CVE-2019-0059

Опубликовано: 09 окт. 2019

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

A memory leak vulnerability in the of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending specific commands from a peered BGP host and having those BGP states delivered to the vulnerable device. This issue affects: Juniper Networks Junos OS: 18.1 versions prior to 18.1R2-S4, 18.1R3-S1; 18.1X75 all versions. Versions before 18.1R1 are not affected.

Ссылки

https://kb.juniper.net/JSA10957
Vendor Advisory
https://kb.juniper.net/JSA10957
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:18.1x75:-:*:*:*:*:*:*

cpe:2.3:o:juniper:junos:18.1x75:d10:*:*:*:*:*:*

EPSS

Процентиль: 59%

0.00389

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-400

CWE-401

Связанные уязвимости

GHSA-q7rm-c66r-g7qx

github

больше 3 лет назад

BDU:2019-03658