CVE-2019-0055 - Vulnerability Details

Vendors	Products
Juniper	Csrx Junos Srx100 Srx110 Srx1400 Srx1500 Srx210 Srx220 Srx240 Srx300 Srx320 Srx340 Srx3400 Srx345 Srx3600 Srx4100 Srx4200 Srx4600 Srx5400 Srx550 Srx550 Hm Srx5600 Srx5800 Srx650 Vsrx

Link	Providers
https://kb.juniper.net/JSA10953
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-sip-alg.html

Show plain JSON

{"containers": {"cna": {"affected": [{"platforms": ["SRX Series"], "product": "Junos OS", "vendor": "Juniper Networks", "versions": [{"lessThan": "12.3X48-D61, 12.3X48-D65", "status": "affected", "version": "12.3X48", "versionType": "custom"}, {"lessThan": "15.1X49-D130", "status": "affected", "version": "15.1X49", "versionType": "custom"}, {"lessThan": "17.3R3", "status": "affected", "version": "17.3", "versionType": "custom"}, {"lessThan": "17.4R2", "status": "affected", "version": "17.4", "versionType": "custom"}]}], "configurations": [{"lang": "en", "value": "This issue only affects SRX Series devices where SIP ALG is enabled.\nThe following minimum configuration is required: \n  set security alg sip"}], "datePublic": "2019-10-09T00:00:00", "descriptions": [{"lang": "en", "value": "A vulnerability in the SIP ALG packet processing service of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending specific types of valid SIP traffic to the device. In this case, the flowd process crashes and generates a core dump while processing SIP ALG traffic. Continued receipt of these valid SIP packets will result in a sustained Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D61, 12.3X48-D65 on SRX Series; 15.1X49 versions prior to 15.1X49-D130 on SRX Series; 17.3 versions prior to 17.3R3 on SRX Series; 17.4 versions prior to 17.4R2 on SRX Series."}], "exploits": [{"lang": "en", "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-130", "description": "CWE-130 Improper Handling of Length Parameter Inconsistency", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2019-10-09T19:26:17", "orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968", "shortName": "juniper"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://kb.juniper.net/JSA10953"}, {"tags": ["mailing-list", "x_refsource_MLIST"], "url": "https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-sip-alg.html"}], "solutions": [{"lang": "en", "value": "The following software releases have been updated to resolve this specific issue: 12.3X48-D61, 12.3X48-D65, 15.1X49-D130, 17.3R3, 17.4R2, 18.1R1, and all subsequent releases."}], "source": {"advisory": "JSA10953", "defect": ["1329170"], "discovery": "USER"}, "title": "Junos OS: SRX Series: An attacker may cause flowd to crash by sending certain valid SIP traffic to a device with SIP ALG enabled.", "workarounds": [{"lang": "en", "value": "Disable SIP ALG if this is not needed, otherwise there are no viable workarounds for this issue."}], "x_generator": {"engine": "Vulnogram 0.0.6"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "sirt@juniper.net", "DATE_PUBLIC": "2019-10-09T16:00:00.000Z", "ID": "CVE-2019-0055", "STATE": "PUBLIC", "TITLE": "Junos OS: SRX Series: An attacker may cause flowd to crash by sending certain valid SIP traffic to a device with SIP ALG enabled."}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Junos OS", "version": {"version_data": [{"platform": "SRX Series", "version_affected": "<", "version_name": "12.3X48", "version_value": "12.3X48-D61, 12.3X48-D65"}, {"platform": "SRX Series", "version_affected": "<", "version_name": "15.1X49", "version_value": "15.1X49-D130"}, {"platform": "SRX Series", "version_affected": "<", "version_name": "17.3", "version_value": "17.3R3"}, {"platform": "SRX Series", "version_affected": "<", "version_name": "17.4", "version_value": "17.4R2"}]}}]}, "vendor_name": "Juniper Networks"}]}}, "configuration": [{"lang": "en", "value": "This issue only affects SRX Series devices where SIP ALG is enabled.\nThe following minimum configuration is required: \n  set security alg sip"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A vulnerability in the SIP ALG packet processing service of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending specific types of valid SIP traffic to the device. In this case, the flowd process crashes and generates a core dump while processing SIP ALG traffic. Continued receipt of these valid SIP packets will result in a sustained Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D61, 12.3X48-D65 on SRX Series; 15.1X49 versions prior to 15.1X49-D130 on SRX Series; 17.3 versions prior to 17.3R3 on SRX Series; 17.4 versions prior to 17.4R2 on SRX Series."}]}, "exploit": [{"lang": "en", "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."}], "generator": {"engine": "Vulnogram 0.0.6"}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-130 Improper Handling of Length Parameter Inconsistency"}]}]}, "references": {"reference_data": [{"name": "https://kb.juniper.net/JSA10953", "refsource": "MISC", "url": "https://kb.juniper.net/JSA10953"}, {"name": "https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-sip-alg.html", "refsource": "MLIST", "url": "https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-sip-alg.html"}]}, "solution": [{"lang": "en", "value": "The following software releases have been updated to resolve this specific issue: 12.3X48-D61, 12.3X48-D65, 15.1X49-D130, 17.3R3, 17.4R2, 18.1R1, and all subsequent releases."}], "source": {"advisory": "JSA10953", "defect": ["1329170"], "discovery": "USER"}, "work_around": [{"lang": "en", "value": "Disable SIP ALG if this is not needed, otherwise there are no viable workarounds for this issue."}]}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T17:37:07.401Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://kb.juniper.net/JSA10953"}, {"tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-sip-alg.html"}]}]}, "cveMetadata": {"assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968", "assignerShortName": "juniper", "cveId": "CVE-2019-0055", "datePublished": "2019-10-09T19:26:17.374648Z", "dateReserved": "2018-10-11T00:00:00", "dateUpdated": "2024-09-16T22:08:51.402Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

platforms : [ »

