CVE-2019-0075— Juniper Networks Junos OS 资源管理错误漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2019-0075の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Junos OS: SRX Series: Denial of Service vulnerability in srxpfe related to PIM
ソース: NVD (National Vulnerability Database)
脆弱性説明
A vulnerability in the srxpfe process on Protocol Independent Multicast (PIM) enabled SRX series devices may lead to crash of the srxpfe process and an FPC reboot while processing (PIM) messages. Sustained receipt of these packets may lead to an extended denial of service condition. Affected releases are Juniper Networks Junos OS on SRX Series: 12.3X48 versions prior to 12.3X48-D80; 15.1X49 versions prior to 15.1X49-D160; 17.3 versions prior to 17.3R3-S7 17.4 versions prior to 17.4R2-S8, 17.4R3; 18.1 versions prior to 18.1R3-S8; 18.2 versions prior to 18.2R2; 18.3 versions prior to 18.3R2.
ソース: NVD (National Vulnerability Database)
CVSS情報
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Juniper Networks Junos OS 资源管理错误漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Juniper Networks Junos OS是美国瞻博网络（Juniper Networks）公司的一套专用于该公司的硬件设备的网络操作系统。该操作系统提供了安全编程接口和Junos SDK。 Juniper Networks Junos OS中的PIM协议的srxpfe进程存在资源管理错误漏洞。远程攻击者可通过发送特制数据包利用该漏洞造成拒绝服务（srxpfe进程崩溃）。以下产品及版本受到影响：Juniper Networks Junos OS 12.3X48版本（SRX series），15.1
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Juniper Networks | Junos OS | 12.3X48 ~ 12.3X48-D80 | - |
II. CVE-2019-0075の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2019-0075のインテリジェンス情報
请登录查看更多情报信息。
Same Patch Batch · Juniper Networks · 2019-10-09 · 25 CVEs total
| CVE-2019-0047 | 8.8 HIGH | Junos OS: Persistent XSS vulnerability in J-Web |
| CVE-2019-0070 | 8.8 HIGH | Junos OS: NFX Series: An Improper Input Validation weakness allows a malicious local attac |
| CVE-2019-0071 | 7.8 HIGH | Junos OS: EX2300, EX3400 Series: Veriexec signature checking not enforced in specific vers |
| CVE-2019-0058 | 7.8 HIGH | Junos OS: SRX Series: A weakness in the Veriexec subsystem may allow privilege escalation. |
| CVE-2019-0057 | 7.8 HIGH | NFX Series: An attacker may be able to take control of the JDM application and subsequentl |
| CVE-2019-0061 | 7.8 HIGH | Junos OS: Insecure management daemon (MGD) configuration may allow local privilege escalat |
| CVE-2019-0060 | 7.5 HIGH | Junos OS: SRX Series: flowd process crash due to processing of specific transit IP packets |
| CVE-2019-0066 | 7.5 HIGH | Junos OS: A malformed IPv4 packet received by Junos in an NG-mVPN scenario may cause the r |
| CVE-2019-0056 | 7.5 HIGH | Junos OS: MX Series: An MPC10 Denial of Service (DoS) due to OSPF states transitioning to |
| CVE-2019-0055 | 7.5 HIGH | Junos OS: SRX Series: An attacker may cause flowd to crash by sending certain valid SIP tr |
| CVE-2019-0059 | 7.5 HIGH | Junos OS: The routing protocol process (rpd) may crash and generate core files upon receip |
| CVE-2019-0050 | 7.5 HIGH | Junos OS: SRX1500: Denial of service due to crash of srxpfe process under heavy traffic co |
| CVE-2019-0064 | 7.5 HIGH | Junos OS: SRX5000 Series: flowd process crash due to receipt of specific TCP packet |
| CVE-2019-0062 | 7.5 HIGH | Junos OS: Session fixation vulnerability in J-Web |
| CVE-2019-0054 | 6.8 MEDIUM | Junos OS: SRX Series: An attacker may be able to perform Man-in-the-Middle (MitM) attacks |
| CVE-2019-0073 | 6.6 MEDIUM | Junos OS: PKI key pairs are exported with insecure file permissions |
| CVE-2019-0051 | 6.5 MEDIUM | SRX5000 Series: Denial of Service vulnerability in SSL-Proxy feature. |
| CVE-2019-0063 | 6.5 MEDIUM | Junos OS: MX Series: jdhcpd crash when receiving a specific crafted DHCP response message |
| CVE-2019-0068 | 6.5 MEDIUM | Junos OS: SRX Series: Denial of Service vulnerability in flowd due to multicast packets |
| CVE-2019-0067 | 6.5 MEDIUM | Junos OS: Kernel crash (vmcore) upon receipt of a specific link-local IPv6 packet on devic |
Showing 20 of 25 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Junos OS
- CVE-2026-33791
Junos OS and Junos OS Evolved: Execution of crafted CLI comm - CVE-2026-33790
Junos OS: SRX Series: In a NAT64 configuration, receipt of a - CVE-2026-33787
Junos OS: SRX1500, SRX4100, SRX4200, SRX4600: When a specifi - CVE-2026-33785
Junos OS: MX Series: Missing Authorization for specific 'req - CVE-2026-33781
Junos OS: EX Series, QFX Series: In a VXLAN scenario when sp
同じベンダー: Juniper Networks
- CVE-2026-33791
Junos OS and Junos OS Evolved: Execution of crafted CLI comm - CVE-2026-33790
Junos OS: SRX Series: In a NAT64 configuration, receipt of a - CVE-2026-33787
Junos OS: SRX1500, SRX4100, SRX4200, SRX4600: When a specifi - CVE-2026-33785
Junos OS: MX Series: Missing Authorization for specific 'req - CVE-2026-33784
JSI Virtual Lightweight Collector: Default password is not r
V. CVE-2019-0075へのコメント
まだコメントはありません