Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1956?


Explain the CVE ID: What does the identifier CVE-2018-1957 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1957.

IBM WebSphere Application Server 9 could allow sensitive information to be available caused by mishandling of data by the application based on an incorrect return by the httpServletRequest#authenticate() API when an unprotected URI is accessed. IBM X-Force ID: 153629.


Provide references for further information: Can you share references or external links related to CVE-2018-1957?

{'name': '106203', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106203'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.ibm.com/support/docview.wss?uid=ibm10744247'}, {'name': 'ibm-websphere-cve20181957-info-disc(153629)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/153629'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1957?


Explain the CVE ID: What does the identifier CVE-2018-1959 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1959.

IBM Security Identity Manager 7.0.1 Virtual Appliance contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 153633.


Provide references for further information: Can you share references or external links related to CVE-2018-1959?

{'name': '106726', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106726'}, {'name': 'ibm-sim-cve20181959-info-disc(153633)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/153633'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.ibm.com/support/docview.wss?uid=ibm10796380'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1959?


Explain the CVE ID: What does the identifier CVE-2018-1961 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1961.

IBM Emptoris Contract Management 10.0.0 and 10.1.3.0 could disclose sensitive information from detailed information from error messages. IBM X-Force ID: 153657.


Provide references for further information: Can you share references or external links related to CVE-2018-1961?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.ibm.com/support/docview.wss?uid=ibm10731107'}, {'name': 'ibm-emptoris-cve20181961-info-disc (153657)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/153657'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1961?


Explain the CVE ID: What does the identifier CVE-2018-1962 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1962.

IBM Security Identity Manager 7.0.1 Virtual Appliance does not invalidate session tokens when the logout button is pressed. The lack of proper session termination may allow attackers with local access to login into a closed browser session. IBM X-Force ID: 153658.


Provide references for further information: Can you share references or external links related to CVE-2018-1962?

{'name': '106854', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106854'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=ibm10796380'}, {'name': 'ibm-sim-cve20181962-info-disc(153658)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/153658'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1962?


Explain the CVE ID: What does the identifier CVE-2018-1967 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1967.

IBM Security Identity Manager 6.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 153748.


Provide references for further information: Can you share references or external links related to CVE-2018-1967?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.ibm.com/support/docview.wss?uid=ibm10794615'}, {'name': 'ibm-sim-cve20181967-xss(153748)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/153748'}, {'name': '106554', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106554'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1967?


Explain the CVE ID: What does the identifier CVE-2018-1968 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1968.

IBM Security Identity Manager 7.0.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 153749.


Provide references for further information: Can you share references or external links related to CVE-2018-1968?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=ibm10958077'}, {'name': 'ibm-sim-cve20181968-info-disc (153749)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/153749'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1968?


Explain the CVE ID: What does the identifier CVE-2018-1969 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1969.

IBM Security Identity Manager 6.0.0 allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 153750.


Provide references for further information: Can you share references or external links related to CVE-2018-1969?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.ibm.com/support/docview.wss?uid=ibm10794615'}, {'name': 'ibm-sim-cve20181969-file-upload(153750)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/153750'}, {'name': '106554', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106554'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1969?


Explain the CVE ID: What does the identifier CVE-2018-1970 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1970.

IBM Security Identity Manager 7.0.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 153751.


Provide references for further information: Can you share references or external links related to CVE-2018-1970?

{'name': 'ibm-sim-cve20181970-info-disc(153751)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/153751'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=ibm10796380'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1970?


Explain the CVE ID: What does the identifier CVE-2018-1973 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1973.

IBM API Connect 5.0.0.0 through 5.0.8.4 allows a user with limited 'API Administrator level access to give themselves full 'Administrator' level access through the members functionality. IBM X-Force ID: 153914.


Provide references for further information: Can you share references or external links related to CVE-2018-1973?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.ibm.com/support/docview.wss?uid=ibm10788339'}, {'name': '106281', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106281'}, {'name': 'ibm-api-cve20181973-priv-escalation(153914)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/153914'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1973?


Explain the CVE ID: What does the identifier CVE-2018-1974 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1974.

IBM WebSphere 8.0.0.0 through 9.1.1 could allow an authenticated attacker to escalate their privileges when using multiplexed channels. IBM X-Force ID: 153915.


Provide references for further information: Can you share references or external links related to CVE-2018-1974?

{'name': 'ibm-websphere-cve20181974-priv-escalation(153915)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/153915'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.ibm.com/support/docview.wss?uid=ibm10792043'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1974?