0 : SRX Series (string)

]

product : Junos OS (string)

vendor : Juniper Networks (string)

versions : [ »

0 : { »

lessThan : 12.3X48-D61, 12.3X48-D65 (string)

status : affected (string)

version : 12.3X48 (string)

versionType : custom (string)

}

1 : { »

lessThan : 15.1X49-D130 (string)

status : affected (string)

version : 15.1X49 (string)

versionType : custom (string)

}

2 : { »

lessThan : 17.3R3 (string)

status : affected (string)

version : 17.3 (string)

versionType : custom (string)

}

3 : { »

lessThan : 17.4R2 (string)

status : affected (string)

version : 17.4 (string)

versionType : custom (string)

}

]

}

]

configurations : [ »

0 : { »

lang : en (string)

value : This issue only affects SRX Series devices where SIP ALG is enabled. The following minimum configuration is required: set security alg sip (string)

}

]

datePublic : 2019-10-09T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability in the SIP ALG packet processing service of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending specific types of valid SIP traffic to the device. In this case, the flowd process crashes and generates a core dump while processing SIP ALG traffic. Continued receipt of these valid SIP packets will result in a sustained Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D61, 12.3X48-D65 on SRX Series; 15.1X49 versions prior to 15.1X49-D130 on SRX Series; 17.3 versions prior to 17.3R3 on SRX Series; 17.4 versions prior to 17.4R2 on SRX Series. (string)

}

]

exploits : [ »

0 : { »

lang : en (string)

value : Juniper SIRT is not aware of any malicious exploitation of this vulnerability. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-130 (string)

description : CWE-130 Improper Handling of Length Parameter Inconsistency (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2019-10-09T19:26:17 (string)

orgId : 8cbe9d5a-a066-4c94-8978-4b15efeae968 (string)

shortName : juniper (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://kb.juniper.net/JSA10953 (string)

}

1 : { »

tags : [ »

0 : mailing-list (string)

1 : x_refsource_MLIST (string)

]

url : https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-sip-alg.html (string)

}

]

solutions : [ »

0 : { »

lang : en (string)

value : The following software releases have been updated to resolve this specific issue: 12.3X48-D61, 12.3X48-D65, 15.1X49-D130, 17.3R3, 17.4R2, 18.1R1, and all subsequent releases. (string)

}

]

source : { »

advisory : JSA10953 (string)

defect : [ »

0 : 1329170 (string)

]

discovery : USER (string)

}

title : Junos OS: SRX Series: An attacker may cause flowd to crash by sending certain valid SIP traffic to a device with SIP ALG enabled. (string)

workarounds : [ »

0 : { »

lang : en (string)

value : Disable SIP ALG if this is not needed, otherwise there are no viable workarounds for this issue. (string)

}

]

x_generator : { »

engine : Vulnogram 0.0.6 (string)

}

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : sirt@juniper.net (string)

DATE_PUBLIC : 2019-10-09T16:00:00.000Z (string)

ID : CVE-2019-0055 (string)

STATE : PUBLIC (string)

TITLE : Junos OS: SRX Series: An attacker may cause flowd to crash by sending certain valid SIP traffic to a device with SIP ALG enabled. (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : Junos OS (string)

version : { »

version_data : [ »

0 : { »

platform : SRX Series (string)

version_affected : < (string)

version_name : 12.3X48 (string)

version_value : 12.3X48-D61, 12.3X48-D65 (string)

}

1 : { »

platform : SRX Series (string)

version_affected : < (string)

version_name : 15.1X49 (string)

version_value : 15.1X49-D130 (string)

}

2 : { »

platform : SRX Series (string)

version_affected : < (string)

version_name : 17.3 (string)

version_value : 17.3R3 (string)

}

3 : { »

platform : SRX Series (string)

version_affected : < (string)

version_name : 17.4 (string)

version_value : 17.4R2 (string)

}

]

}

]

}

vendor_name : Juniper Networks (string)

}

]

}

configuration : [ »

0 : { »

lang : en (string)

value : This issue only affects SRX Series devices where SIP ALG is enabled. The following minimum configuration is required: set security alg sip (string)

}

]

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : A vulnerability in the SIP ALG packet processing service of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending specific types of valid SIP traffic to the device. In this case, the flowd process crashes and generates a core dump while processing SIP ALG traffic. Continued receipt of these valid SIP packets will result in a sustained Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D61, 12.3X48-D65 on SRX Series; 15.1X49 versions prior to 15.1X49-D130 on SRX Series; 17.3 versions prior to 17.3R3 on SRX Series; 17.4 versions prior to 17.4R2 on SRX Series. (string)

}

]

}

exploit : [ »

0 : { »

lang : en (string)

value : Juniper SIRT is not aware of any malicious exploitation of this vulnerability. (string)

}

]

generator : { »

engine : Vulnogram 0.0.6 (string)

}

impact : { »

cvss : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : CWE-130 Improper Handling of Length Parameter Inconsistency (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://kb.juniper.net/JSA10953 (string)

refsource : MISC (string)

url : https://kb.juniper.net/JSA10953 (string)

}

1 : { »

name : https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-sip-alg.html (string)

refsource : MLIST (string)

url : https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-sip-alg.html (string)

}

]

}

solution : [ »

0 : { »

lang : en (string)

value : The following software releases have been updated to resolve this specific issue: 12.3X48-D61, 12.3X48-D65, 15.1X49-D130, 17.3R3, 17.4R2, 18.1R1, and all subsequent releases. (string)

}

]

source : { »

advisory : JSA10953 (string)

defect : [ »

