CVE-2019-0011
Estado: ModificadaMedia (6.5)—
El kernel de Junos OS se cierra inesperadamente tras procesar un paquete entrante en concreto a la interfaz de gestión de banda (como fxp0, me0, em0, vme0) destinada a otra dirección. Mediante el envío continuo de este tipo de paquete, un atacante puede cerrar repetidamente el kernel, provocando una denegación de servicio (DoS) prolongada. Las versiones afectadas son Juniper Networks Junos OS: 17.2 en versiones anteriores a la 17.2R1-S7 y la 17.2R3; 17.3 en versiones anteriores a la 17.3R3-S3; 17.4 en versiones anteriores a la 17.4R1-S4 y la 17.4R2; 17.2X75 en versiones anteriores a la 17.2X75-D110 y 18.1 en versiones anteriores a la 18.1R2.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Puntuación base: 6.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.64%
- Percentil entre todas las CVEs puntuadas: 49
- Fecha de la puntuación: 8/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- NVD-CWE-noinfo
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2019-0011",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 3.3,
"accessVector": "ADJACENT_NETWORK",
"vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:P",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 6.5,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Secondary",
"source": "sirt@juniper.net",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 6.5,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 2.8
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.5,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "sirt@juniper.net",
"affectedData": [
{
"vendor": "Juniper Networks",
"product": "Junos OS",
"versions": [
{
"status": "affected",
"version": "17.2",
"lessThan": "17.2R1-S7, 17.2R3",
"versionType": "custom"
},
{
"status": "affected",
"version": "17.3",
"lessThan": "17.3R3-S3",
"versionType": "custom"
},
{
"status": "affected",
"version": "17.4",
"lessThan": "17.4R1-S4, 17.4R2",
"versionType": "custom"
},
{
"status": "affected",
"version": "17.2X75",
"lessThan": "17.2X75-D110",
"versionType": "custom"
},
{
"status": "affected",
"version": "18.1",
"lessThan": "18.1R2",
"versionType": "custom"
}
]
}
]
}
],
"published": "2019-01-15T21:29:01.230",
"references": [
{
"url": "http://www.securityfocus.com/bid/106534",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"source": "sirt@juniper.net"
},
{
"url": "https://kb.juniper.net/JSA10911",
"tags": [
"Vendor Advisory"
],
"source": "sirt@juniper.net"
},
{
"url": "http://www.securityfocus.com/bid/106534",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://kb.juniper.net/JSA10911",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The Junos OS kernel crashes after processing a specific incoming packet to the out of band management interface (such as fxp0, me0, em0, vme0) destined for another address. By continuously sending this type of packet, an attacker can repeatedly crash the kernel causing a sustained Denial of Service. Affected releases are Juniper Networks Junos OS: 17.2 versions prior to 17.2R1-S7, 17.2R3; 17.3 versions prior to 17.3R3-S3; 17.4 versions prior to 17.4R1-S4, 17.4R2; 17.2X75 versions prior to 17.2X75-D110; 18.1 versions prior to 18.1R2."
},
{
"lang": "es",
"value": "El kernel de Junos OS se cierra inesperadamente tras procesar un paquete entrante en concreto a la interfaz de gestión de banda (como fxp0, me0, em0, vme0) destinada a otra dirección. Mediante el envío continuo de este tipo de paquete, un atacante puede cerrar repetidamente el kernel, provocando una denegación de servicio (DoS) prolongada. Las versiones afectadas son Juniper Networks Junos OS: 17.2 en versiones anteriores a la 17.2R1-S7 y la 17.2R3; 17.3 en versiones anteriores a la 17.3R3-S3; 17.4 en versiones anteriores a la 17.4R1-S4 y la 17.4R2; 17.2X75 en versiones anteriores a la 17.2X75-D110 y 18.1 en versiones anteriores a la 18.1R2."
}
],
"lastModified": "2026-06-17T02:07:30.223",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:juniper:junos:17.2:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BCEE8D9C-6D64-4A9B-A74A-57A0BF4086C6"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E889BF9C-BDDF-4A6A-97BB-00A097EF6D91"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.2:r1-s1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8BCF0612-AF16-4925-8E42-77734513F923"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.2:r1-s2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "595987A6-D8CE-41ED-B51C-EF9CD3B47AD0"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.2:r1-s3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B5A2205-C40B-4746-9A23-1973433FF065"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.2:r1-s4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CFA3526C-FF53-4823-B6AC-0BA91BFB532D"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.2:r1-s5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA92B7F8-705B-410F-BDA3-7C28FF51967F"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.2:r1-s6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9990301C-9D79-4372-8EC6-71A209B0C0D7"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A283D32F-1CAF-4A5A-83E1-585F2801771F"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38A40E03-F915-4888-87B0-5950F75F097D"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25C7C3D0-A203-4979-8375-A610ADD48E9E"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "565AE6D8-28A9-4A62-A886-5BAB954695D8"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C366F93-BB30-4144-99AE-40B676977834"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "988D317A-0646-491F-9B97-853E8E208276"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:juniper:junos:17.2x75:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8B809686-D679-483B-9196-510582F07A7E"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.2x75:d100:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "21ED0B18-9767-4499-A8D5-A54502CA7744"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.2x75:d102:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "81332BD3-99F9-4A7C-A04F-1F3A81CA6941"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.2x75:d50:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1C913A29-64F1-4B2C-A4BC-163891E9A43A"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.2x75:d70:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD7217ED-631C-4206-9381-18C0BDD69C7D"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.2x75:d90:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF95B213-5DAA-4A0A-B813-04673958A746"
},
{
"criteria": "cpe:2.3:o:juniper:junos:17.2x75:d92:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5DCC950-B6D1-4EF2-87EB-7D152CD9D8CD"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0DFDD907-5305-4602-8A9C-685AA112C342"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "sirt@juniper.net"
}