5
CVSSv2

CVE-2019-0019

Published: 10/04/2019 Updated: 28/10/2021
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

When BGP tracing is enabled an incoming BGP message may cause the Junos OS routing protocol daemon (rpd) process to crash and restart. While rpd restarts after a crash, repeated crashes can result in an extended DoS condition. Affected releases are Juniper Networks Junos OS: 16.1 versions before 16.1R7-S4, 16.1R7-S5; 16.2 versions before 16.2R2-S9, 16.2R3; 17.1 versions before 17.1R3; 17.2 versions before 17.2R3-S1; 17.3 versions before 17.3R3-S3, 17.3R3-S4, 17.3R4; 17.4 versions before 17.4R1-S7, 17.4R2-S3, 17.4R2-S4, 17.4R3; 18.1 versions before 18.1R2-S4, 18.1R3-S4, 18.1R4; 18.2 versions before 18.2R2-S2, 18.2R2-S3, 18.2R3; 18.2X75 versions before 18.2X75-D40; 18.3 versions before 18.3R1-S3, 18.3R2; 18.4 versions before 18.4R1-S2, 18.4R2. This issue does not affect Junos releases before 16.1R1.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

juniper junos 16.1

juniper junos 16.2

juniper junos 17.1

juniper junos 17.2

juniper junos 17.3

juniper junos 17.4

juniper junos 18.1

juniper junos 18.2x75

juniper junos 18.3

juniper junos 18.4