0 : 1329170 (string)

]

discovery : USER (string)

}

work_around : [ »

0 : { »

lang : en (string)

value : Disable SIP ALG if this is not needed, otherwise there are no viable workarounds for this issue. (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-04T17:37:07.401Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://kb.juniper.net/JSA10953 (string)

}

1 : { »

tags : [ »

0 : mailing-list (string)

1 : x_refsource_MLIST (string)

2 : x_transferred (string)

]

url : https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-sip-alg.html (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 8cbe9d5a-a066-4c94-8978-4b15efeae968 (string)

assignerShortName : juniper (string)

cveId : CVE-2019-0055 (string)

datePublished : 2019-10-09T19:26:17.374648Z (string)

dateReserved : 2018-10-11T00:00:00 (string)

dateUpdated : 2024-09-16T22:08:51.402Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*", "matchCriteriaId": "4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*", "matchCriteriaId": "A4AC2E1E-74FB-4DA3-8292-B2079F83FF54", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:*", "matchCriteriaId": "6E296274-AFC1-4F56-A4B3-827C2E0BC9D5", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:12.3x48:d30:*:*:*:*:*:*", "matchCriteriaId": "3C82799B-BD25-4359-9E3D-4D7CA7367525", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:12.3x48:d35:*:*:*:*:*:*", "matchCriteriaId": "094485FF-960C-4533-A2AF-6C4D420D260D", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:12.3x48:d40:*:*:*:*:*:*", "matchCriteriaId": "F8BE3661-1DE5-4F57-9384-68C1B34F6812", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:12.3x48:d45:*:*:*:*:*:*", "matchCriteriaId": "B45E8A14-E7F4-41EB-9BFA-7A19E35D11FE", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:12.3x48:d50:*:*:*:*:*:*", "matchCriteriaId": "C6C694C6-C58C-4513-91E8-6CC22A2386E3", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:12.3x48:d55:*:*:*:*:*:*", "matchCriteriaId": "6B65EF51-ED97-4973-94C4-8F66C553F190", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:12.3x48:d60:*:*:*:*:*:*", "matchCriteriaId": "9EE7C08A-2A4B-4A84-AD95-A890913E2EE3", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:juniper:csrx:-:*:*:*:*:*:*:*", "matchCriteriaId": "11D4A86D-BDB4-4A01-96FE-7E023C58074B", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*", "matchCriteriaId": "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*", "matchCriteriaId": "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*", "matchCriteriaId": "927EAB8B-EC3B-4B12-85B9-5517EBA49A30", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*", "matchCriteriaId": "2CEBF85C-736A-4E7D-956A-3E8210D4F70B", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*", "matchCriteriaId": "CD647C15-A686-4C8F-A766-BC29404C0FED", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*", "matchCriteriaId": "45AB1622-1AED-4CD7-98F1-67779CDFC321", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*", "matchCriteriaId": "89276D88-3B8D-4168-A2CD-0920297485F2", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*", "matchCriteriaId": "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*", "matchCriteriaId": "80F9DC32-5ADF-4430-B1A6-357D0B29DB78", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B82D4C4-7A65-409A-926F-33C054DCBFBA", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*", "matchCriteriaId": "746C3882-2A5B-4215-B259-EB1FD60C513D", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*", "matchCriteriaId": "CE535749-F4CE-4FFA-B23D-BF09C92481E5", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*", "matchCriteriaId": "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*", "matchCriteriaId": "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*", "matchCriteriaId": "CCC5F6F5-4347-49D3-909A-27A3A96D36C9", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*", "matchCriteriaId": "56BA6B86-D3F4-4496-AE46-AC513C6560FA", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*", "matchCriteriaId": "2FDDC897-747F-44DD-9599-7266F9B5B7B1", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*", "matchCriteriaId": "62FC145A-D477-4C86-89E7-F70F52773801", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*", "matchCriteriaId": "06685D0E-A075-49A5-9EF4-34F0F795C8C6", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*", "matchCriteriaId": "68CA098D-CBE4-4E62-9EC0-43E1B6098710", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*", "matchCriteriaId": "66F474D4-79B6-4525-983C-9A9011BD958B", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*", "matchCriteriaId": "8AA424D4-4DBF-4E8C-96B8-E37741B5403E", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:vsrx:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B10DFCE-5331-4D79-8D9F-EF84743493D3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:juniper:junos:15.1x49:-:*:*:*:*:*:*", "matchCriteriaId": "27A6BF09-ABBF-4126-ADD6-B174937F8554", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*", "matchCriteriaId": "D90D8985-34EF-44CC-A9A7-CB0FD22676F2", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d100:*:*:*:*:*:*", "matchCriteriaId": "856A5668-FA4F-44E9-A3F0-BE4979F631E2", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d110:*:*:*:*:*:*", "matchCriteriaId": "F3B2DA4D-5E5D-4E09-BE4D-5B3371703D8F", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d120:*:*:*:*:*:*", "matchCriteriaId": "FA2459ED-DFA5-4701-AF92-C2928C3BD64D", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*", "matchCriteriaId": "18468579-0195-4DDE-BAA5-4BE4068F3A69", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*", "matchCriteriaId": "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*", "matchCriteriaId": "870244F3-1C05-4F10-A205-5189BB860F46", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*", "matchCriteriaId": "235EE40B-AA15-4F39-8087-A051F4F70995", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*", "matchCriteriaId": "17330544-3AFC-463E-A146-2840A8AE17D2", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*", "matchCriteriaId": "8ABA301F-7866-42A5-8391-E07BEAFF06FA", