CVE-2019-0049

Junos OS: RPD process crashes when BGP peer restarts

Severity Score

7.5

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

On Junos devices with the BGP graceful restart helper mode enabled or the BGP graceful restart mechanism enabled, a certain sequence of BGP session restart on a remote peer that has the graceful restart mechanism enabled may cause the local routing protocol daemon (RPD) process to crash and restart. Repeated crashes of the RPD process can cause prolonged Denial of Service (DoS). Graceful restart helper mode for BGP is enabled by default. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S3; 16.2 versions prior to 16.2R2-S9; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3; 17.2X75 versions prior to 17.2X75-D105; 17.3 versions prior to 17.3R3-S2; 17.4 versions prior to 17.4R1-S7, 17.4R2-S2, 17.4R3; 18.1 versions prior to 18.1R3-S2; 18.2 versions prior to 18.2R2; 18.2X75 versions prior to 18.2X75-D12, 18.2X75-D30; 18.3 versions prior to 18.3R1-S4, 18.3R2. Junos OS releases prior to 16.1R1 are not affected.

En los dispositivos Junos con el modo auxiliar de reinicio amigable BGP habilitado o el mecanismo de reinicio amigable BGP habilitado, una secuencia determinada de reinicio de la sesión BGP en un peer remoto que tenga habilitado el mecanismo de reinicio elegante puede causar que el proceso routing protocol daemon (RPD) se bloquee y reinicie. Los bloqueos repetidos del proceso RPD pueden causar la denegación de servicio (DoS) prolongada. El modo auxiliar de reinicio apropiado para BGP está habilitado por defecto. Ningún otro producto o plataforma de Juniper Networks esta afectado por este problema. Las versiones afectadas son Junos OS de Juniper Networks: versiones 16.1 anteriores a 16.1R7-S3; versiones 16.2 anteriores a 16.2R2-S9; versiones 17.1 anteriores a 17.1R3; versiones 17.2 anteriores a 17.2R3; versiones 17.2X75 anteriores a 17.2X75-D105; versiones 17.3 anteriores a 17.3R3-S2; versiones 17.4 anteriores a 17.4R1-S7, 17.4R2-S2, 17.4R3; versiones 18.1 anteriores a 18.1R3-S2; versiones 18.2 anteriores a 18.2R2; versiones 18.2X75 anteriores a 18.2X75-D12, 18.2X75-D30; versiones 18.3 anteriores a 18.3R1-S4, 18.3R2. Las versiones del sistema operativo Junos anteriores a 16.1R1 no están afectadas.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2018-10-11 CVE Reserved
2019-07-11 CVE Published
2023-03-07 EPSS Updated
2024-09-16 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-404: Improper Resource Shutdown or Release

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC
https://kb.juniper.net/JSA10943	2021-10-28

