deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-11341
Published: 2019-10-09
Description: On certain Samsung P(9.0) phones, an attacker with physical access can start a TCP Dump capture without the user's knowledge. This feature of the Service Mode application is available after entering the *#9900# check code, but is protected by an OTP password. However, this password is created locally and (due to mishandling of cryptography) can be obtained easily by reversing the password creation logic.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-327
References: https://drfone.wondershare.com/unlock/samsung-galaxy-secret-code-list.html; https://security.samsungmobile.com/securityUpdate.smsb; https://twitter.com/fs0c131y/status/[PII_REDACTED]85562368
CVE: CVE-2019-13529
Published: 2019-10-09
Description: An attacker could send a malicious link to an authenticated operator, which may allow remote attackers to perform actions with the permissions of the user on the Sunny WebBox Firmware Version 1.6 and prior. This device uses IP addresses to maintain communication after a successful login, which would increase the ease of exploitation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: http://packetstormsecurity.com/files/154789/SMA-Solar-Technology-AG-Sunny-WebBox-1.6-Cross-Site-Request-Forgery.html; https://www.us-cert.gov/ics/advisories/icsa-19-281-01; http://packetstormsecurity.com/files/154789/SMA-Solar-Technology-AG-Sunny-WebBox-1.6-Cross-Site-Request-Forgery.html
CVE: CVE-2019-14808
Published: 2019-10-09
Description: An issue was discovered in the RENPHO application 3.0.0 for iOS. It transmits JSON data unencrypted to a server without an integrity check, if a user changes personal data in his profile tab (e.g., exposure of his birthday) or logs into his account (i.e., exposure of credentials).
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-319
References: http://packetstormsecurity.com/files/154772/RENPHO-3.0.0-Information-Disclosure.html; https://apps.apple.com/us/app/renpho/id[PII_REDACTED]; https://renpho.com/pages/contact-us
CVE: CVE-2019-15226
Published: 2019-10-09
Description: Upon receiving each incoming request header data, Envoy will iterate over existing request headers to verify that the total size of the headers stays below a maximum limit. The implementation in versions 1.10.0 through 1.11.1 for HTTP/1.x traffic and all versions of Envoy for HTTP/2 traffic had O(n^2) performance characteristics. A remote attacker may craft a request that stays below the maximum request header size but consists of many thousands of small headers to consume CPU and result in a denial-of-service attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/envoyproxy/envoy/commit/afc39bea36fd436e54262f150c009e8d72db5014; https://github.com/envoyproxy/envoy/commits/master; https://github.com/envoyproxy/envoy/issues/8520
CVE: CVE-2019-15859
Published: 2019-10-09
Description: Password disclosure in the web interface on socomec DIRIS A-40 devices before 48250501 allows a remote attacker to get full access to a device via the /password.jsn URI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: http://packetstormsecurity.com/files/154764/Socomec-DIRIS-A-40-Password-Disclosure.html; http://seclists.org/fulldisclosure/2019/Oct/10; https://www.socomec.com/single-circuit-multifunction-meters_en.html
CVE: CVE-2019-17124
Published: 2019-10-09
Description: Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: http://packetstormsecurity.com/files/166541/Kramer-VIAware-2.5.0719.1034-Remote-Code-Execution.html; https://github.com/hessandrew/CVE-2019-17124; http://packetstormsecurity.com/files/166541/Kramer-VIAware-2.5.0719.1034-Remote-Code-Execution.html
CVE: CVE-2019-17128
Published: 2019-10-09
Description: Netreo OmniCenter through 12.1.1 allows unauthenticated SQL Injection (Boolean Based Blind) in the redirect parameters and parameter name of the login page through a GET request. The injection allows an attacker to read sensitive information from the database used by the application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/154763/OmniCenter-12.1.1-SQL-Injection.html; https://www.netreo.com/blog/omnicenter-12-now-available-extensible-integration-unlimited-scalability-device-grouping/; http://packetstormsecurity.com/files/154763/OmniCenter-12.1.1-SQL-Injection.html
CVE: CVE-2019-17375
Published: 2019-10-09
Description: cPanel before 82.0.15 allows API token credentials to persist after an account has been renamed or terminated (SEC-517).