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*", "matchCriteriaId": "884E4A85-ED42-4391-9FDD-9052F957743A", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*", "matchCriteriaId": "1901864B-688B-4352-A587-4B96B4E49FB1", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*", "matchCriteriaId": "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*", "matchCriteriaId": "1B6670FB-9F5A-469B-97F2-074C28572065", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*", "matchCriteriaId": "71198992-83AA-4E28-BA7D-A3C1897B5E2B", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:*", "matchCriteriaId": "4323D874-C317-4D76-8E2D-C82376D84CBE", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:15.1x49:d90:*:*:*:*:*:*", "matchCriteriaId": "F56067DA-EBA9-481A-B60B-52148584EFBD", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:juniper:csrx:-:*:*:*:*:*:*:*", "matchCriteriaId": "11D4A86D-BDB4-4A01-96FE-7E023C58074B", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*", "matchCriteriaId": "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*", "matchCriteriaId": "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*", "matchCriteriaId": "927EAB8B-EC3B-4B12-85B9-5517EBA49A30", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*", "matchCriteriaId": "2CEBF85C-736A-4E7D-956A-3E8210D4F70B", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*", "matchCriteriaId": "CD647C15-A686-4C8F-A766-BC29404C0FED", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*", "matchCriteriaId": "45AB1622-1AED-4CD7-98F1-67779CDFC321", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*", "matchCriteriaId": "89276D88-3B8D-4168-A2CD-0920297485F2", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*", "matchCriteriaId": "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*", "matchCriteriaId": "80F9DC32-5ADF-4430-B1A6-357D0B29DB78", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B82D4C4-7A65-409A-926F-33C054DCBFBA", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*", "matchCriteriaId": "746C3882-2A5B-4215-B259-EB1FD60C513D", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*", "matchCriteriaId": "CE535749-F4CE-4FFA-B23D-BF09C92481E5", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*", "matchCriteriaId": "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*", "matchCriteriaId": "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*", "matchCriteriaId": "CCC5F6F5-4347-49D3-909A-27A3A96D36C9", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*", "matchCriteriaId": "56BA6B86-D3F4-4496-AE46-AC513C6560FA", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*", "matchCriteriaId": "2FDDC897-747F-44DD-9599-7266F9B5B7B1", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*", "matchCriteriaId": "62FC145A-D477-4C86-89E7-F70F52773801", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*", "matchCriteriaId": "06685D0E-A075-49A5-9EF4-34F0F795C8C6", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*", "matchCriteriaId": "68CA098D-CBE4-4E62-9EC0-43E1B6098710", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*", "matchCriteriaId": "66F474D4-79B6-4525-983C-9A9011BD958B", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*", "matchCriteriaId": "8AA424D4-4DBF-4E8C-96B8-E37741B5403E", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:vsrx:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B10DFCE-5331-4D79-8D9F-EF84743493D3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*", "matchCriteriaId": "A283D32F-1CAF-4A5A-83E1-585F2801771F", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*", "matchCriteriaId": "69FC46D4-39E2-4E2F-A1D3-1001769A7115", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*", "matchCriteriaId": "32F83E8B-A816-4F26-95F8-F0DA7F3DF426", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*", "matchCriteriaId": "2C433359-BC8B-4E69-BE74-A31EB148083A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:juniper:csrx:-:*:*:*:*:*:*:*", "matchCriteriaId": "11D4A86D-BDB4-4A01-96FE-7E023C58074B", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*", "matchCriteriaId": "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*", "matchCriteriaId": "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*", "matchCriteriaId": "927EAB8B-EC3B-4B12-85B9-5517EBA49A30", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*", "matchCriteriaId": "2CEBF85C-736A-4E7D-956A-3E8210D4F70B", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*", "matchCriteriaId": "CD647C15-A686-4C8F-A766-BC29404C0FED", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*", "matchCriteriaId": "45AB1622-1AED-4CD7-98F1-67779CDFC321", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*", "matchCriteriaId": "89276D88-3B8D-4168-A2CD-0920297485F2", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*", "matchCriteriaId": "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*", "matchCriteriaId": "80F9DC32-5ADF-4430-B1A6-357D0B29DB78", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B82D4C4-7A65-409A-926F-33C054DCBFBA", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*", "matchCriteriaId": "746C3882-2A5B-4215-B259-EB1FD60C513D", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*", "matchCriteriaId": "CE535749-F4CE-4FFA-B23D-BF09C92481E5", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*", "matchCriteriaId": "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*", "matchCriteriaId": "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*", "matchCriteriaId": "CCC5F6F5-4347-49D3-909A-27A3A96D36C9", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*", "matchCriteriaId": "56BA6B86-D3F4-4496-AE46-AC513C6560FA", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*", "matchCriteriaId": "2FDDC897-747F-44DD-9599-7266F9B5B7B1", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*", "matchCriteriaId": "62FC145A-D477-4C86-89E7-F70F52773801", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*", "matchCriteriaId": "06685D0E-A075-49A5-9EF4-34F0F795C8C6", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*", "matchCriteriaId": "68CA098D-CBE4-4E62-9EC0-43E1B6098710", