Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-0028

Опубликовано: 10 апр. 2019
Источник: nvd
CVSS3: 7.5
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

On Junos devices with the BGP graceful restart helper mode enabled or the BGP graceful restart mechanism enabled, a BGP session restart on a remote peer that has the graceful restart mechanism enabled may cause the local routing protocol daemon (RPD) process to crash and restart. By simulating a specific BGP session restart, an attacker can repeatedly crash the RPD process causing prolonged denial of service (DoS). Graceful restart helper mode for BGP is enabled by default. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to 16.1R7; 16.1X65 versions prior to 16.1X65-D48; 16.2 versions prior to 16.2R2-S8; 17.1 versions prior to 17.1R2-S7, 17.1R3; 17.2 versions prior to 17.2R1-S7, 17.2R3; 17.2X75 versions prior to 17.2X75-D92, 17.2X75-D102, 17.2X75-D110; 17.3 versions prior to 17.3R2-S2, 17.3R3; 17.4 versions prior to 17.4R1-S4, 17.4R2; 18.1 versions prior to 18.1R2. Junos OS releases prior to

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:16.1:r3-s10:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:16.1:r5-s4:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:16.1:r6-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:16.1:r7:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:16.1x65:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:16.1x65:d30:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:16.1x65:d35:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:16.1x65:d40:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:16.2:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:16.2:r2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:16.2:r2-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:16.2:r2-s2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:16.2:r2-s3:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:16.2:r2-s4:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:16.2:r2-s5:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:16.2:r2-s6:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:16.2:r2-s7:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:16.2:r2-s8:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.1:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.1:r2-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.1:r2-s2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.1:r2-s3:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.1:r2-s4:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.1:r2-s5:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.1:r2-s6:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.1:r2-s7:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.1r3:*:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.2:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.2:r1-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.2:r1-s2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.2:r1-s3:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.2:r1-s4:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.2:r1-s5:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.2:r1-s6:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.2:r1-s7:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.2r3:*:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.2x75:*:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.2x75:d102:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.2x75:d110:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.2x75:d92:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.3r3:*:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:17.4r2:*:*:*:*:*:*:*
cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*

EPSS

Процентиль: 68%
0.00566
Низкий

7.5 High

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-404
NVD-CWE-noinfo

Связанные уязвимости

github логотип

GHSA-jwm3-pq76-qvr6

CVSS3: 7.5
github
больше 3 лет назад

On Junos devices with the BGP graceful restart helper mode enabled or the BGP graceful restart mechanism enabled, a BGP session restart on a remote peer that has the graceful restart mechanism enabled may cause the local routing protocol daemon (RPD) process to crash and restart. By simulating a specific BGP session restart, an attacker can repeatedly crash the RPD process causing prolonged denial of service (DoS). Graceful restart helper mode for BGP is enabled by default. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to 16.1R7; 16.1X65 versions prior to 16.1X65-D48; 16.2 versions prior to 16.2R2-S8; 17.1 versions prior to 17.1R2-S7, 17.1R3; 17.2 versions prior to 17.2R1-S7, 17.2R3; 17.2X75 versions prior to 17.2X75-D92, 17.2X75-D102, 17.2X75-D110; 17.3 versions prior to 17.3R2-S2, 17.3R3; 17.4 versions prior to 17.4R1-S4, 17.4R2; 18.1 versions prior to 18.1R2. Junos OS releases prior...

fstec логотип

BDU:2019-01660

CVSS3: 7.5
fstec
почти 7 лет назад

Уязвимость реализации компонента BGP операционной системы Junos OS, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 68%
0.00566
Низкий

7.5 High

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-404
NVD-CWE-noinfo