CVSS Score: 8.8 (HIGH)
CWE: CWE-613
References: https://documentation.cpanel.net/display/CL/82+Change+Log; https://news.cpanel.com/cpanel-tsr-2019-0005-full-disclosure/; https://documentation.cpanel.net/display/CL/82+Change+Log
CVE: CVE-2019-17376
Published: 2019-10-09
Description: cPanel before 82.0.15 allows self XSS in the SSL Certificate Upload interface (SEC-521).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://documentation.cpanel.net/display/CL/82+Change+Log; https://documentation.cpanel.net/display/CL/82+Change+Log
CVE: CVE-2019-17377
Published: 2019-10-09
Description: cPanel before 82.0.15 allows self XSS in LiveAPI example scripts (SEC-524).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://documentation.cpanel.net/display/CL/82+Change+Log; https://documentation.cpanel.net/display/CL/82+Change+Log
CVE: CVE-2019-17378
Published: 2019-10-09
Description: cPanel before 82.0.15 allows self XSS in the SSL Key Delete interface (SEC-526).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://documentation.cpanel.net/display/CL/82+Change+Log; https://documentation.cpanel.net/display/CL/82+Change+Log
CVE: CVE-2019-17379
Published: 2019-10-09
Description: cPanel before 82.0.15 allows self stored XSS in the WHM SSL Storage Manager interface (SEC-527).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://documentation.cpanel.net/display/CL/82+Change+Log; https://documentation.cpanel.net/display/CL/82+Change+Log
CVE: CVE-2019-17380
Published: 2019-10-09
Description: cPanel before 82.0.15 allows self XSS in the WHM Update Preferences interface (SEC-528).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://documentation.cpanel.net/display/CL/82+Change+Log; https://documentation.cpanel.net/display/CL/82+Change+Log
CVE: CVE-2019-17383
Published: 2019-10-09
Description: The netaddr gem before 2.0.4 for Ruby has misconfigured file permissions, such that a gem install may result in 0777 permissions in the target filesystem.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: https://github.com/dspinhirne/netaddr-rb/commit/3aac46c00a36e71905eaa619cb94d45bff6e3b51; https://rubygems.org/gems/netaddr/versions; https://github.com/dspinhirne/netaddr-rb/commit/3aac46c00a36e71905eaa619cb94d45bff6e3b51
CVE: CVE-2019-17384
Published: 2019-10-09
Description: The animate-it plugin before 2.3.4 for WordPress has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/animate-it/#developers; https://wpvulndb.com/vulnerabilities/9900; https://wordpress.org/plugins/animate-it/#developers
CVE: CVE-2019-17385
Published: 2019-10-09
Description: The animate-it plugin before 2.3.5 for WordPress has XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://wordpress.org/plugins/animate-it/#developers; https://wpvulndb.com/vulnerabilities/9900; https://wordpress.org/plugins/animate-it/#developers
CVE: CVE-2019-3652
Published: 2019-10-09
Description: Code Injection vulnerability in EPSetup.exe in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user to get their malicious code installed by the ENS installer via code injection into EPSetup.exe by an attacker with access to the installer.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-94, CWE-94
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10299; https://kc.mcafee.com/corporate/index?page=content&id=SB10299
CVE: CVE-2019-3653
Published: 2019-10-09
Description: Improper access control vulnerability in Configuration tool in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user to gain access to security configuration via unauthorized use of the configuration tool.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-284
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10299; https://kc.mcafee.com/corporate/index?page=content&id=SB10299
CVE: CVE-2019-4512
Published: 2019-10-09
Description: IBM Maximo Asset Management 7.6.1.1 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-Force ID: 164554.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-209
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/164554; https://www.ibm.com/support/pages/node/1075413; https://exchange.xforce.ibmcloud.com/vulnerabilities/164554
CVE: CVE-2019-4558
Published: 2019-10-09
Description: A security vulnerability has been identified in all levels of IBM Spectrum Scale V5.0.0.0 through V5.0.3.2 and IBM Spectrum Scale V4.2.0.0 through V4.2.3.17 that could allow a local attacker to obtain root privilege by injecting parameters into setuid files.
