4, 17.3R4, 17.3R4; 17.4 versiones anteriores a 17.4R1-S7, 17.4R2-S3, 17.4R2-S4, 17.4R3; 18.1 versiones anteriores a 18.1R2-S4, 18.1R3-S4, 18.1R4; 18.2 versiones anteriores a 18.2R2-S2, 18.2R2-S3, 18.2R3; 18.2X75 versiones anteriores a 18.2X75-D40; 18.3 versiones anteriores a 18.3R1-S3, 18.3R2; 18.4 versiones anteriores a 18.4R1-S2, 18.4R2. Este problema no afecta a las versiones de Junos anteriores a la 16.1R1."}], "lastModified": "2021-10-28T12:55:19.910", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:juniper:junos:16.1:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "258A380C-1EA0-407D-B7E3-4A2E8820119C"}, {"criteria": "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BBE35BDC-7739-4854-8BB8-E8600603DE9D"}, {"criteria": "cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2DC47132-9EEA-4518-8F86-5CD231FBFB61"}, {"criteria": "cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CD5A30CE-9498-4007-8E66-FD0CC6CF1836"}, {"criteria": "cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6D3E38C1-808C-4BD3-993D-F30855F5390F"}, {"criteria": "cpe:2.3:o:juniper:junos:16.1:r5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "72194CB7-FFDC-4897-9D6E-EA3459DDDEB5"}, {"criteria": "cpe:2.3:o:juniper:junos:16.1:r6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "92F35C19-5AD2-4F98-8313-2E880714DF3B"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:juniper:junos:16.2:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9677CE18-B955-432F-BA2B-AAE3D0CA0F16"}, {"criteria": "cpe:2.3:o:juniper:junos:16.2:r1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3661BC68-6F32-447F-8D20-FD73FBBED9C6"}, {"criteria": "cpe:2.3:o:juniper:junos:16.2:r2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B6097D4-3856-4696-9A26-5B6C0FD9AD6C"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:juniper:junos:17.1:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CC9B5CDE-3A50-4CD3-962A-FA0989939F37"}, {"criteria": "cpe:2.3:o:juniper:junos:17.1:r1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7572C187-4D58-4E0D-A605-B2B13EFF5C6B"}, {"criteria": "cpe:2.3:o:juniper:junos:17.1:r2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E34A149E-C2ED-4D86-A105-0A2775654AE7"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:juniper:junos:17.2:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BCEE8D9C-6D64-4A9B-A74A-57A0BF4086C6"}, {"criteria": "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E889BF9C-BDDF-4A6A-97BB-00A097EF6D91"}, {"criteria": "cpe:2.3:o:juniper:junos:17.2:r2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7D45F2C3-20FF-4A91-A440-E109B3CCE7C9"}, {"criteria": "cpe:2.3:o:juniper:junos:17.2:r3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "11E055AC-5626-4EBB-8611-17BB1E8AEF15"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A283D32F-1CAF-4A5A-83E1-585F2801771F"}, {"criteria": "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "38A40E03-F915-4888-87B0-5950F75F097D"}, {"criteria": "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "69FC46D4-39E2-4E2F-A1D3-1001769A7115"}, {"criteria": "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"}, {"criteria": "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C433359-BC8B-4E69-BE74-A31EB148083A"}, {"criteria": "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25C7C3D0-A203-4979-8375-A610ADD48E9E"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A00CA6FB-8F28-4171-B510-8DBA351E80C0"}, {"criteria": "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "988D317A-0646-491F-9B97-853E8E208276"}, {"criteria": "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "605F1AD7-5B09-44F0-9017-15AB3EEE559C"}, {"criteria": "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0DFDD907-5305-4602-8A9C-685AA112C342"}, {"criteria": "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0A756E2-C320-405A-B24F-7C5022649E5A"}, {"criteria": "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:juniper:junos:18.2x75:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EEC6BBCF-6429-4BD8-9728-4A1B0616D7C9"}, {"criteria": "cpe:2.3:o:juniper:junos:18.2x75:d20:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "12805C4D-2737-41E4-8950-5B48636765F9"}, {"criteria": "cpe:2.3:o:juniper:junos:18.2x75:d5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "94667657-E6B9-4245-A30C-3A51202E7551"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"}, {"criteria": "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5342C3DC-D640-47AB-BD76-3444852988A2"}, {"criteria": "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"}, {"criteria": "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "74CA9010-D3DE-487B-B46F-589A48AB0F0A"}, {"criteria": "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"}], "operator": "OR"}]}], "sourceIdentifier": "sirt@juniper.net"}