CVE-2019-0003

EPSS 1.92%
Veröffentlicht 15.01.2019 21:29:00
Zuletzt bearbeitet 21.11.2024 04:16:01
Erkennungen
Login

Junos OS: A flowspec BGP update with a specific term-order causes routing protocol daemon (rpd) process to crash with a core.

When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, a reachable assertion failure occurs, causing the routing protocol daemon (rpd) process to crash with a core file being generated. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D77 on SRX Series; 12.3 versions prior to 12.3R12-S10; 12.3X48 versions prior to 12.3X48-D70 on SRX Series; 14.1X53 versions prior to 14.1X53-D47 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100; 15.1 versions prior to 15.1R3; 15.1F versions prior to 15.1F3; 15.1X49 versions prior to 15.1X49-D140 on SRX Series; 15.1X53 versions prior to 15.1X53-D59 on EX2300/EX3400.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 5

NVD 90 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Juniper ≫ Junos Version 12.1x46

   Juniper ≫ Srx100 Version -
   Juniper ≫ Srx110 Version -
   Juniper ≫ Srx1400 Version -
   Juniper ≫ Srx1500 Version -
   Juniper ≫ Srx210 Version -
   Juniper ≫ Srx220 Version -
   Juniper ≫ Srx240 Version -
   Juniper ≫ Srx300 Version -
   Juniper ≫ Srx320 Version -
   Juniper ≫ Srx340 Version -
   Juniper ≫ Srx3400 Version -
   Juniper ≫ Srx345 Version -
   Juniper ≫ Srx3600 Version -
   Juniper ≫ Srx4100 Version -
   Juniper ≫ Srx4200 Version -
   Juniper ≫ Srx5400 Version -
   Juniper ≫ Srx550 Version -
   Juniper ≫ Srx5600 Version -
   Juniper ≫ Srx5800 Version -
   Juniper ≫ Srx650 Version -

Juniper ≫ Junos Version 12.1x46 Update d10

Juniper ≫ Junos Version 12.1x46 Update d15

Juniper ≫ Junos Version 12.1x46 Update d20

Juniper ≫ Junos Version 12.1x46 Update d25

Juniper ≫ Junos Version 12.1x46 Update d30

Juniper ≫ Junos Version 12.1x46 Update d35

Juniper ≫ Junos Version 12.1x46 Update d40

Juniper ≫ Junos Version 12.1x46 Update d45

Juniper ≫ Junos Version 12.1x46 Update d50

Juniper ≫ Junos Version 12.1x46 Update d55

Juniper ≫ Junos Version 12.1x46 Update d60

Juniper ≫ Junos Version 12.3

Juniper ≫ Junos Version 12.3 Update r1

Juniper ≫ Junos Version 12.3 Update r11

Juniper ≫ Junos Version 12.3 Update r12

Juniper ≫ Junos Version 12.3 Update r2

Juniper ≫ Junos Version 12.3 Update r3

Juniper ≫ Junos Version 12.3 Update r4

Juniper ≫ Junos Version 12.3 Update r5

Juniper ≫ Junos Version 12.3 Update r6

Juniper ≫ Junos Version 12.3 Update r7

Juniper ≫ Junos Version 12.3 Update r8

Juniper ≫ Junos Version 12.3 Update r9

Juniper ≫ Junos Version 12.3x48 Update d10

Juniper ≫ Junos Version 12.3x48 Update d15

Juniper ≫ Junos Version 12.3x48 Update d20

Juniper ≫ Junos Version 12.3x48 Update d25

Juniper ≫ Junos Version 12.3x48 Update d30

Juniper ≫ Junos Version 12.3x48 Update d35

Juniper ≫ Junos Version 12.3x48 Update d40

Juniper ≫ Junos Version 12.3x48 Update d45

Juniper ≫ Junos Version 12.3x48 Update d55

Juniper ≫ Junos Version 12.3x48 Update d60

Juniper ≫ Junos Version 12.3x48 Update d65

Juniper ≫ Junos Version 14.1x53

   Juniper ≫ Ex2200/vc Version -
   Juniper ≫ Ex3200 Version -
   Juniper ≫ Ex3300/vc Version -
   Juniper ≫ Ex4200 Version -
   Juniper ≫ Ex4300 Version -
   Juniper ≫ Ex4550/vc Version -
   Juniper ≫ Ex4600 Version -
   Juniper ≫ Ex6200 Version -
   Juniper ≫ Ex8200/vc (xre) Version -
   Juniper ≫ Qfx3500 Version -
   Juniper ≫ Qfx3600 Version -
   Juniper ≫ Qfx5100 Version -