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*", "matchCriteriaId": "66F474D4-79B6-4525-983C-9A9011BD958B", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*", "matchCriteriaId": "8AA424D4-4DBF-4E8C-96B8-E37741B5403E", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:vsrx:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B10DFCE-5331-4D79-8D9F-EF84743493D3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*", "matchCriteriaId": "A00CA6FB-8F28-4171-B510-8DBA351E80C0", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*", "matchCriteriaId": "988D317A-0646-491F-9B97-853E8E208276", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*", "matchCriteriaId": "605F1AD7-5B09-44F0-9017-15AB3EEE559C", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*", "matchCriteriaId": "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*", "matchCriteriaId": "4E4EB6B0-8DB2-4199-96E4-30195D49F756", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*", "matchCriteriaId": "9D8A8E33-473A-4A40-A7B7-47086BB9012A", "vulnerable": true}, {"criteria": "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*", "matchCriteriaId": "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:juniper:csrx:-:*:*:*:*:*:*:*", "matchCriteriaId": "11D4A86D-BDB4-4A01-96FE-7E023C58074B", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*", "matchCriteriaId": "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*", "matchCriteriaId": "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*", "matchCriteriaId": "927EAB8B-EC3B-4B12-85B9-5517EBA49A30", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*", "matchCriteriaId": "2CEBF85C-736A-4E7D-956A-3E8210D4F70B", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*", "matchCriteriaId": "CD647C15-A686-4C8F-A766-BC29404C0FED", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*", "matchCriteriaId": "45AB1622-1AED-4CD7-98F1-67779CDFC321", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*", "matchCriteriaId": "89276D88-3B8D-4168-A2CD-0920297485F2", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*", "matchCriteriaId": "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*", "matchCriteriaId": "80F9DC32-5ADF-4430-B1A6-357D0B29DB78", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B82D4C4-7A65-409A-926F-33C054DCBFBA", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*", "matchCriteriaId": "746C3882-2A5B-4215-B259-EB1FD60C513D", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*", "matchCriteriaId": "CE535749-F4CE-4FFA-B23D-BF09C92481E5", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*", "matchCriteriaId": "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*", "matchCriteriaId": "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*", "matchCriteriaId": "CCC5F6F5-4347-49D3-909A-27A3A96D36C9", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*", "matchCriteriaId": "56BA6B86-D3F4-4496-AE46-AC513C6560FA", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*", "matchCriteriaId": "2FDDC897-747F-44DD-9599-7266F9B5B7B1", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*", "matchCriteriaId": "62FC145A-D477-4C86-89E7-F70F52773801", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*", "matchCriteriaId": "06685D0E-A075-49A5-9EF4-34F0F795C8C6", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*", "matchCriteriaId": "68CA098D-CBE4-4E62-9EC0-43E1B6098710", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*", "matchCriteriaId": "66F474D4-79B6-4525-983C-9A9011BD958B", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*", "matchCriteriaId": "8AA424D4-4DBF-4E8C-96B8-E37741B5403E", "vulnerable": false}, {"criteria": "cpe:2.3:h:juniper:vsrx:-:*:*:*:*:*:*:*", "matchCriteriaId": "8B10DFCE-5331-4D79-8D9F-EF84743493D3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "A vulnerability in the SIP ALG packet processing service of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending specific types of valid SIP traffic to the device. In this case, the flowd process crashes and generates a core dump while processing SIP ALG traffic. Continued receipt of these valid SIP packets will result in a sustained Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D61, 12.3X48-D65 on SRX Series; 15.1X49 versions prior to 15.1X49-D130 on SRX Series; 17.3 versions prior to 17.3R3 on SRX Series; 17.4 versions prior to 17.4R2 on SRX Series."}, {"lang": "es", "value": "Una vulnerabilidad en el servicio de procesamiento de paquetes ALG SIP de Juniper Networks Junos OS, permite a un atacante causar una Denegaci\u00f3n de servicio (DoS) al dispositivo mediante el env\u00edo de tipos espec\u00edficos de tr\u00e1fico SIP v\u00e1lido hacia el dispositivo. En este caso, el proceso flowd se bloquea y genera un volcado de n\u00facleo cuando se procesan el tr\u00e1fico ALG SIP. La recepci\u00f3n continua de estos paquetes SIP v\u00e1lidos resultar\u00e1 en una condici\u00f3n de denegaci\u00f3n de servicio (DoS) sostenida. Este problema afecta a: Juniper Networks OS de Junos: versiones 12.3X48 anteriores a 12.3X48-D61, 12.3X48-D65 en la serie SRX; versiones 15.1X49 anteriores a 15.1X49-D130 en la serie SRX; versiones 17.3 anteriores a 17.3R3 en la serie SRX; versiones 17.4 anteriores a 17.4R2 en la serie SRX."}], "id": "CVE-2019-0055", "lastModified": "2024-11-21T04:16:08.957", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "sirt@juniper.net", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-10-09T20:15:16.473", "references": [{"source": "sirt@juniper.net", "tags": ["Vendor Advisory"], "url": "https://kb.juniper.net/JSA10953"}, {"source": "sirt@juniper.net", "tags": ["Vendor Advisory"], "url": "https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-sip-alg.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://kb.juniper.net/JSA10953"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-sip-alg.html"}], "sourceIdentifier": "sirt@juniper.net", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-130"}], "source": "sirt@juniper.net", "type": "Secondary"}, {"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:* (string)