CVSS Score: 7.8 (HIGH)
CWE: CWE-74
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/166282; https://www.ibm.com/support/pages/node/1073732; https://exchange.xforce.ibmcloud.com/vulnerabilities/166282
CVE: CVE-2019-6465
Published: 2019-10-09
Description: Controls for zone transfers may not be properly applied to Dynamically Loadable Zones (DLZs) if the zones are writable Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.5-P2, 9.12.0 -> 9.12.3-P2, and versions 9.9.3-S1 -> 9.11.5-S3 of BIND 9 Supported Preview Edition. Versions 9.13.0 -> 9.13.6 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2019-6465.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-732
References: https://access.redhat.com/errata/RHSA-2019:3552; https://kb.isc.org/docs/cve-2019-6465; https://access.redhat.com/errata/RHSA-2019:3552
CVE: CVE-2019-6467
Published: 2019-10-09
Description: A programming error in the nxdomain-redirect feature can cause an assertion failure in query.c if the alternate namespace used by nxdomain-redirect is a descendant of a zone that is served locally. The most likely scenario where this might occur is if the server, in addition to performing NXDOMAIN redirection for recursive clients, is also serving a local copy of the root zone or using mirroring to provide the root zone, although other configurations are also possible. Versions affected: BIND 9.12.0-> 9.12.4, 9.14.0. Also affects all releases in the 9.13 development branch.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://kb.isc.org/docs/cve-2019-6467; https://www.synology.com/security/advisory/Synology_SA_19_20; https://kb.isc.org/docs/cve-2019-6467
CVE: CVE-2019-6468
Published: 2019-10-09
Description: In BIND Supported Preview Edition, an error in the nxdomain-redirect feature can occur in versions which support EDNS Client Subnet (ECS) features. In those versions which have ECS support, enabling nxdomain-redirect is likely to lead to BIND exiting due to assertion failure. Versions affected: BIND Supported Preview Edition version 9.10.5-S1 -> 9.11.5-S5. ONLY BIND Supported Preview Edition releases are affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://kb.isc.org/docs/cve-2019-6468; https://www.synology.com/security/advisory/Synology_SA_19_20; https://kb.isc.org/docs/cve-2019-6468
CVE: CVE-2019-6469
Published: 2019-10-09
Description: An error in the EDNS Client Subnet (ECS) feature for recursive resolvers can cause BIND to exit with an assertion failure when processing a response that has malformed RRSIGs. Versions affected: BIND 9.10.5-S1 -> 9.11.6-S1 of BIND 9 Supported Preview Edition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://kb.isc.org/docs/cve-2019-6469; https://support.f5.com/csp/article/K39751401?utm_source=f5support&amp%3Butm_medium=RSS; https://kb.isc.org/docs/cve-2019-6469
CVE: CVE-2019-6471
Published: 2019-10-09
Description: A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions affected: BIND 9.11.0 -> 9.11.7, 9.12.0 -> 9.12.4-P1, 9.14.0 -> 9.14.2. Also all releases of the BIND 9.13 development branch and version 9.15.0 of the BIND 9.15 development branch and BIND Supported Preview Edition versions 9.11.3-S1 -> 9.11.7-S1.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-362, CWE-617
References: https://kb.isc.org/docs/cve-2019-6471; https://support.f5.com/csp/article/K10092301?utm_source=f5support&amp%3Butm_medium=RSS; https://kb.isc.org/docs/cve-2019-6471
CVE: CVE-2019-17389
Published: 2019-10-09
Description: In RIOT 2019.07, the MQTT-SN implementation (asymcute) mishandles errors occurring during a read operation on a UDP socket. The receive loop ends. This allows an attacker (via a large packet) to prevent a RIOT MQTT-SN client from working until the device is restarted.
CVSS Score: 7.5 (HIGH)
References: https://github.com/RIOT-OS/RIOT/pull/12382; https://github.com/RIOT-OS/RIOT/pull/12382
CVE: CVE-2019-17399
Published: 2019-10-09
Description: The Shack Forms Pro extension before 4.0.32 for Joomla! allows path traversal via a file attachment.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://www.joomlashack.com/changelog/shack-forms/; https://www.joomlashack.com/changelog/shack-forms/
CVE: CVE-2019-17092
Published: 2019-10-09
Description: An XSS vulnerability in project list in OpenProject before 9.0.4 and 10.x before 10.0.2 allows remote attackers to inject arbitrary web script or HTML via the sortBy parameter because error messages are mishandled.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/154851/OpenProject-10.0.1-9.0.3-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2019/Oct/29; https://groups.google.com/forum/#%21topic/openproject-security/tEsx0UXWxXA
CVE: CVE-2019-17401
Published: 2019-10-09
Description: libyal liblnk 20191006 has a heap-based buffer over-read in the network_share_name_offset>20 code block of liblnk_location_information_read_data in liblnk_location_information.c, a different issue than CVE-2019-17264. NOTE: the vendor has disputed this as described in the GitHub issue
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://github.com/libyal/liblnk/issues/40; https://github.com/libyal/liblnk/issues/40
CVE: CVE-2019-17402
Published: 2019-10-09
Description: Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimage_int.cpp, because there is no validation of the relationship of the total size to the offset and size.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120
References: https://github.com/Exiv2/exiv2/issues/1019; https://lists.debian.org/debian-lts-announce/2019/12/msg00001.html; https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html
CVE: CVE-2019-5506
Published: 2019-10-09
Description: Clustered Data ONTAP versions 9.0 and higher do not enforce hostname verification under certain circumstances making them susceptible to impersonation via man-in-the-middle attacks.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-5507
Published: 2019-10-09
Description: SnapManager for Oracle prior to version 3.4.2P1 are susceptible to a vulnerability which when successfully exploited could lead to disclosure of sensitive information.
