Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2019-0046 | First vendor Publication | 2019-07-11 |
| Vendor | Cve | Last vendor Modification | 2021-02-25 |
Security-Database Scoring CVSS v3
| Cvss vector : CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | |||
|---|---|---|---|
| Overall CVSS Score | 6.5 | ||
| Base Score | 6.5 | Environmental Score | 6.5 |
| impact SubScore | 3.6 | Temporal Score | 6.5 |
| Exploitabality Sub Score | 2.8 | ||
| Attack Vector | Adjacent | Attack Complexity | Low |
| Privileges Required | None | User Interaction | None |
| Scope | Unchanged | Confidentiality Impact | None |
| Integrity Impact | None | Availability Impact | High |
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:A/AC:L/Au:N/C:N/I:N/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 6.1 | Attack Range | Adjacent network |
| Cvss Impact Score | 6.9 | Attack Complexity | Low |
| Cvss Expoit Score | 6.5 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| A vulnerability in the pfe-chassisd Chassis Manager (CMLC) daemon of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the EX4300 when specific valid broadcast packets create a broadcast storm condition when received on the me0 interface of the EX4300 Series device. A reboot of the device is required to restore service. Continued receipt of these valid broadcast packets will create a sustained Denial of Service (DoS) against the device. Affected releases are Juniper Networks Junos OS: 16.1 versions above and including 16.1R1 prior to 16.1R7-S5; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R3-S2; 17.4 versions prior to 17.4R2; 18.1 versions prior to 18.1R3; 18.2 versions prior to 18.2R2. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0046 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-400 | Uncontrolled Resource Consumption ('Resource Exhaustion') |
CPE : Common Platform Enumeration
Sources (Detail)
| Source | Url |
|---|---|
| BID | http://www.securityfocus.com/bid/109272 |
| CONFIRM | https://kb.juniper.net/JSA10938 |
Alert History
| Date | Informations |
|---|---|
| 2021-05-04 13:22:44 |
|
| 2021-04-22 02:37:51 |
|
| 2021-03-26 12:27:48 |
|
| 2021-02-05 21:23:16 |
|
| 2020-05-23 02:20:32 |
|
| 2019-10-10 05:20:51 |
|
| 2019-07-26 05:19:08 |
|
| 2019-07-19 21:19:45 |
|
| 2019-07-18 17:19:13 |
|
| 2019-07-12 05:18:31 |
|