matchCriteriaId : 4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:* (string)

matchCriteriaId : A4AC2E1E-74FB-4DA3-8292-B2079F83FF54 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:* (string)

matchCriteriaId : 6E296274-AFC1-4F56-A4B3-827C2E0BC9D5 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:juniper:junos:12.3x48:d30:*:*:*:*:*:* (string)

matchCriteriaId : 3C82799B-BD25-4359-9E3D-4D7CA7367525 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:juniper:junos:12.3x48:d35:*:*:*:*:*:* (string)

matchCriteriaId : 094485FF-960C-4533-A2AF-6C4D420D260D (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:juniper:junos:12.3x48:d40:*:*:*:*:*:* (string)

matchCriteriaId : F8BE3661-1DE5-4F57-9384-68C1B34F6812 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:juniper:junos:12.3x48:d45:*:*:*:*:*:* (string)

matchCriteriaId : B45E8A14-E7F4-41EB-9BFA-7A19E35D11FE (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:juniper:junos:12.3x48:d50:*:*:*:*:*:* (string)

matchCriteriaId : C6C694C6-C58C-4513-91E8-6CC22A2386E3 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:juniper:junos:12.3x48:d55:*:*:*:*:*:* (string)

matchCriteriaId : 6B65EF51-ED97-4973-94C4-8F66C553F190 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:juniper:junos:12.3x48:d60:*:*:*:*:*:* (string)

matchCriteriaId : 9EE7C08A-2A4B-4A84-AD95-A890913E2EE3 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:juniper:csrx:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 11D4A86D-BDB4-4A01-96FE-7E023C58074B (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 561C1113-3D59-4DD9-ADA7-3C9ECC4632EC (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317 (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 927EAB8B-EC3B-4B12-85B9-5517EBA49A30 (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2CEBF85C-736A-4E7D-956A-3E8210D4F70B (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CD647C15-A686-4C8F-A766-BC29404C0FED (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 45AB1622-1AED-4CD7-98F1-67779CDFC321 (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 89276D88-3B8D-4168-A2CD-0920297485F2 (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BB5AB24B-2B43-43DD-AE10-F758B4B19F2A (string)

vulnerable : false (boolean)

}

9 : { »

criteria : cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 80F9DC32-5ADF-4430-B1A6-357D0B29DB78 (string)

vulnerable : false (boolean)

}

10 : { »

criteria : cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8B82D4C4-7A65-409A-926F-33C054DCBFBA (string)

vulnerable : false (boolean)

}

11 : { »

criteria : cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 746C3882-2A5B-4215-B259-EB1FD60C513D (string)

vulnerable : false (boolean)

}

12 : { »

criteria : cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CE535749-F4CE-4FFA-B23D-BF09C92481E5 (string)

vulnerable : false (boolean)

}

13 : { »

criteria : cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:* (string)

matchCriteriaId : DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC (string)

vulnerable : false (boolean)

}

14 : { »

criteria : cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7 (string)

vulnerable : false (boolean)

}

15 : { »

criteria : cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CCC5F6F5-4347-49D3-909A-27A3A96D36C9 (string)

vulnerable : false (boolean)

}

16 : { »

criteria : cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 56BA6B86-D3F4-4496-AE46-AC513C6560FA (string)

vulnerable : false (boolean)

}

17 : { »

criteria : cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2FDDC897-747F-44DD-9599-7266F9B5B7B1 (string)

vulnerable : false (boolean)

}

18 : { »

criteria : cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 62FC145A-D477-4C86-89E7-F70F52773801 (string)

vulnerable : false (boolean)

}

19 : { »

criteria : cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 06685D0E-A075-49A5-9EF4-34F0F795C8C6 (string)

vulnerable : false (boolean)

}

20 : { »

criteria : cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 68CA098D-CBE4-4E62-9EC0-43E1B6098710 (string)

vulnerable : false (boolean)

}

21 : { »

criteria : cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 66F474D4-79B6-4525-983C-9A9011BD958B (string)

vulnerable : false (boolean)

}

22 : { »

criteria : cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8AA424D4-4DBF-4E8C-96B8-E37741B5403E (string)

vulnerable : false (boolean)

}

23 : { »

criteria : cpe:2.3:h:juniper:vsrx:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8B10DFCE-5331-4D79-8D9F-EF84743493D3 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:juniper:junos:15.1x49:-:*:*:*:*:*:* (string)

matchCriteriaId : 27A6BF09-ABBF-4126-ADD6-B174937F8554 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:* (string)

matchCriteriaId : D90D8985-34EF-44CC-A9A7-CB0FD22676F2 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:juniper:junos:15.1x49:d100:*:*:*:*:*:* (string)

matchCriteriaId : 856A5668-FA4F-44E9-A3F0-BE4979F631E2 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:juniper:junos:15.1x49:d110:*:*:*:*:*:* (string)

matchCriteriaId : F3B2DA4D-5E5D-4E09-BE4D-5B3371703D8F (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:juniper:junos:15.1x49:d120:*:*:*:*:*:* (string)

matchCriteriaId : FA2459ED-DFA5-4701-AF92-C2928C3BD64D (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:* (string)

matchCriteriaId : 18468579-0195-4DDE-BAA5-4BE4068F3A69 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:* (string)

matchCriteriaId : 0E5FAA97-171F-4DB9-B78E-6E1A5F34336A (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:* (string)

matchCriteriaId : 870244F3-1C05-4F10-A205-5189BB860F46 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:* (string)

matchCriteriaId : 235EE40B-AA15-4F39-8087-A051F4F70995 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:* (string)

matchCriteriaId : 17330544-3AFC-463E-A146-2840A8AE17D2 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:* (string)

matchCriteriaId : 8ABA301F-7866-42A5-8391-E07BEAFF06FA (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:* (string)

matchCriteriaId : 884E4A85-ED42-4391-9FDD-9052F957743A (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:* (string)

matchCriteriaId : 1901864B-688B-4352-A587-4B96B4E49FB1 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:* (string)

matchCriteriaId : 78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:* (string)

matchCriteriaId : 1B6670FB-9F5A-469B-97F2-074C28572065 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:* (string)

matchCriteriaId : 71198992-83AA-4E28-BA7D-A3C1897B5E2B (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:* (string)

matchCriteriaId : 4323D874-C317-4D76-8E2D-C82376D84CBE (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:o:juniper:junos:15.1x49:d90:*:*:*:*:*:* (string)

matchCriteriaId : F56067DA-EBA9-481A-B60B-52148584EFBD (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:juniper:csrx:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 11D4A86D-BDB4-4A01-96FE-7E023C58074B (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 561C1113-3D59-4DD9-ADA7-3C9ECC4632EC (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317 (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 927EAB8B-EC3B-4B12-85B9-5517EBA49A30 (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2CEBF85C-736A-4E7D-956A-3E8210D4F70B (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CD647C15-A686-4C8F-A766-BC29404C0FED (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 45AB1622-1AED-4CD7-98F1-67779CDFC321 (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 89276D88-3B8D-4168-A2CD-0920297485F2 (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BB5AB24B-2B43-43DD-AE10-F758B4B19F2A (string)

vulnerable : false (boolean)

