« Volver al listado

CVE-2019-0044

Estado: ModificadaAlta (7.5)—

La recepción de un paquete específico en la interfaz de administración fuera de banda fxp0 puede hacer que el sistema se bloquee y se reinicie (vmcore). Mediante el envío continuo de un paquete especialmente creado a la interfaz fxp0, un atacante puede bloquear repetitivamente el proceso rpd y provocar una denegación de servicio (DoS) prolongada. Las versiones afectadas son la serie SRX5000 de Juniper Networks: versiones 12.1X46 anteriores a 12.1X46-D82; Versiones 12.3X48 anteriores a 12.3X48-D80; Versiones 15.1X49 anteriores a 15.1X49-D160.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2019-0044",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "sirt@juniper.net",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "sirt@juniper.net",
      "affectedData": [
        {
          "vendor": "Juniper Networks",
          "product": "Junos OS",
          "versions": [
            {
              "status": "affected",
              "version": "12.1X46",
              "lessThan": "12.1X46-D82",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "12.3X48",
              "lessThan": "12.3X48-D80",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "15.1X49",
              "lessThan": "15.1X49-D160",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "SRX5000 series"
          ]
        }
      ]
    }
  ],
  "published": "2019-04-10T20:29:01.053",
  "references": [
    {
      "url": "http://www.securityfocus.com/bid/107872",
      "tags": [
        "Broken Link"
      ],
      "source": "sirt@juniper.net"
    },
    {
      "url": "https://kb.juniper.net/JSA10936",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "sirt@juniper.net"
    },
    {
      "url": "http://www.securityfocus.com/bid/107872",
      "tags": [
        "Broken Link"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://kb.juniper.net/JSA10936",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "sirt@juniper.net",
      "description": [
        {
          "lang": "en",
          "value": "CWE-404"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Receipt of a specific packet on the out-of-band management interface fxp0 may cause the system to crash and restart (vmcore). By continuously sending a specially crafted packet to the fxp0 interface, an attacker can repetitively crash the rpd process causing prolonged Denial of Service (DoS). Affected releases are Juniper Networks SRX5000 Series: 12.1X46 versions prior to 12.1X46-D82; 12.3X48 versions prior to 12.3X48-D80; 15.1X49 versions prior to 15.1X49-D160."
    },
    {
      "lang": "es",
      "value": "La recepción de un paquete específico en la interfaz de administración fuera de banda fxp0 puede hacer que el sistema se bloquee y se reinicie (vmcore). Mediante el envío continuo de un paquete especialmente creado a la interfaz fxp0, un atacante puede bloquear repetitivamente el proceso rpd y provocar una denegación de servicio (DoS) prolongada. Las versiones afectadas son la serie SRX5000 de Juniper Networks: versiones 12.1X46 anteriores a 12.1X46-D82; Versiones 12.3X48 anteriores a 12.3X48-D80; Versiones 15.1X49 anteriores a 15.1X49-D160."
    }
  ],
  "lastModified": "2026-06-17T02:07:35.183",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.3x48:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7192552C-7D4A-4D95-BA79-CDF465E27D37"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6E296274-AFC1-4F56-A4B3-827C2E0BC9D5"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.3x48:d30:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3C82799B-BD25-4359-9E3D-4D7CA7367525"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.3x48:d35:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "094485FF-960C-4533-A2AF-6C4D420D260D"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.3x48:d40:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F8BE3661-1DE5-4F57-9384-68C1B34F6812"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.3x48:d45:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B45E8A14-E7F4-41EB-9BFA-7A19E35D11FE"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.3x48:d50:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C6C694C6-C58C-4513-91E8-6CC22A2386E3"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.3x48:d51:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "64A0CCD4-91BA-440E-A14C-48E67D1F03A1"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.3x48:d55:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6B65EF51-ED97-4973-94C4-8F66C553F190"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.3x48:d60:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9EE7C08A-2A4B-4A84-AD95-A890913E2EE3"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.3x48:d66:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6A793CCD-397E-45DA-9349-D01C69AB96D9"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.3x48:d70:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B6C38637-ABE0-419A-A053-CBE076766551"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.3x48:d75:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1F87EF0D-E609-4D4A-B228-CEF05C753E68"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.3x48:d80:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4484081E-E2E9-4858-8960-144D820CF7D4"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
            },
            {
              "criteria": "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
            },
            {
              "criteria": "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "66F474D4-79B6-4525-983C-9A9011BD958B"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CFB89F64-16BB-4A14-9084-B338668D7FF1"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d10:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A71742CF-50B1-44BB-AB7B-27E5DCC9CF70"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d15:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4FD4237A-C257-4D8A-ABC4-9B2160530A4E"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d20:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5A449C87-C5C3-48FE-9E46-64ED5DD5F193"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d25:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F4B6215F-76BF-473F-B325-0975B0EB101E"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d30:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A1C4A10C-49A3-4103-9E56-F881113BC5D7"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d35:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "50E7FD07-A309-48EC-A520-C7F0FA35865C"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d40:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F868948A-04D7-473B-971F-721302653633"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d45:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "830A9EBA-88F1-4277-B98F-75AC52A60824"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d50:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BFA2ADAB-E486-4DBB-8B84-CC095D102278"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d55:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9ACD0C03-ACD9-4D47-B3EE-1D8753FF5A83"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d60:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0DD32D8A-7531-4691-B45D-9EACC69A23D6"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d65:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "76DFA52F-5B2E-47DA-9A8E-7D17A7413929"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d66:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D363E73-ABC4-4E9F-9E7B-86087D3A3F9B"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d67:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A7502F95-BADC-432A-B7BE-8E9931FA1448"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d71:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C63E8B17-250D-4D74-9A1F-2F3577D9A071"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:12.1x46:d77:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "51732A2B-52E2-4356-8409-5CB6D79F23DE"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
            },
            {
              "criteria": "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
            },
            {
              "criteria": "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "66F474D4-79B6-4525-983C-9A9011BD958B"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d100:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "856A5668-FA4F-44E9-A3F0-BE4979F631E2"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d110:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F3B2DA4D-5E5D-4E09-BE4D-5B3371703D8F"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d120:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FA2459ED-DFA5-4701-AF92-C2928C3BD64D"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d130:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8830C4BC-2B3D-4CCF-A37E-79C2D46159BD"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d140:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C808E08F-1992-43DD-A106-E920DC784831"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d150:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E288F54B-AEA3-412F-85A4-EBDFE74DB84F"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "18468579-0195-4DDE-BAA5-4BE4068F3A69"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "870244F3-1C05-4F10-A205-5189BB860F46"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "235EE40B-AA15-4F39-8087-A051F4F70995"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "17330544-3AFC-463E-A146-2840A8AE17D2"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "884E4A85-ED42-4391-9FDD-9052F957743A"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1901864B-688B-4352-A587-4B96B4E49FB1"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1B6670FB-9F5A-469B-97F2-074C28572065"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "71198992-83AA-4E28-BA7D-A3C1897B5E2B"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4323D874-C317-4D76-8E2D-C82376D84CBE"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:15.1x49:d90:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F56067DA-EBA9-481A-B60B-52148584EFBD"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
            },
            {
              "criteria": "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
            },
            {
              "criteria": "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "66F474D4-79B6-4525-983C-9A9011BD958B"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "sirt@juniper.net"
}