Explain the CVE ID: What does the identifier CVE-2018-1975 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1975.

IBM Rational DOORS Web Access 9.5.1 through 9.5.2.9, and 9.6 through 9.6.1.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 153916.


Provide references for further information: Can you share references or external links related to CVE-2018-1975?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=ibm10883198'}, {'name': 'ibm-dwa-cve20181975-xss (153916)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/153916'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1975?


Explain the CVE ID: What does the identifier CVE-2018-1976 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1976.

IBM API Connect 5.0.0.0 through 5.0.8.4 is impacted by sensitive information disclosure via a REST API that could allow a user with administrative privileges to obtain highly sensitive information. IBM X-Force ID: 154031.


Provide references for further information: Can you share references or external links related to CVE-2018-1976?

{'name': 'ibm-api-cve20181976-info-disc(154031)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/154031'}, {'name': '106792', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106792'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.ibm.com/support/docview.wss?uid=ibm10843130'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1976?


Explain the CVE ID: What does the identifier CVE-2018-1977 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1977.

IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) contains a denial of service vulnerability. A remote, authenticated DB2 user could exploit this vulnerability by issuing a specially-crafted SELECT statement with TRUNCATE function. IBM X-Force ID: 154032.


Provide references for further information: Can you share references or external links related to CVE-2018-1977?

{'name': '106222', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106222'}, {'name': 'ibm-db2-cve20181977-dos(154032)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/154032'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=ibm10788089'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1977?


Explain the CVE ID: What does the identifier CVE-2018-1978 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1978.

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-ForceID: 154069.


Provide references for further information: Can you share references or external links related to CVE-2018-1978?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.ibm.com/support/docview.wss?uid=ibm10740413'}, {'name': '107398', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/107398'}, {'name': 'ibm-db2-cve20181978-bo(154069)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/154069'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1978?


Explain the CVE ID: What does the identifier CVE-2018-1980 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1980.

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could allow an authenticated local attacker to execute arbitrary code on the system as root. IBM X-ForceID: 154078.


Provide references for further information: Can you share references or external links related to CVE-2018-1980?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.ibm.com/support/docview.wss?uid=ibm10740413'}, {'name': 'ibm-db2-cve20181980-bo(154078)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/154078'}, {'name': '107398', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/107398'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1980?


Explain the CVE ID: What does the identifier CVE-2018-1982 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1982.

IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 154135.


Provide references for further information: Can you share references or external links related to CVE-2018-1982?

{'name': 'ibm-rtc-cve20181982-xss(154135)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/154135'}, {'name': '107419', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/107419'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=ibm10875364'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1982?


Explain the CVE ID: What does the identifier CVE-2018-1983 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1983.

IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 154136.


Provide references for further information: Can you share references or external links related to CVE-2018-1983?

{'name': 'ibm-rtc-cve20181983-xss(154136)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/154136'}, {'name': '107419', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/107419'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=ibm10875364'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1983?


Explain the CVE ID: What does the identifier CVE-2018-1984 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1984.

IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 154137.


Provide references for further information: Can you share references or external links related to CVE-2018-1984?

{'name': '107419', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/107419'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=ibm10875364'}, {'name': 'ibm-rtc-cve20181984-xss(154137)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/154137'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1984?


Explain the CVE ID: What does the identifier CVE-2018-1985 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1985.

IBM Trusteer Rapport/Apex 3.6.1908.22 contains an unused legacy driver which could allow a user with administrator privileges to cause a buffer overflow that would result in a kernel panic. IBM X-Force ID: 154207.


Provide references for further information: Can you share references or external links related to CVE-2018-1985?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.ibm.com/support/docview.wss?uid=ibm10869212'}, {'name': 'ibm-trusteer-cve20181985-dos (154207)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/154207'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1985?


Explain the CVE ID: What does the identifier CVE-2018-1987 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1987.

IBM Spectrum Protect for Enterprise Resource Planning 7.1 and 8.1, if tracing is activated, the IBM Spectrum Protect node password may be displayed in plain text in the ERP trace file. IBM X-Force ID: 154280.


Provide references for further information: Can you share references or external links related to CVE-2018-1987?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ibm.com/support/docview.wss?uid=ibm10883782'}, {'name': 'ibm-tivoli-cve20181987-info-disc (154280)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/154280'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1987?


Explain the CVE ID: What does the identifier CVE-2018-1990 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1990.