}

9 : { »

criteria : cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 80F9DC32-5ADF-4430-B1A6-357D0B29DB78 (string)

vulnerable : false (boolean)

}

10 : { »

criteria : cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8B82D4C4-7A65-409A-926F-33C054DCBFBA (string)

vulnerable : false (boolean)

}

11 : { »

criteria : cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 746C3882-2A5B-4215-B259-EB1FD60C513D (string)

vulnerable : false (boolean)

}

12 : { »

criteria : cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CE535749-F4CE-4FFA-B23D-BF09C92481E5 (string)

vulnerable : false (boolean)

}

13 : { »

criteria : cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:* (string)

matchCriteriaId : DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC (string)

vulnerable : false (boolean)

}

14 : { »

criteria : cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7 (string)

vulnerable : false (boolean)

}

15 : { »

criteria : cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CCC5F6F5-4347-49D3-909A-27A3A96D36C9 (string)

vulnerable : false (boolean)

}

16 : { »

criteria : cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 56BA6B86-D3F4-4496-AE46-AC513C6560FA (string)

vulnerable : false (boolean)

}

17 : { »

criteria : cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2FDDC897-747F-44DD-9599-7266F9B5B7B1 (string)

vulnerable : false (boolean)

}

18 : { »

criteria : cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 62FC145A-D477-4C86-89E7-F70F52773801 (string)

vulnerable : false (boolean)

}

19 : { »

criteria : cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 06685D0E-A075-49A5-9EF4-34F0F795C8C6 (string)

vulnerable : false (boolean)

}

20 : { »

criteria : cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 68CA098D-CBE4-4E62-9EC0-43E1B6098710 (string)

vulnerable : false (boolean)

}

21 : { »

criteria : cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 66F474D4-79B6-4525-983C-9A9011BD958B (string)

vulnerable : false (boolean)

}

22 : { »

criteria : cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8AA424D4-4DBF-4E8C-96B8-E37741B5403E (string)

vulnerable : false (boolean)

}

23 : { »

criteria : cpe:2.3:h:juniper:vsrx:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8B10DFCE-5331-4D79-8D9F-EF84743493D3 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

2 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:* (string)

matchCriteriaId : A283D32F-1CAF-4A5A-83E1-585F2801771F (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:* (string)

matchCriteriaId : 69FC46D4-39E2-4E2F-A1D3-1001769A7115 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:* (string)

matchCriteriaId : 32F83E8B-A816-4F26-95F8-F0DA7F3DF426 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:* (string)

matchCriteriaId : 2C433359-BC8B-4E69-BE74-A31EB148083A (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:juniper:csrx:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 11D4A86D-BDB4-4A01-96FE-7E023C58074B (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 561C1113-3D59-4DD9-ADA7-3C9ECC4632EC (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317 (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 927EAB8B-EC3B-4B12-85B9-5517EBA49A30 (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2CEBF85C-736A-4E7D-956A-3E8210D4F70B (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CD647C15-A686-4C8F-A766-BC29404C0FED (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 45AB1622-1AED-4CD7-98F1-67779CDFC321 (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 89276D88-3B8D-4168-A2CD-0920297485F2 (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BB5AB24B-2B43-43DD-AE10-F758B4B19F2A (string)

vulnerable : false (boolean)

}

9 : { »

criteria : cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 80F9DC32-5ADF-4430-B1A6-357D0B29DB78 (string)

vulnerable : false (boolean)

}

10 : { »

criteria : cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8B82D4C4-7A65-409A-926F-33C054DCBFBA (string)

vulnerable : false (boolean)

}

11 : { »

criteria : cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 746C3882-2A5B-4215-B259-EB1FD60C513D (string)

vulnerable : false (boolean)

}

12 : { »

criteria : cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CE535749-F4CE-4FFA-B23D-BF09C92481E5 (string)

vulnerable : false (boolean)

}

13 : { »

criteria : cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:* (string)

matchCriteriaId : DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC (string)

vulnerable : false (boolean)

}

14 : { »

criteria : cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7 (string)

vulnerable : false (boolean)

}

15 : { »

criteria : cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CCC5F6F5-4347-49D3-909A-27A3A96D36C9 (string)

vulnerable : false (boolean)

}

16 : { »

criteria : cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 56BA6B86-D3F4-4496-AE46-AC513C6560FA (string)

vulnerable : false (boolean)

}

17 : { »

criteria : cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2FDDC897-747F-44DD-9599-7266F9B5B7B1 (string)

vulnerable : false (boolean)

}

18 : { »

criteria : cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 62FC145A-D477-4C86-89E7-F70F52773801 (string)

vulnerable : false (boolean)

}

19 : { »

criteria : cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 06685D0E-A075-49A5-9EF4-34F0F795C8C6 (string)

vulnerable : false (boolean)

}

20 : { »

criteria : cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 68CA098D-CBE4-4E62-9EC0-43E1B6098710 (string)

vulnerable : false (boolean)

}

21 : { »

criteria : cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 66F474D4-79B6-4525-983C-9A9011BD958B (string)

vulnerable : false (boolean)

}

22 : { »

criteria : cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8AA424D4-4DBF-4E8C-96B8-E37741B5403E (string)

vulnerable : false (boolean)