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				16.1 Search vendor "Juniper" for product "Junos" and version "16.1"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				16.1 Search vendor "Juniper" for product "Junos" and version "16.1"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				16.1 Search vendor "Juniper" for product "Junos" and version "16.1"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				16.1 Search vendor "Juniper" for product "Junos" and version "16.1"		r3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				16.1 Search vendor "Juniper" for product "Junos" and version "16.1"		r3-s10		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				16.1 Search vendor "Juniper" for product "Junos" and version "16.1"		r3-s11		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				16.1 Search vendor "Juniper" for product "Junos" and version "16.1"		r4		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				16.1 Search vendor "Juniper" for product "Junos" and version "16.1"		r5		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				16.1 Search vendor "Juniper" for product "Junos" and version "16.1"		r6		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				16.2 Search vendor "Juniper" for product "Junos" and version "16.2"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				16.2 Search vendor "Juniper" for product "Junos" and version "16.2"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				16.2 Search vendor "Juniper" for product "Junos" and version "16.2"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				16.2 Search vendor "Juniper" for product "Junos" and version "16.2"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				16.2 Search vendor "Juniper" for product "Junos" and version "16.2"		r2-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				16.2 Search vendor "Juniper" for product "Junos" and version "16.2"		r2-s5		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				16.2 Search vendor "Juniper" for product "Junos" and version "16.2"		r2-s6		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				16.2 Search vendor "Juniper" for product "Junos" and version "16.2"		r2-s7		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				16.2 Search vendor "Juniper" for product "Junos" and version "16.2"		r2-s8		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.1 Search vendor "Juniper" for product "Junos" and version "17.1"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.1 Search vendor "Juniper" for product "Junos" and version "17.1"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.1 Search vendor "Juniper" for product "Junos" and version "17.1"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.1 Search vendor "Juniper" for product "Junos" and version "17.1"		r2-s10		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.1 Search vendor "Juniper" for product "Junos" and version "17.1"		r2-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.1 Search vendor "Juniper" for product "Junos" and version "17.1"		r2-s3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.1 Search vendor "Juniper" for product "Junos" and version "17.1"		r2-s4		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.1 Search vendor "Juniper" for product "Junos" and version "17.1"		r2-s5		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.1 Search vendor "Juniper" for product "Junos" and version "17.1"		r2-s6		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.1 Search vendor "Juniper" for product "Junos" and version "17.1"		r2-s7		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.2 Search vendor "Juniper" for product "Junos" and version "17.2"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.2 Search vendor "Juniper" for product "Junos" and version "17.2"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.2 Search vendor "Juniper" for product "Junos" and version "17.2"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.2 Search vendor "Juniper" for product "Junos" and version "17.2"		r1-s4		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.2 Search vendor "Juniper" for product "Junos" and version "17.2"		r1-s7		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.2 Search vendor "Juniper" for product "Junos" and version "17.2"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.2 Search vendor "Juniper" for product "Junos" and version "17.2"		r2-s6		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.3 Search vendor "Juniper" for product "Junos" and version "17.3"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.3 Search vendor "Juniper" for product "Junos" and version "17.3"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.3 Search vendor "Juniper" for product "Junos" and version "17.3"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.3 Search vendor "Juniper" for product "Junos" and version "17.3"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.3 Search vendor "Juniper" for product "Junos" and version "17.3"		r2-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.3 Search vendor "Juniper" for product "Junos" and version "17.3"		r3-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.4 Search vendor "Juniper" for product "Junos" and version "17.4"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.4 Search vendor "Juniper" for product "Junos" and version "17.4"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.4 Search vendor "Juniper" for product "Junos" and version "17.4"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.4 Search vendor "Juniper" for product "Junos" and version "17.4"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.4 Search vendor "Juniper" for product "Junos" and version "17.4"		r1-s4		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.4 Search vendor "Juniper" for product "Junos" and version "17.4"		r1-s6		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.4 Search vendor "Juniper" for product "Junos" and version "17.4"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.4 Search vendor "Juniper" for product "Junos" and version "17.4"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.1 Search vendor "Juniper" for product "Junos" and version "18.1"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.1 Search vendor "Juniper" for product "Junos" and version "18.1"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.1 Search vendor "Juniper" for product "Junos" and version "18.1"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.1 Search vendor "Juniper" for product "Junos" and version "18.1"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.1 Search vendor "Juniper" for product "Junos" and version "18.1"		r2-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.1 Search vendor "Juniper" for product "Junos" and version "18.1"		r3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.2 Search vendor "Juniper" for product "Junos" and version "18.2"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.2 Search vendor "Juniper" for product "Junos" and version "18.2"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.2 Search vendor "Juniper" for product "Junos" and version "18.2"		r1-s3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.2 Search vendor "Juniper" for product "Junos" and version "18.2"		r1-s4		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.2 Search vendor "Juniper" for product "Junos" and version "18.2"		r1-s5		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.2 Search vendor "Juniper" for product "Junos" and version "18.2"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.2x75 Search vendor "Juniper" for product "Junos" and version "18.2x75"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.2x75 Search vendor "Juniper" for product "Junos" and version "18.2x75"		d20		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.3 Search vendor "Juniper" for product "Junos" and version "18.3"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.3 Search vendor "Juniper" for product "Junos" and version "18.3"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.3 Search vendor "Juniper" for product "Junos" and version "18.3"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.3 Search vendor "Juniper" for product "Junos" and version "18.3"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.3 Search vendor "Juniper" for product "Junos" and version "18.3"		r1-s3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.2x75 Search vendor "Juniper" for product "Junos" and version "17.2x75"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.2x75 Search vendor "Juniper" for product "Junos" and version "17.2x75"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.2x75 Search vendor "Juniper" for product "Junos" and version "17.2x75"		d102		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.2x75 Search vendor "Juniper" for product "Junos" and version "17.2x75"		d92		Affected