IBM Cloud App Management V2018.2.0, V2018.4.0, and V2018.4.1 could allow an attacker to obtain sensitive configuration information using a specially crafted HTTP request. IBM X-Force ID: 154283.


Provide references for further information: Can you share references or external links related to CVE-2018-1990?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.ibm.com/support/docview.wss?uid=ibm10883350'}, {'name': 'ibm-cam-cve20181990-info-disc (154283)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/154283'}, {'name': '108327', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/108327'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1990?


Explain the CVE ID: What does the identifier CVE-2018-1991 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1991.

IBM API Connect 5.0.0.0, and 5.0.8.6 could could return sensitive information that could provide critical information as to the underlying software stack in CMC UI headers. IBM X-Force ID: 154284.


Provide references for further information: Can you share references or external links related to CVE-2018-1991?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.ibm.com/support/docview.wss?uid=ibm10871970'}, {'name': 'ibm-api-cve20181991-info-disc (154284)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/154284'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1991?


Explain the CVE ID: What does the identifier CVE-2018-1992 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1992.

The IBM Power 9 OP910, OP920, and FW910 boot firmware's bootloader is responsible for loading and validating the initial boot firmware image that drives the rest of the system's hardware initialization. The bootloader firmware contains a buffer overflow vulnerability such that, if an attacker were able to replace the initial boot firmware image with a very carefully crafted and sufficiently large, malicious replacement, it could cause the bootloader, during the load of that image, to overwrite its own instruction memory and circumvent secure boot protections, install trojans, etc. IBM X-Force ID: 154345.


Provide references for further information: Can you share references or external links related to CVE-2018-1992?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.ibm.com/support/docview.wss?uid=ibm10868992'}, {'name': 'ibm-power9-cve20181992-code-exec (154345)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/154345'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1992?


Explain the CVE ID: What does the identifier CVE-2018-1993 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1993.

IBM Spectrum Scale (GPFS) 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 where the use of Local Read Only Cache (LROC) is enabled may caused read operation on a file to return data from a different file. IBM X-Force ID: 154440.


Provide references for further information: Can you share references or external links related to CVE-2018-1993?

{'name': 'ibm-gpfs-cve20181993-info-disc(154440)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/154440'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.ibm.com/support/docview.wss?uid=ibm10793719'}, {'name': '106485', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106485'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1993?


Explain the CVE ID: What does the identifier CVE-2018-1994 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1994.

IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 154494.


Provide references for further information: Can you share references or external links related to CVE-2018-1994?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.ibm.com/support/docview.wss?uid=ibm10793871'}, {'name': 'ibm-infosphere-cve20181994-sql-injection (154494)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/154494'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1994?


Explain the CVE ID: What does the identifier CVE-2018-1996 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1996.

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security, caused by the improper TLS configuration. A remote attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 154650.


Provide references for further information: Can you share references or external links related to CVE-2018-1996?

{'name': 'ibm-websphere-cve20181996-info-disc(154650)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/154650'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.ibm.com/support/docview.wss?uid=ibm10793421'}, {'name': '107155', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/107155'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1996?


Explain the CVE ID: What does the identifier CVE-2018-1997 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1997.

IBM Business Automation Workflow and Business Process Manager 18.0.0.0, 18.0.0.1, and 18.0.0.2 are vulnerable to a denial of service attack. An authenticated attacker might send a specially crafted request that exhausts server-side memory. IBM X-Force ID: 154774.


Provide references for further information: Can you share references or external links related to CVE-2018-1997?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.ibm.com/support/docview.wss?uid=ibm10794831'}, {'name': 'ibm-baw-cve20181997-dos (154774)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/154774'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1997?


Explain the CVE ID: What does the identifier CVE-2018-1998 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1998.

IBM WebSphere MQ 8.0.0.0 through 9.1.1 could allow a local user to inject code that could be executed with root privileges. This is due to an incomplete fix for CVE-2018-1792. IBM X-ForceID: 154887.


Provide references for further information: Can you share references or external links related to CVE-2018-1998?

{'name': 'ibm-websphere-cve20181998-priv-escalation(154887)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/154887'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.ibm.com/support/docview.wss?uid=ibm10870488'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1998?


Explain the CVE ID: What does the identifier CVE-2018-1999 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2018-1999.

IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could reveal sensitive version information about the server from error pages that could aid an attacker in further attacks against the system. IBM X-Force ID: 154889.


