CVE-2019-0044
Last modified
CVE-2019-0044 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Receipt of a specific packet on the out-of-band management interface fxp0 may cause the system to crash and restart (vmcore). By continuously sending a specially crafted packet to the fxp0 interface, an attacker can repetitively crash the rpd process causing prolonged Denial of Service (DoS). EPSS estimates a 1.56% chance of exploitation in the next 30 days.
Description
Receipt of a specific packet on the out-of-band management interface fxp0 may cause the system to crash and restart (vmcore). By continuously sending a specially crafted packet to the fxp0 interface, an attacker can repetitively crash the rpd process causing prolonged Denial of Service (DoS). Affected releases are Juniper Networks SRX5000 Series: 12.1X46 versions prior to 12.1X46-D82; 12.3X48 versions prior to 12.3X48-D80; 15.1X49 versions prior to 15.1X49-D160.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Juniper | Junos | 12.3x48 | — |
| Juniper | Junos | 12.1x46 | — |
| Juniper | Junos | 15.1x49 | D10 |
References
- http://www.securityfocus.com/bid/107872Broken Link
- https://kb.juniper.net/JSA10936Patch, Vendor Advisory
- http://www.securityfocus.com/bid/107872Broken Link
- https://kb.juniper.net/JSA10936Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-0044?
How severe is CVE-2019-0044?
How do I fix CVE-2019-0044?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-0038Crafted packets destined to the management interface (fxp0) …6.5
- CVE-2019-0039If REST API is enabled, the Junos OS login credentials are v…8.1
- CVE-2019-0040On Junos OS, rpcbind should only be listening to port 111 on…9.1
- CVE-2019-0041On EX4300-MP Series devices with any lo0 filters applied, tr…8.6
- CVE-2019-0042Juniper Identity Management Service (JIMS) for Windows versi…4.2
- CVE-2019-0043In MPLS environments, receipt of a specific SNMP packet may …7.5
- CVE-2019-0046A vulnerability in the pfe-chassisd Chassis Manager (CMLC) d…6.5
- CVE-2019-0047A persistent Cross-Site Scripting (XSS) vulnerability in Jun…8.8
- CVE-2019-0048On EX4300 Series switches with TCAM optimization enabled, in…5.8
- CVE-2019-0049On Junos devices with the BGP graceful restart helper mode e…7.5
- CVE-2019-0050Under certain heavy traffic conditions srxpfe process can cr…7.5
- CVE-2019-0051SSL-Proxy feature on SRX devices fails to handle a hardware …7.5
Are you affected by CVE-2019-0044?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST