CVE-2019-0037
Summary
| CVE | CVE-2019-0037 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-04-10 20:29:00 UTC |
| Updated | 2022-04-18 17:32:00 UTC |
| Description | In a Dynamic Host Configuration Protocol version 6 (DHCPv6) environment, the jdhcpd daemon may crash and restart upon receipt of certain DHCPv6 solicit messages received from a DHCPv6 client. By continuously sending the same crafted packet, an attacker can repeatedly crash the jdhcpd process causing a sustained Denial of Service (DoS) to both IPv4 and IPv6 clients. Affected releases are Juniper Networks Junos OS: 15.1 versions prior to 15.1F6-S12, 15.1R7-S3; 15.1X49 versions prior to 15.1X49-D171, 15.1X49-D180; 15.1X53 versions prior to 15.1X53-D236, 15.1X53-D496; 16.1 versions prior to 16.1R3-S10, 16.1R7-S4; 16.2 versions prior to 16.2R2-S8; 17.1 versions prior to 17.1R2-S10, 17.1R3; 17.2 versions prior to 17.2R1-S8, 17.2R3-S1; 17.3 versions prior to 17.3R3-S3; 17.4 versions prior to 17.4R1-S6, 17.4R2-S3; 18.1 versions prior to 18.1R2-S4, 18.1R3-S2; 18.2 versions prior to 18.2R2; 18.2X75 versions prior to 18.2X75-D30; 18.3 versions prior to 18.3R1-S2. This issue does not affect Junos OS releases prior to 15.1. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Juniper | Junos | 15.1 | r1 | All | All |
| Operating System | Juniper | Junos | 15.1 | r2 | All | All |
| Operating System | Juniper | Junos | 15.1 | r3 | All | All |
| Operating System | Juniper | Junos | 15.1 | r4 | All | All |
| Operating System | Juniper | Junos | 15.1 | r5 | All | All |
| Operating System | Juniper | Junos | 15.1 | r6 | All | All |
| Operating System | Juniper | Junos | 15.1 | r7 | All | All |
| Operating System | Juniper | Junos | 15.1x49-d140 | All | All | All |
| Operating System | Juniper | Junos | 15.1x49-d150 | All | All | All |
| Operating System | Juniper | Junos | 15.1x49-d160 | All | All | All |
| Operating System | Juniper | Junos | 15.1x49-d30 | All | All | All |
| Operating System | Juniper | Junos | 15.1x49-d60 | All | All | All |
| Operating System | Juniper | Junos | 15.1x53-d50 | All | All | All |
| Operating System | Juniper | Junos | 15.1x53-d51 | All | All | All |
| Operating System | Juniper | Junos | 15.1x53-d52 | All | All | All |
| Operating System | Juniper | Junos | 15.1x53-d55 | All | All | All |
| Operating System | Juniper | Junos | 15.1x53-d57 | All | All | All |
| Operating System | Juniper | Junos | 15.1x53-d58 | All | All | All |
| Operating System | Juniper | Junos | 15.1x53-d59 | All | All | All |
| Operating System | Juniper | Junos | 16 | r2 | All | All |
| Operating System | Juniper | Junos | 16 | r3 | All | All |
| Operating System | Juniper | Junos | 16 | r4 | All | All |
| Operating System | Juniper | Junos | 16 | r5 | All | All |
| Operating System | Juniper | Junos | 16 | r6 | All | All |
| Operating System | Juniper | Junos | 16 | r7 | All | All |
| Operating System | Juniper | Junos | 16.2 | r1 | All | All |
| Operating System | Juniper | Junos | 16.2 | r2 | All | All |
| Operating System | Juniper | Junos | 16.2 | r2-s7 | All | All |
| Operating System | Juniper | Junos | 17.1 | r1 | All | All |
| Operating System | Juniper | Junos | 17.1 | r2 | All | All |
| Operating System | Juniper | Junos | 17.1 | r2-s9 | All | All |
| Operating System | Juniper | Junos | 17.2 | r1 | All | All |
| Operating System | Juniper | Junos | 17.2 | r1-s7 | All | All |
| Operating System | Juniper | Junos | 17.2 | r2 | All | All |
| Operating System | Juniper | Junos | 17.2 | r3 | All | All |
| Operating System | Juniper | Junos | 17.3 | r1 | All | All |
| Operating System | Juniper | Junos | 17.3 | r2 | All | All |
| Operating System | Juniper | Junos | 17.3 | r3 | All | All |
| Operating System | Juniper | Junos | 17.3 | r3-s2 | All | All |
| Operating System | Juniper | Junos | 17.4 | r1 | All | All |
| Operating System | Juniper | Junos | 17.4 | r1-s5 | All | All |
| Operating System | Juniper | Junos | 17.4 | r2 | All | All |
| Operating System | Juniper | Junos | 18.1 | r1 | All | All |