CVSS Score: 5.5 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2019-0047
Published: 2019-10-09
Description: A persistent Cross-Site Scripting (XSS) vulnerability in Junos OS J-Web interface may allow remote unauthenticated attackers to perform administrative actions on the Junos device. Successful exploitation requires a Junos administrator to first perform certain diagnostic actions on J-Web. This issue affects: Juniper Networks Junos OS 12.1X46 versions prior to 12.1X46-D86; 12.3 versions prior to 12.3R12-S13; 12.3X48 versions prior to 12.3X48-D80; 14.1X53 versions prior to 14.1X53-D51; 15.1 versions prior to 15.1F6-S13, 15.1R7-S4; 15.1X49 versions prior to 15.1X49-D171, 15.1X49-D180; 15.1X53 versions prior to 15.1X53-D497, 15.1X53-D69; 16.1 versions prior to 16.1R7-S5; 16.2 versions prior to 16.2R2-S9; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R1-S8, 17.2R2-S7, 17.2R3-S1; 17.3 versions prior to 17.3R3-S6; 17.4 versions prior to 17.4R1-S7, 17.4R2-S4, 17.4R3; 18.1 versions prior to 18.1R3-S5; 18.2 versions prior to 18.2R1-S5, 18.2R2-S3, 18.2R3; 18.3 versions prior to 18.3R1-S3, 18.3R2, 18.3R3; 18.4 versions prior to 18.4R1-S2, 18.4R2.
CVSS Score: 8.8 (HIGH)
CWE: CWE-79, CWE-79
References: https://kb.juniper.net/JSA10970; https://kb.juniper.net/JSA10970
CVE: CVE-2019-0050
Published: 2019-10-09
Description: Under certain heavy traffic conditions srxpfe process can crash and result in a denial of service condition for the SRX1500 device. Repeated crashes of the srxpfe can result in an extended denial of service condition. The SRX device may fail to forward traffic when this condition occurs. Affected releases are Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D170 on SRX1500; 17.3 versions prior to 17.3R3-S7 on SRX1500; 17.4 versions prior to 17.4R2-S8, 17.4R3 on SRX1500; 18.1 versions prior to 18.1R3-S8 on SRX1500; 18.2 versions prior to 18.2R3 on SRX1500; 18.3 versions prior to 18.3R2 on SRX1500; 18.4 versions prior to 18.4R2 on SRX1500.
CVSS Score: 7.5 (HIGH)
References: https://kb.juniper.net/JSA10972; https://kb.juniper.net/JSA10972
CVE: CVE-2019-0051
Published: 2019-10-09
Description: SSL-Proxy feature on SRX devices fails to handle a hardware resource limitation which can be exploited by remote SSL/TLS servers to crash the flowd daemon. Repeated crashes of the flowd daemon can result in an extended denial of service condition. For this issue to occur, clients protected by the SRX device must initiate a connection to the malicious server. This issue affects: Juniper Networks Junos OS on SRX5000 Series: 12.3X48 versions prior to 12.3X48-D85; 15.1X49 versions prior to 15.1X49-D180; 17.3 versions prior to 17.3R3-S7; 17.4 versions prior to 17.4R2-S6, 17.4R3; 18.1 versions prior to 18.1R3-S8; 18.2 versions prior to 18.2R3; 18.3 versions prior to 18.3R2; 18.4 versions prior to 18.4R2; 19.1 versions prior to 19.1R2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-755, CWE-755
References: https://kb.juniper.net/JSA10973; https://kb.juniper.net/JSA10973
CVE: CVE-2019-0054
Published: 2019-10-09
Description: An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos OS allows an attacker to perform Man-in-the-Middle (MitM) attacks which may compromise the integrity and confidentiality of the device. This issue affects: Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D120 on SRX Series devices. No other versions of Junos OS are affected.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-295, CWE-300, CWE-295
References: https://kb.juniper.net/JSA10952; https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-application-identification-overview.html; https://kb.juniper.net/JSA10952
CVE: CVE-2019-0055
Published: 2019-10-09
Description: A vulnerability in the SIP ALG packet processing service of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending specific types of valid SIP traffic to the device. In this case, the flowd process crashes and generates a core dump while processing SIP ALG traffic. Continued receipt of these valid SIP packets will result in a sustained Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D61, 12.3X48-D65 on SRX Series; 15.1X49 versions prior to 15.1X49-D130 on SRX Series; 17.3 versions prior to 17.3R3 on SRX Series; 17.4 versions prior to 17.4R2 on SRX Series.
