« Volver al listado

CVE-2019-0046

Estado: ModificadaMedia (6.5)—

Una vulnerabilidad en el demonio pfe-chassisd Chassis Manager (CMLC) en Junos OS de Juniper Networks, permite a un atacante causar una denegación de servicio (DoS) en el dispositivo EX4300 cuando paquetes de difusión válidos específicos crean una condición de tormenta de difusión cuando se recibieron en la interfaz me0 del dispositivo de la serie EX4300. Se requiere un reinicio del dispositivo para restaurar el servicio. La recepción continua de estos paquetes de difusión válidos creará una denegación de servicio (DoS) sostenida contra el dispositivo.

Leer descripción completaMostrar menos

Las versiones afectadas son Junos OS de Juniper Networks: versiones 16.1 y anteriores e incluyendo a 16.1R1 anteriores a 16.1R7-S5; versiones 17.1 anteriores a 17.1R3; versiones 17.2 anteriores a 17.2R3; versiones 17.3 anteriores a 17.3R3-S2; versión 17.4 anteriores a 17.4R2; versiones 18.1 anteriores a 18.1R3; versiones 18.2 anteriores a 18.2R2.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Juniper — Junos

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2019-0046",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.1,
          "accessVector": "ADJACENT_NETWORK",
          "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.5,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "sirt@juniper.net",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 6.5,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "sirt@juniper.net",
      "affectedData": [
        {
          "vendor": "Juniper Networks",
          "product": "Junos OS",
          "versions": [
            {
              "status": "affected",
              "version": "16.1 versions above and including 16.1R1 prior to 16.1R7-S5"
            },
            {
              "status": "affected",
              "version": "17.1 versions prior to 17.1R3"
            },
            {
              "status": "affected",
              "version": "17.2 versions prior to 17.2R3"
            },
            {
              "status": "affected",
              "version": "17.3 versions prior to 17.3R3-S2"
            },
            {
              "status": "affected",
              "version": "17.4 versions prior to 17.4R2"
            },
            {
              "status": "affected",
              "version": "18.1 versions prior to 18.1R3"
            },
            {
              "status": "affected",
              "version": "18.2 versions prior to 18.2R2"
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-07-11T20:15:11.177",
  "references": [
    {
      "url": "http://www.securityfocus.com/bid/109272",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "sirt@juniper.net"
    },
    {
      "url": "https://kb.juniper.net/JSA10938",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "sirt@juniper.net"
    },
    {
      "url": "http://www.securityfocus.com/bid/109272",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://kb.juniper.net/JSA10938",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "sirt@juniper.net",
      "description": [
        {
          "lang": "en",
          "value": "CWE-400"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-400"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the pfe-chassisd Chassis Manager (CMLC) daemon of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the EX4300 when specific valid broadcast packets create a broadcast storm condition when received on the me0 interface of the EX4300 Series device. A reboot of the device is required to restore service. Continued receipt of these valid broadcast packets will create a sustained Denial of Service (DoS) against the device. Affected releases are Juniper Networks Junos OS: 16.1 versions above and including 16.1R1 prior to 16.1R7-S5; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R3-S2; 17.4 versions prior to 17.4R2; 18.1 versions prior to 18.1R3; 18.2 versions prior to 18.2R2."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en el demonio pfe-chassisd Chassis Manager (CMLC) en Junos OS de Juniper Networks, permite a un atacante causar una denegación de servicio (DoS) en el dispositivo EX4300 cuando paquetes de difusión válidos específicos crean una condición de tormenta de difusión cuando se recibieron en la interfaz me0 del dispositivo de la serie EX4300. Se requiere un reinicio del dispositivo para restaurar el servicio. La recepción continua de estos paquetes de difusión válidos creará una denegación de servicio (DoS) sostenida contra el dispositivo. Las versiones afectadas son Junos OS de Juniper Networks: versiones 16.1 y anteriores e incluyendo a 16.1R1 anteriores a 16.1R7-S5; versiones 17.1 anteriores a 17.1R3; versiones 17.2 anteriores a 17.2R3; versiones 17.3 anteriores a 17.3R3-S2; versión 17.4 anteriores a 17.4R2; versiones 18.1 anteriores a 18.1R3; versiones 18.2 anteriores a 18.2R2."
    }
  ],
  "lastModified": "2026-06-17T02:07:35.340",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "258A380C-1EA0-407D-B7E3-4A2E8820119C"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2DC47132-9EEA-4518-8F86-5CD231FBFB61"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CD5A30CE-9498-4007-8E66-FD0CC6CF1836"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1:r3-s10:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "07CD1E7C-24EA-46B7-964C-C78FF64AFAE6"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1:r3-s11:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8A457C57-4A36-433D-9473-5ABC091DF316"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6D3E38C1-808C-4BD3-993D-F30855F5390F"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1:r5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "72194CB7-FFDC-4897-9D6E-EA3459DDDEB5"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1:r6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "92F35C19-5AD2-4F98-8313-2E880714DF3B"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:16.1:r6-s6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "90B94472-0E32-48AD-A690-AABB2C53CA58"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.1:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CC9B5CDE-3A50-4CD3-962A-FA0989939F37"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.1:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7572C187-4D58-4E0D-A605-B2B13EFF5C6B"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.1:r2-s1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4E0D42C4-9B4D-44F9-BC84-E7994404598B"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.1:r2-s10:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CC7A70CD-3A5E-4F01-8469-E5CD406BB04F"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.1:r2-s2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DE2C20D8-3C73-4B87-BA41-DBFBCA5FBA58"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.1:r2-s3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "54D887B4-D2F4-4537-8298-B98D01396F12"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.1:r2-s4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1C1B5AE6-A323-4744-BCA1-25E46D2D27BB"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.1:r2-s5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0AB39E2F-0D67-4FA6-84B8-36684E971002"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.1:r2-s6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A32C3702-48DE-47CF-B0D1-3A629676AD03"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.1:r2-s7:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B9695B3E-FCDA-4DF0-B714-8B4F87AA647D"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.2:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BCEE8D9C-6D64-4A9B-A74A-57A0BF4086C6"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E889BF9C-BDDF-4A6A-97BB-00A097EF6D91"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.2:r1-s2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "595987A6-D8CE-41ED-B51C-EF9CD3B47AD0"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.2:r1-s4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CFA3526C-FF53-4823-B6AC-0BA91BFB532D"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.2:r1-s7:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9689695F-53EB-4B35-9072-750E7282B011"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.2:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7D45F2C3-20FF-4A91-A440-E109B3CCE7C9"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.2:r2-s6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B87ECEAD-FD18-4252-8D46-F281DD4125AC"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.2:r2-s7:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C6788EE2-B0DA-470E-B72E-E8D5CCFB5259"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A283D32F-1CAF-4A5A-83E1-585F2801771F"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "38A40E03-F915-4888-87B0-5950F75F097D"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2C433359-BC8B-4E69-BE74-A31EB148083A"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "565AE6D8-28A9-4A62-A886-5BAB954695D8"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "988D317A-0646-491F-9B97-853E8E208276"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0E0CE79A-157D-47DE-BE65-936BC12470EB"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "05060C06-18C1-40E8-AE01-385B036CC9AA"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0C752783-4843-407B-AF33-0E1D36FCAAF8"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "006EE425-A146-4E10-B050-7E754BB8402A"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0DFDD907-5305-4602-8A9C-685AA112C342"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B0A756E2-C320-405A-B24F-7C5022649E5A"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C97683B3-A07B-428F-9535-C49B55305679"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "21B7820C-01D2-401C-9E6D-C83994FD5961"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "sirt@juniper.net"
}