CVE-2019-0003

EPSS 1.72%
Veröffentlicht 15.01.2019 21:29:00
Zuletzt bearbeitet 21.11.2024 04:16:01
Quelle sirt@juniper.net
Teams Watchlist Login
Unerledigt Login

When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, a reachable assertion failure occurs, causing the routing protocol daemon (rpd) process to crash with a core file being generated. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D77 on SRX Series; 12.3 versions prior to 12.3R12-S10; 12.3X48 versions prior to 12.3X48-D70 on SRX Series; 14.1X53 versions prior to 14.1X53-D47 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100; 15.1 versions prior to 15.1R3; 15.1F versions prior to 15.1F3; 15.1X49 versions prior to 15.1X49-D140 on SRX Series; 15.1X53 versions prior to 15.1X53-D59 on EX2300/EX3400.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Juniper ≫ Junos Version12.1x46

   Juniper ≫ Srx100 Version-
   Juniper ≫ Srx110 Version-
   Juniper ≫ Srx1400 Version-
   Juniper ≫ Srx1500 Version-
   Juniper ≫ Srx210 Version-
   Juniper ≫ Srx220 Version-
   Juniper ≫ Srx240 Version-
   Juniper ≫ Srx300 Version-
   Juniper ≫ Srx320 Version-
   Juniper ≫ Srx340 Version-
   Juniper ≫ Srx3400 Version-
   Juniper ≫ Srx345 Version-
   Juniper ≫ Srx3600 Version-
   Juniper ≫ Srx4100 Version-
   Juniper ≫ Srx4200 Version-
   Juniper ≫ Srx5400 Version-
   Juniper ≫ Srx550 Version-
   Juniper ≫ Srx5600 Version-
   Juniper ≫ Srx5800 Version-
   Juniper ≫ Srx650 Version-

Juniper ≫ Junos Version12.1x46 Updated10

Juniper ≫ Junos Version12.1x46 Updated15

Juniper ≫ Junos Version12.1x46 Updated20

Juniper ≫ Junos Version12.1x46 Updated25

Juniper ≫ Junos Version12.1x46 Updated30

Juniper ≫ Junos Version12.1x46 Updated35

Juniper ≫ Junos Version12.1x46 Updated40

Juniper ≫ Junos Version12.1x46 Updated45

Juniper ≫ Junos Version12.1x46 Updated50

Juniper ≫ Junos Version12.1x46 Updated55

Juniper ≫ Junos Version12.1x46 Updated60

Juniper ≫ Junos Version12.3

Juniper ≫ Junos Version12.3 Updater1

Juniper ≫ Junos Version12.3 Updater11

Juniper ≫ Junos Version12.3 Updater12

Juniper ≫ Junos Version12.3 Updater2

Juniper ≫ Junos Version12.3 Updater3

Juniper ≫ Junos Version12.3 Updater4

Juniper ≫ Junos Version12.3 Updater5

Juniper ≫ Junos Version12.3 Updater6

Juniper ≫ Junos Version12.3 Updater7

Juniper ≫ Junos Version12.3 Updater8

Juniper ≫ Junos Version12.3 Updater9

Juniper ≫ Junos Version12.3x48 Updated10

Juniper ≫ Junos Version12.3x48 Updated15

Juniper ≫ Junos Version12.3x48 Updated20

Juniper ≫ Junos Version12.3x48 Updated25

Juniper ≫ Junos Version12.3x48 Updated30

Juniper ≫ Junos Version12.3x48 Updated35

Juniper ≫ Junos Version12.3x48 Updated40

Juniper ≫ Junos Version12.3x48 Updated45

Juniper ≫ Junos Version12.3x48 Updated55

Juniper ≫ Junos Version12.3x48 Updated60

Juniper ≫ Junos Version12.3x48 Updated65

Juniper ≫ Junos Version14.1x53

   Juniper ≫ Ex2200/vc Version-
   Juniper ≫ Ex3200 Version-
   Juniper ≫ Ex3300/vc Version-
   Juniper ≫ Ex4200 Version-
   Juniper ≫ Ex4300 Version-
   Juniper ≫ Ex4550/vc Version-
   Juniper ≫ Ex4600 Version-
   Juniper ≫ Ex6200 Version-
   Juniper ≫ Ex8200/vc (xre) Version-
   Juniper ≫ Qfx3500 Version-
   Juniper ≫ Qfx3600 Version-
   Juniper ≫ Qfx5100 Version-

