CVE-2019-0037

Junos OS: jdhcpd crash upon receipt of crafted DHCPv6 solicit message

Severity Score

7.5

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

In a Dynamic Host Configuration Protocol version 6 (DHCPv6) environment, the jdhcpd daemon may crash and restart upon receipt of certain DHCPv6 solicit messages received from a DHCPv6 client. By continuously sending the same crafted packet, an attacker can repeatedly crash the jdhcpd process causing a sustained Denial of Service (DoS) to both IPv4 and IPv6 clients. Affected releases are Juniper Networks Junos OS: 15.1 versions prior to 15.1F6-S12, 15.1R7-S3; 15.1X49 versions prior to 15.1X49-D171, 15.1X49-D180; 15.1X53 versions prior to 15.1X53-D236, 15.1X53-D496; 16.1 versions prior to 16.1R3-S10, 16.1R7-S4; 16.2 versions prior to 16.2R2-S8; 17.1 versions prior to 17.1R2-S10, 17.1R3; 17.2 versions prior to 17.2R1-S8, 17.2R3-S1; 17.3 versions prior to 17.3R3-S3; 17.4 versions prior to 17.4R1-S6, 17.4R2-S3; 18.1 versions prior to 18.1R2-S4, 18.1R3-S2; 18.2 versions prior to 18.2R2; 18.2X75 versions prior to 18.2X75-D30; 18.3 versions prior to 18.3R1-S2. This issue does not affect Junos OS releases prior to 15.1.

En un entorno de Protocolo de configuración dinámica de host versión 6 (DHCPv6), el demonio jdhcpd puede bloquearse y reiniciarse al recibir ciertos mensajes de solicitud de DHCPv6 de un cliente DHCPv6. Al enviar continuamente el mismo paquete especialmente modificado, un atacante puede bloquear repetidamente el proceso jdhcpd, causando una denegación de servicio (DoS) sostenida tanto a clientes IPv4 como IPv6. Las versiones afectadas son el Juniper Networks Junos OS: 15.1 versiones anteriores a 15.1F6-S12, 15.1R7-S3; 15.1X49 versiones anteriores a 15.1X49-D171, 15.1X49-D180; 15.1X53 versiones anteriores a 15.1X53-D236, 15.1X53-D496; 16.1 versiones anteriores a 16.1R3-S10, 16.1R7-S4; 16.2 versiones anteriores a 16.2R2-S8; 17.1 versiones anteriores a 17.1R2-S10, 17.1R3; 17.2 versiones anteriores a 17.2R1-S8, 17.2R3-S1; 17.3 versiones anteriores a 17.3R3-S3; 17.4 versiones anteriores a 17.4R1-S6, 17.4R2-S3; 18.1 versiones anteriores a 18.1R2-S4, 18.1R3-S2; 18.2 versiones anteriores a 18.2R2; 18.2X75 versiones anteriores a 18.2X75-D30; 18.3 versiones anteriores a 18.3R1-S2. Este problema no afecta a las versiones del Junos OS anteriores a la 15.1.

*Credits: N/A

CVSS Scores

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2018-10-11 CVE Reserved
2019-04-10 CVE Published
2023-03-07 EPSS Updated
2024-09-16 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (2)

URL	Tag	Source
http://www.securityfocus.com/bid/107894	Broken Link

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://kb.juniper.net/JSA10926	2022-04-18

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				15.1 Search vendor "Juniper" for product "Junos" and version "15.1"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				15.1 Search vendor "Juniper" for product "Junos" and version "15.1"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				15.1 Search vendor "Juniper" for product "Junos" and version "15.1"		r3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				15.1 Search vendor "Juniper" for product "Junos" and version "15.1"		r4		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				15.1 Search vendor "Juniper" for product "Junos" and version "15.1"		r5		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				15.1 Search vendor "Juniper" for product "Junos" and version "15.1"		r6		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				15.1 Search vendor "Juniper" for product "Junos" and version "15.1"		r7		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				15.1x49-d30 Search vendor "Juniper" for product "Junos" and version "15.1x49-d30"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				15.1x49-d60 Search vendor "Juniper" for product "Junos" and version "15.1x49-d60"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				15.1x49-d140 Search vendor "Juniper" for product "Junos" and version "15.1x49-d140"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				15.1x49-d150 Search vendor "Juniper" for product "Junos" and version "15.1x49-d150"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				15.1x49-d160 Search vendor "Juniper" for product "Junos" and version "15.1x49-d160"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				15.1x53-d50 Search vendor "Juniper" for product "Junos" and version "15.1x53-d50"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				15.1x53-d51 Search vendor "Juniper" for product "Junos" and version "15.1x53-d51"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				15.1x53-d52 Search vendor "Juniper" for product "Junos" and version "15.1x53-d52"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				15.1x53-d55 Search vendor "Juniper" for product "Junos" and version "15.1x53-d55"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				15.1x53-d57 Search vendor "Juniper" for product "Junos" and version "15.1x53-d57"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				15.1x53-d58 Search vendor "Juniper" for product "Junos" and version "15.1x53-d58"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				15.1x53-d59 Search vendor "Juniper" for product "Junos" and version "15.1x53-d59"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				16 Search vendor "Juniper" for product "Junos" and version "16"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				16 Search vendor "Juniper" for product "Junos" and version "16"		r3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				16 Search vendor "Juniper" for product "Junos" and version "16"		r4		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				16 Search vendor "Juniper" for product "Junos" and version "16"		r5		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				16 Search vendor "Juniper" for product "Junos" and version "16"		r6		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				16 Search vendor "Juniper" for product "Junos" and version "16"		r7		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				16.2 Search vendor "Juniper" for product "Junos" and version "16.2"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				16.2 Search vendor "Juniper" for product "Junos" and version "16.2"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				16.2 Search vendor "Juniper" for product "Junos" and version "16.2"		r2-s7		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.1 Search vendor "Juniper" for product "Junos" and version "17.1"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.1 Search vendor "Juniper" for product "Junos" and version "17.1"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.1 Search vendor "Juniper" for product "Junos" and version "17.1"		r2-s9		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.2 Search vendor "Juniper" for product "Junos" and version "17.2"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.2 Search vendor "Juniper" for product "Junos" and version "17.2"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.2 Search vendor "Juniper" for product "Junos" and version "17.2"		r3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.2 Search vendor "Juniper" for product "Junos" and version "17.2"		r1-s7		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.3 Search vendor "Juniper" for product "Junos" and version "17.3"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.3 Search vendor "Juniper" for product "Junos" and version "17.3"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.3 Search vendor "Juniper" for product "Junos" and version "17.3"		r3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.3 Search vendor "Juniper" for product "Junos" and version "17.3"		r3-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.4 Search vendor "Juniper" for product "Junos" and version "17.4"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.4 Search vendor "Juniper" for product "Junos" and version "17.4"		r1-s5		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.4 Search vendor "Juniper" for product "Junos" and version "17.4"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.1 Search vendor "Juniper" for product "Junos" and version "18.1"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.1 Search vendor "Juniper" for product "Junos" and version "18.1"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.1 Search vendor "Juniper" for product "Junos" and version "18.1"		r3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.1 Search vendor "Juniper" for product "Junos" and version "18.1"		r3-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.2 Search vendor "Juniper" for product "Junos" and version "18.2"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.2x75-d10 Search vendor "Juniper" for product "Junos" and version "18.2x75-d10"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.3 Search vendor "Juniper" for product "Junos" and version "18.3"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.3 Search vendor "Juniper" for product "Junos" and version "18.3"		r1-s1		Affected