Pagina 3 – Azienda Sicura

Lista CVE 2019/0xxx

CVE nel gruppo: 0xxx

CVE-2019-0041 (N/A)

CVE-2019-0042 (Junos OS: EX4300-MP Series: IP transit traffic can reach the control plane via loopback interface.)

CVE-2019-0043 (Incorrect messages from Juniper Identity Management Service (JIMS) can trigger Denial of Service or firewall bypass conditions for SRX series devices)

CVE-2019-0044 (Junos OS: RPD process crashes upon receipt of a specific SNMP packet)

CVE-2019-0046 (Junos OS: SRX5000 series: Kernel crash (vmcore) upon receipt of a specific packet on fxp0 interface)

CVE-2019-0047 (Junos OS: EX4300 Series: Denial of Service upon receipt of large number of specific valid packets on management interface.)

CVE-2019-0048 (Junos OS: Persistent XSS vulnerability in J-Web)

CVE-2019-0049 (EX4300 Series: When a firewall filter is applied to a loopback interface, other firewall filters for multicast traffic may fail)

CVE-2019-0050 (Junos OS: RPD process crashes when BGP peer restarts)

CVE-2019-0051 (Junos OS: SRX1500: Denial of service due to crash of srxpfe process under heavy traffic conditions.)

CVE-2019-0052 (SRX5000 Series: Denial of Service vulnerability in SSL-Proxy feature.)

CVE-2019-0053 (SRX Series: srxpfe process crash while JSF/UTM module parses specific HTTP packets)

CVE-2019-0054 (Junos OS: Insufficient validation of environment variables in telnet client may lead to stack-based buffer overflow)

CVE-2019-0055 (Junos OS: SRX Series: An attacker may be able to perform Man-in-the-Middle (MitM) attacks during app-id signature updates.)

CVE-2019-0056 (Junos OS: SRX Series: An attacker may cause flowd to crash by sending certain valid SIP traffic to a device with SIP ALG enabled.)

CVE-2019-0057 (Junos OS: MX Series: An MPC10 Denial of Service (DoS) due to OSPF states transitioning to Down, causes traffic to stop forwarding through the device.)

CVE-2019-0058 (NFX Series: An attacker may be able to take control of the JDM application and subsequently the entire system.)

CVE-2019-0059 (Junos OS: SRX Series: A weakness in the Veriexec subsystem may allow privilege escalation.)

CVE-2019-0060 (Junos OS: The routing protocol process (rpd) may crash and generate core files upon receipt of specific valid BGP states from a peered host.)

CVE-2019-0061 (Junos OS: SRX Series: flowd process crash due to processing of specific transit IP packets)

CVE-2019-0062 (Junos OS: Insecure management daemon (MGD) configuration may allow local privilege escalation)

CVE-2019-0063 (Junos OS: Session fixation vulnerability in J-Web)

CVE-2019-0064 (Junos OS: MX Series: jdhcpd crash when receiving a specific crafted DHCP response message)

CVE-2019-0065 (Junos OS: SRX5000 Series: flowd process crash due to receipt of specific TCP packet)

CVE-2019-0066 (Junos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC)

CVE-2019-0067 (Junos OS: A malformed IPv4 packet received by Junos in an NG-mVPN scenario may cause the routing protocol daemon (rpd) process to core)

CVE-2019-0068 (Junos OS: Kernel crash (vmcore) upon receipt of a specific link-local IPv6 packet on devices configured with Multi-Chassis Link Aggregation Group (MC-LAG))

CVE-2019-0069 (Junos OS: SRX Series: Denial of Service vulnerability in flowd due to multicast packets)

CVE-2019-0070 (Junos OS: vSRX, SRX1500, SRX4K, ACX5K, EX4600, QFX5100, QFX5110, QFX5200, QFX10K and NFX Series: console management port device authentication credentials are logged in clear text)

CVE-2019-0071 (Junos OS: NFX Series: An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions.)

CVE-2019-0072 (Junos OS: EX2300, EX3400 Series: Veriexec signature checking not enforced in specific versions of Junos OS)

CVE-2019-0073 (SBR Carrier: A vulnerability in the identity and access management certificate generation procedure allows a local attacker to gain access to confidential information.)

CVE-2019-0074 (Junos OS: PKI key pairs are exported with insecure file permissions)

CVE-2019-0075 (Junos OS: NFX150 Series, QFX10K Series, EX9200 Series, MX Series, PTX Series: Path traversal vulnerability in NFX150 and NG-RE leads to information disclosure.)

CVE-2019-0086 (Junos OS: SRX Series: Denial of Service vulnerability in srxpfe related to PIM)

CVE-2019-0087 (N/A)

CVE-2019-0088 (N/A)

CVE-2019-0089 (N/A)

CVE-2019-0090 (N/A)

CVE-2019-0091 (N/A)

CVE-2019-0092 (N/A)

CVE-2019-0093 (N/A)

CVE-2019-0094 (N/A)

CVE-2019-0095 (N/A)

CVE-2019-0096 (N/A)

CVE-2019-0097 (N/A)