| Operating System | Juniper | Junos | 18.1 | r2 | All | All |
| Operating System | Juniper | Junos | 18.1 | r3 | All | All |
| Operating System | Juniper | Junos | 18.1 | r3-s1 | All | All |
| Operating System | Juniper | Junos | 18.2 | r1 | All | All |
| Operating System | Juniper | Junos | 18.2x75-d10 | All | All | All |
| Operating System | Juniper | Junos | 18.3 | r1 | All | All |
| Operating System | Juniper | Junos | 18.3 | r1-s1 | All | All |
| Operating System | Juniper | Junos | 15.1 | r1 | All | All |
| Operating System | Juniper | Junos | 15.1 | r2 | All | All |
| Operating System | Juniper | Junos | 15.1 | r3 | All | All |
| Operating System | Juniper | Junos | 15.1 | r4 | All | All |
| Operating System | Juniper | Junos | 15.1 | r5 | All | All |
| Operating System | Juniper | Junos | 15.1 | r6 | All | All |
| Operating System | Juniper | Junos | 15.1 | r7 | All | All |
| Operating System | Juniper | Junos | 15.1x49-d140 | All | All | All |
| Operating System | Juniper | Junos | 15.1x49-d150 | All | All | All |
| Operating System | Juniper | Junos | 15.1x49-d160 | All | All | All |
| Operating System | Juniper | Junos | 15.1x49-d30 | All | All | All |
| Operating System | Juniper | Junos | 15.1x49-d60 | All | All | All |
| Operating System | Juniper | Junos | 15.1x53-d50 | All | All | All |
| Operating System | Juniper | Junos | 15.1x53-d51 | All | All | All |
| Operating System | Juniper | Junos | 15.1x53-d52 | All | All | All |
| Operating System | Juniper | Junos | 15.1x53-d55 | All | All | All |
| Operating System | Juniper | Junos | 15.1x53-d57 | All | All | All |
| Operating System | Juniper | Junos | 15.1x53-d58 | All | All | All |
| Operating System | Juniper | Junos | 15.1x53-d59 | All | All | All |
| Operating System | Juniper | Junos | 16 | r2 | All | All |
| Operating System | Juniper | Junos | 16 | r3 | All | All |
| Operating System | Juniper | Junos | 16 | r4 | All | All |
| Operating System | Juniper | Junos | 16 | r5 | All | All |
| Operating System | Juniper | Junos | 16 | r6 | All | All |
| Operating System | Juniper | Junos | 16 | r7 | All | All |
| Operating System | Juniper | Junos | 16.2 | r1 | All | All |
| Operating System | Juniper | Junos | 16.2 | r2 | All | All |
| Operating System | Juniper | Junos | 16.2 | r2-s7 | All | All |
| Operating System | Juniper | Junos | 17.1 | r1 | All | All |
| Operating System | Juniper | Junos | 17.1 | r2 | All | All |
| Operating System | Juniper | Junos | 17.1 | r2-s9 | All | All |
| Operating System | Juniper | Junos | 17.2 | r1 | All | All |
| Operating System | Juniper | Junos | 17.2 | r1-s7 | All | All |
| Operating System | Juniper | Junos | 17.2 | r2 | All | All |
| Operating System | Juniper | Junos | 17.2 | r3 | All | All |
| Operating System | Juniper | Junos | 17.3 | r1 | All | All |
| Operating System | Juniper | Junos | 17.3 | r2 | All | All |
| Operating System | Juniper | Junos | 17.3 | r3 | All | All |
| Operating System | Juniper | Junos | 17.3 | r3-s2 | All | All |
| Operating System | Juniper | Junos | 17.4 | r1 | All | All |
| Operating System | Juniper | Junos | 17.4 | r1-s5 | All | All |
| Operating System | Juniper | Junos | 17.4 | r2 | All | All |
| Operating System | Juniper | Junos | 18.1 | r1 | All | All |
| Operating System | Juniper | Junos | 18.1 | r2 | All | All |
| Operating System | Juniper | Junos | 18.1 | r3 | All | All |
| Operating System | Juniper | Junos | 18.1 | r3-s1 | All | All |
| Operating System | Juniper | Junos | 18.2 | r1 | All | All |
| Operating System | Juniper | Junos | 18.2x75-d10 | All | All | All |
| Operating System | Juniper | Junos | 18.3 | r1 | All | All |
| Operating System | Juniper | Junos | 18.3 | r1-s1 | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| 2019-04 Security Bulletin: Junos OS: jdhcpd crash upon receipt of crafted DHCPv6 solicit message (CVE-2019-0037) - Juniper Networks | CONFIRM | kb.juniper.net | Vendor Advisory |
| Malformed Request | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.