CVE-2019-0044

Description

Receipt of a specific packet on the out-of-band management interface fxp0 may cause the system to crash and restart (vmcore). By continuously sending a specially crafted packet to the fxp0 interface, an attacker can repetitively crash the rpd process causing prolonged Denial of Service (DoS). Affected releases are Juniper Networks SRX5000 Series: 12.1X46 versions prior to 12.1X46-D82; 12.3X48 versions prior to 12.3X48-D80; 15.1X49 versions prior to 15.1X49-D160.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.596

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2019-0044 are fixed in junos 12.1x46-d82NCM
Vulnerabilities CVE-2019-0044,CVE-2019-0058,CVE-2019-0075 are fixed in junos 12.3x48-d80NCM
Vulnerabilities CVE-2019-0038,CVE-2019-0044,CVE-2019-0075 are fixed in junos 15.1x49-d160NCM
Improper Resource Shutdown or Release Vulnerability (CVE-2019-0044)NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234