}

23 : { »

criteria : cpe:2.3:h:juniper:vsrx:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8B10DFCE-5331-4D79-8D9F-EF84743493D3 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

3 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:* (string)

matchCriteriaId : A00CA6FB-8F28-4171-B510-8DBA351E80C0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:* (string)

matchCriteriaId : 988D317A-0646-491F-9B97-853E8E208276 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:* (string)

matchCriteriaId : 605F1AD7-5B09-44F0-9017-15AB3EEE559C (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:* (string)

matchCriteriaId : CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:* (string)

matchCriteriaId : 4E4EB6B0-8DB2-4199-96E4-30195D49F756 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:* (string)

matchCriteriaId : 9D8A8E33-473A-4A40-A7B7-47086BB9012A (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:* (string)

matchCriteriaId : F0F65DCA-34B9-4CE8-91C9-426AAAEB4097 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:juniper:csrx:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 11D4A86D-BDB4-4A01-96FE-7E023C58074B (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 561C1113-3D59-4DD9-ADA7-3C9ECC4632EC (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317 (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 927EAB8B-EC3B-4B12-85B9-5517EBA49A30 (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2CEBF85C-736A-4E7D-956A-3E8210D4F70B (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CD647C15-A686-4C8F-A766-BC29404C0FED (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 45AB1622-1AED-4CD7-98F1-67779CDFC321 (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 89276D88-3B8D-4168-A2CD-0920297485F2 (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BB5AB24B-2B43-43DD-AE10-F758B4B19F2A (string)

vulnerable : false (boolean)

}

9 : { »

criteria : cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 80F9DC32-5ADF-4430-B1A6-357D0B29DB78 (string)

vulnerable : false (boolean)

}

10 : { »

criteria : cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8B82D4C4-7A65-409A-926F-33C054DCBFBA (string)

vulnerable : false (boolean)

}

11 : { »

criteria : cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 746C3882-2A5B-4215-B259-EB1FD60C513D (string)

vulnerable : false (boolean)

}

12 : { »

criteria : cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CE535749-F4CE-4FFA-B23D-BF09C92481E5 (string)

vulnerable : false (boolean)

}

13 : { »

criteria : cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:* (string)

matchCriteriaId : DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC (string)

vulnerable : false (boolean)

}

14 : { »

criteria : cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7 (string)

vulnerable : false (boolean)

}

15 : { »

criteria : cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CCC5F6F5-4347-49D3-909A-27A3A96D36C9 (string)

vulnerable : false (boolean)

}

16 : { »

criteria : cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 56BA6B86-D3F4-4496-AE46-AC513C6560FA (string)

vulnerable : false (boolean)

}

17 : { »

criteria : cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2FDDC897-747F-44DD-9599-7266F9B5B7B1 (string)

vulnerable : false (boolean)

}

18 : { »

criteria : cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 62FC145A-D477-4C86-89E7-F70F52773801 (string)

vulnerable : false (boolean)

}

19 : { »

criteria : cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 06685D0E-A075-49A5-9EF4-34F0F795C8C6 (string)

vulnerable : false (boolean)

}

20 : { »

criteria : cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 68CA098D-CBE4-4E62-9EC0-43E1B6098710 (string)

vulnerable : false (boolean)

}

21 : { »

criteria : cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 66F474D4-79B6-4525-983C-9A9011BD958B (string)

vulnerable : false (boolean)

}

22 : { »

criteria : cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8AA424D4-4DBF-4E8C-96B8-E37741B5403E (string)

vulnerable : false (boolean)

}

23 : { »

criteria : cpe:2.3:h:juniper:vsrx:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8B10DFCE-5331-4D79-8D9F-EF84743493D3 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability in the SIP ALG packet processing service of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending specific types of valid SIP traffic to the device. In this case, the flowd process crashes and generates a core dump while processing SIP ALG traffic. Continued receipt of these valid SIP packets will result in a sustained Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D61, 12.3X48-D65 on SRX Series; 15.1X49 versions prior to 15.1X49-D130 on SRX Series; 17.3 versions prior to 17.3R3 on SRX Series; 17.4 versions prior to 17.4R2 on SRX Series. (string)

}

1 : { »

lang : es (string)

value : Una vulnerabilidad en el servicio de procesamiento de paquetes ALG SIP de Juniper Networks Junos OS, permite a un atacante causar una Denegación de servicio (DoS) al dispositivo mediante el envío de tipos específicos de tráfico SIP válido hacia el dispositivo. En este caso, el proceso flowd se bloquea y genera un volcado de núcleo cuando se procesan el tráfico ALG SIP. La recepción continua de estos paquetes SIP válidos resultará en una condición de denegación de servicio (DoS) sostenida. Este problema afecta a: Juniper Networks OS de Junos: versiones 12.3X48 anteriores a 12.3X48-D61, 12.3X48-D65 en la serie SRX; versiones 15.1X49 anteriores a 15.1X49-D130 en la serie SRX; versiones 17.3 anteriores a 17.3R3 en la serie SRX; versiones 17.4 anteriores a 17.4R2 en la serie SRX. (string)

}

]

id : CVE-2019-0055 (string)

lastModified : 2024-11-21T04:16:08.957 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : PARTIAL (string)

baseScore : 5 (number)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:L/Au:N/C:N/I:N/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : sirt@juniper.net (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2019-10-09T20:15:16.473 (string)

references : [ »

0 : { »

source : sirt@juniper.net (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://kb.juniper.net/JSA10953 (string)

}

1 : { »

source : sirt@juniper.net (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-sip-alg.html (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://kb.juniper.net/JSA10953 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-sip-alg.html (string)

}

]

sourceIdentifier : sirt@juniper.net (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-130 (string)

}

]

source : sirt@juniper.net (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-noinfo (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object