CVSS Score: 7.5 (HIGH)
CWE: CWE-130
References: https://kb.juniper.net/JSA10953; https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-sip-alg.html; https://kb.juniper.net/JSA10953
CVE: CVE-2019-0056
Published: 2019-10-09
Description: This issue only affects devices with three (3) or more MPC10's installed in a single chassis with OSPF enabled and configured on the device. An Insufficient Resource Pool weakness allows an attacker to cause the device's Open Shortest Path First (OSPF) states to transition to Down, resulting in a Denial of Service (DoS) attack. This attack requires a relatively large number of specific Internet Mixed (IMIXed) types of genuine and valid IPv6 packets to be transferred by the attacker in a relatively short period of time, across three or more PFE's on the device at the same time. Continued receipt of the traffic sent by the attacker will continue to cause OSPF to remain in the Down starting state, or flap between other states and then again to Down, causing a persistent Denial of Service. This attack will affect all IPv4, and IPv6 traffic served by the OSPF routes once the OSPF states transition to Down. This issue affects: Juniper Networks Junos OS on MX480, MX960, MX2008, MX2010, MX2020: 18.1 versions prior to 18.1R2-S4, 18.1R3-S5; 18.1X75 version 18.1X75-D10 and later versions; 18.2 versions prior to 18.2R1-S5, 18.2R2-S3, 18.2R3; 18.2X75 versions prior to 18.2X75-D50; 18.3 versions prior to 18.3R1-S4, 18.3R2, 18.3R3; 18.4 versions prior to 18.4R1-S2, 18.4R2.
CVSS Score: 7.5 (HIGH)
CWE: CWE-410
References: https://kb.juniper.net/JSA10954; https://kb.juniper.net/JSA10954
CVE: CVE-2019-0057
Published: 2019-10-09
Description: An improper authorization weakness in Juniper Networks Junos OS allows a local authenticated attacker to bypass regular security controls to access the Junos Device Manager (JDM) application and take control of the system. This issue affects: Juniper Networks Junos OS versions prior to 18.2R1, 18.2X75-D5.
CVSS Score: 7.8 (HIGH)
References: https://kb.juniper.net/JSA10955; https://kb.juniper.net/JSA10955
CVE: CVE-2019-0058
Published: 2019-10-09
Description: A vulnerability in the Veriexec subsystem of Juniper Networks Junos OS allowing an attacker to fully compromise the host system. A local authenticated user can elevate privileges to gain full control of the system even if they are specifically denied access to perform certain actions. This issue affects: Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D80 on SRX Series.
CVSS Score: 7.8 (HIGH)
References: https://kb.juniper.net/JSA10956; https://kb.juniper.net/JSA10956
CVE: CVE-2019-0059
Published: 2019-10-09
Description: A memory leak vulnerability in the of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending specific commands from a peered BGP host and having those BGP states delivered to the vulnerable device. This issue affects: Juniper Networks Junos OS: 18.1 versions prior to 18.1R2-S4, 18.1R3-S1; 18.1X75 all versions. Versions before 18.1R1 are not affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-401
References: https://kb.juniper.net/JSA10957; https://kb.juniper.net/JSA10957
CVE: CVE-2019-0060
Published: 2019-10-09
Description: The flowd process, responsible for forwarding traffic in SRX Series services gateways, may crash and restart when processing specific transit IP packets through an IPSec tunnel. Continued processing of these packets may result in an extended Denial of Service (DoS) condition. This issue only occurs when IPSec tunnels are configured. Systems without IPSec tunnel configurations are not vulnerable to this issue. This issue affects Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D171, 15.1X49-D180 on SRX Series; 18.2 versions 18.2R2-S1 and later, prior to 18.2R3 on SRX Series; 18.4 versions prior to 18.4R2 on SRX Series.
CVSS Score: 7.5 (HIGH)
CWE: CWE-755, CWE-755
References: https://kb.juniper.net/JSA10959; https://www.juniper.net/documentation/en_US/junos/topics/topic-map/ipsec-tunnel-traffic-configuration.html; https://kb.juniper.net/JSA10959