Juniper ≫ Junos Version14.1x53 Updated10

Juniper ≫ Junos Version14.1x53 Updated15

Juniper ≫ Junos Version14.1x53 Updated16

Juniper ≫ Junos Version14.1x53 Updated25

Juniper ≫ Junos Version14.1x53 Updated26

Juniper ≫ Junos Version14.1x53 Updated27

Juniper ≫ Junos Version14.1x53 Updated30

Juniper ≫ Junos Version14.1x53 Updated35

Juniper ≫ Junos Version14.1x53 Updated40

Juniper ≫ Junos Version14.1x53 Updated42

Juniper ≫ Junos Version14.1x53 Updated43

Juniper ≫ Junos Version14.1x53 Updated44

Juniper ≫ Junos Version14.1x53 Updated45

Juniper ≫ Junos Version14.1x53 Updated46

Juniper ≫ Junos Version15.1 Updatef1

Juniper ≫ Junos Version15.1 Updatef2

Juniper ≫ Junos Version15.1 Updatef3

Juniper ≫ Junos Version15.1 Updatef4

Juniper ≫ Junos Version15.1 Updatef5

Juniper ≫ Junos Version15.1 Updatef6

Juniper ≫ Junos Version15.1 Updatef7

Juniper ≫ Junos Version15.1 Updater1

Juniper ≫ Junos Version15.1 Updater2

Juniper ≫ Junos Version15.1 Updater7-s2

Juniper ≫ Junos Version15.1 Updater7-s3

Juniper ≫ Junos Version15.1x49 Updated10

Juniper ≫ Junos Version15.1x49 Updated100

Juniper ≫ Junos Version15.1x49 Updated110

Juniper ≫ Junos Version15.1x49 Updated120

Juniper ≫ Junos Version15.1x49 Updated130

Juniper ≫ Junos Version15.1x49 Updated20

Juniper ≫ Junos Version15.1x49 Updated30

Juniper ≫ Junos Version15.1x49 Updated35

Juniper ≫ Junos Version15.1x49 Updated40

Juniper ≫ Junos Version15.1x49 Updated45

Juniper ≫ Junos Version15.1x49 Updated50

Juniper ≫ Junos Version15.1x49 Updated55

Juniper ≫ Junos Version15.1x49 Updated60

Juniper ≫ Junos Version15.1x49 Updated65

Juniper ≫ Junos Version15.1x49 Updated70

Juniper ≫ Junos Version15.1x49 Updated75

Juniper ≫ Junos Version15.1x49 Updated80

Juniper ≫ Junos Version15.1x49 Updated90

Juniper ≫ Junos Version15.1x53 Updated20

Juniper ≫ Ex2300 Version-
Juniper ≫ Ex3400 Version-

Juniper ≫ Junos Version15.1x53 Updated21

Juniper ≫ Ex2300 Version-
Juniper ≫ Ex3400 Version-

Juniper ≫ Junos Version15.1x53 Updated210

Juniper ≫ Ex2300 Version-
Juniper ≫ Ex3400 Version-

Juniper ≫ Junos Version15.1x53 Updated25

Juniper ≫ Ex2300 Version-
Juniper ≫ Ex3400 Version-

Juniper ≫ Junos Version15.1x53 Updated30

Juniper ≫ Ex2300 Version-
Juniper ≫ Ex3400 Version-

Juniper ≫ Junos Version15.1x53 Updated32

Juniper ≫ Ex2300 Version-
Juniper ≫ Ex3400 Version-

Juniper ≫ Junos Version15.1x53 Updated33

Juniper ≫ Ex2300 Version-
Juniper ≫ Ex3400 Version-

Juniper ≫ Junos Version15.1x53 Updated34

Juniper ≫ Ex2300 Version-
Juniper ≫ Ex3400 Version-

Juniper ≫ Junos Version15.1x53 Updated40

Juniper ≫ Ex2300 Version-
Juniper ≫ Ex3400 Version-

Juniper ≫ Junos Version15.1x53 Updated45

Juniper ≫ Ex2300 Version-
Juniper ≫ Ex3400 Version-

Juniper ≫ Junos Version15.1x53 Updated56

Juniper ≫ Ex2300 Version-
Juniper ≫ Ex3400 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.72%	0.816

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.9	2.2	3.6	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P
sirt@juniper.net	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-617 Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

http://www.securityfocus.com/bid/106544

Third Party Advisory

VDB Entry

https://kb.juniper.net/JSA10902

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2019-0003

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2019-0003

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2019-0003

EUVD