Juniper ≫ Junos Version 14.1x53 Update d10

Juniper ≫ Junos Version 14.1x53 Update d15

Juniper ≫ Junos Version 14.1x53 Update d16

Juniper ≫ Junos Version 14.1x53 Update d25

Juniper ≫ Junos Version 14.1x53 Update d26

Juniper ≫ Junos Version 14.1x53 Update d27

Juniper ≫ Junos Version 14.1x53 Update d30

Juniper ≫ Junos Version 14.1x53 Update d35

Juniper ≫ Junos Version 14.1x53 Update d40

Juniper ≫ Junos Version 14.1x53 Update d42

Juniper ≫ Junos Version 14.1x53 Update d43

Juniper ≫ Junos Version 14.1x53 Update d44

Juniper ≫ Junos Version 14.1x53 Update d45

Juniper ≫ Junos Version 14.1x53 Update d46

Juniper ≫ Junos Version 15.1 Update f1

Juniper ≫ Junos Version 15.1 Update f2

Juniper ≫ Junos Version 15.1 Update f3

Juniper ≫ Junos Version 15.1 Update f4

Juniper ≫ Junos Version 15.1 Update f5

Juniper ≫ Junos Version 15.1 Update f6

Juniper ≫ Junos Version 15.1 Update f7

Juniper ≫ Junos Version 15.1 Update r1

Juniper ≫ Junos Version 15.1 Update r2

Juniper ≫ Junos Version 15.1 Update r7-s2

Juniper ≫ Junos Version 15.1 Update r7-s3

Juniper ≫ Junos Version 15.1x49 Update d10

Juniper ≫ Junos Version 15.1x49 Update d100

Juniper ≫ Junos Version 15.1x49 Update d110

Juniper ≫ Junos Version 15.1x49 Update d120

Juniper ≫ Junos Version 15.1x49 Update d130

Juniper ≫ Junos Version 15.1x49 Update d20

Juniper ≫ Junos Version 15.1x49 Update d30

Juniper ≫ Junos Version 15.1x49 Update d35

Juniper ≫ Junos Version 15.1x49 Update d40

Juniper ≫ Junos Version 15.1x49 Update d45

Juniper ≫ Junos Version 15.1x49 Update d50

Juniper ≫ Junos Version 15.1x49 Update d55

Juniper ≫ Junos Version 15.1x49 Update d60

Juniper ≫ Junos Version 15.1x49 Update d65

Juniper ≫ Junos Version 15.1x49 Update d70

Juniper ≫ Junos Version 15.1x49 Update d75

Juniper ≫ Junos Version 15.1x49 Update d80

Juniper ≫ Junos Version 15.1x49 Update d90

Juniper ≫ Junos Version 15.1x53 Update d20

Juniper ≫ Ex2300 Version -
Juniper ≫ Ex3400 Version -

Juniper ≫ Junos Version 15.1x53 Update d21

Juniper ≫ Ex2300 Version -
Juniper ≫ Ex3400 Version -

Juniper ≫ Junos Version 15.1x53 Update d210

Juniper ≫ Ex2300 Version -
Juniper ≫ Ex3400 Version -

Juniper ≫ Junos Version 15.1x53 Update d25

Juniper ≫ Ex2300 Version -
Juniper ≫ Ex3400 Version -

Juniper ≫ Junos Version 15.1x53 Update d30

Juniper ≫ Ex2300 Version -
Juniper ≫ Ex3400 Version -

Juniper ≫ Junos Version 15.1x53 Update d32

Juniper ≫ Ex2300 Version -
Juniper ≫ Ex3400 Version -

Juniper ≫ Junos Version 15.1x53 Update d33

Juniper ≫ Ex2300 Version -
Juniper ≫ Ex3400 Version -

Juniper ≫ Junos Version 15.1x53 Update d34

Juniper ≫ Ex2300 Version -
Juniper ≫ Ex3400 Version -

Juniper ≫ Junos Version 15.1x53 Update d40

Juniper ≫ Ex2300 Version -
Juniper ≫ Ex3400 Version -

Juniper ≫ Junos Version 15.1x53 Update d45

Juniper ≫ Ex2300 Version -
Juniper ≫ Ex3400 Version -

Juniper ≫ Junos Version 15.1x53 Update d56

Juniper ≫ Ex2300 Version -
Juniper ≫ Ex3400 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.92%	0.78

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.9	2.2	3.6	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P
Juniper	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-617 Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

http://www.securityfocus.com/bid/106544

Third Party Advisory

VDB Entry

https://kb.juniper.net/JSA10902

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-0003

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-0003

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-0003

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2019-0003