Provide references for further information: Can you share references or external links related to CVE-2018-1999?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.ibm.com/support/docview.wss?uid=ibm10870502'}, {'name': 'ibm-bpm-cve20181999-info-disc (154889)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/154889'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2018-1999?


Explain the CVE ID: What does the identifier CVE-2019-0001 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0001.

Receipt of a malformed packet on MX Series devices with dynamic vlan configuration can trigger an uncontrolled recursion loop in the Broadband Edge subscriber management daemon (bbe-smgd), and lead to high CPU usage and a crash of the bbe-smgd service. Repeated receipt of the same packet can result in an extended denial of service condition for the device. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S1; 16.2 versions prior to 16.2R2-S7; 17.1 versions prior to 17.1R2-S10, 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R3-S1; 17.4 versions prior to 17.4R2; 18.1 versions prior to 18.1R3; 18.2 versions prior to 18.2R2.


Provide references for further information: Can you share references or external links related to CVE-2019-0001?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10900'}, {'name': '106541', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106541'}, {'name': 'FEDORA-2019-5f14b810f8', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RMKFSHPMOZL7MDWU5RYOTIBTRWSZ4Z6X/'}, {'name': 'FEDORA-2019-815807c020', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W7CPKBW4QZ4VIY4UXIUVUSHRJ4R2FROE/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0001?


Explain the CVE ID: What does the identifier CVE-2019-0002 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0002.

On EX2300 and EX3400 series, stateless firewall filter configuration that uses the action 'policer' in combination with other actions might not take effect. When this issue occurs, the output of the command: show pfe filter hw summary will not show the entry for: RACL group Affected releases are Junos OS on EX2300 and EX3400 series: 15.1X53 versions prior to 15.1X53-D590; 18.1 versions prior to 18.1R3; 18.2 versions prior to 18.2R2. This issue affect both IPv4 and IPv6 firewall filter.


Provide references for further information: Can you share references or external links related to CVE-2019-0002?

{'name': '106669', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106669'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.juniper.net/documentation/en_US/junos/topics/reference/command-summary/show-pfe-filter.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10901'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0002?


Explain the CVE ID: What does the identifier CVE-2019-0003 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0003.

When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, a reachable assertion failure occurs, causing the routing protocol daemon (rpd) process to crash with a core file being generated. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D77 on SRX Series; 12.3 versions prior to 12.3R12-S10; 12.3X48 versions prior to 12.3X48-D70 on SRX Series; 14.1X53 versions prior to 14.1X53-D47 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300, EX4550/VC, EX4600, EX6200, EX8200/VC (XRE), QFX3500, QFX3600, QFX5100; 15.1 versions prior to 15.1R3; 15.1F versions prior to 15.1F3; 15.1X49 versions prior to 15.1X49-D140 on SRX Series; 15.1X53 versions prior to 15.1X53-D59 on EX2300/EX3400.


Provide references for further information: Can you share references or external links related to CVE-2019-0003?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10902'}, {'name': '106544', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106544'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0003?


Explain the CVE ID: What does the identifier CVE-2019-0004 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0004.

On Juniper ATP, the API key and the device key are logged in a file readable by authenticated local users. These keys are used for performing critical operations on the WebUI interface. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.


Provide references for further information: Can you share references or external links related to CVE-2019-0004?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10918'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0004?


Explain the CVE ID: What does the identifier CVE-2019-0005 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0005.

On EX2300, EX3400, EX4600, QFX3K and QFX5K series, firewall filter configuration cannot perform packet matching on any IPv6 extension headers. This issue may allow IPv6 packets that should have been blocked to be forwarded. IPv4 packet filtering is unaffected by this vulnerability. Affected releases are Juniper Networks Junos OS on EX and QFX series;: 14.1X53 versions prior to 14.1X53-D47; 15.1 versions prior to 15.1R7; 15.1X53 versions prior to 15.1X53-D234 on QFX5200/QFX5110 series; 15.1X53 versions prior to 15.1X53-D591 on EX2300/EX3400 series; 16.1 versions prior to 16.1R7; 17.1 versions prior to 17.1R2-S10, 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R3; 17.4 versions prior to 17.4R2; 18.1 versions prior to 18.1R2.


Provide references for further information: Can you share references or external links related to CVE-2019-0005?

{'name': '106665', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106665'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10905'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0005?


Explain the CVE ID: What does the identifier CVE-2019-0006 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0006.

A certain crafted HTTP packet can trigger an uninitialized function pointer deference vulnerability in the Packet Forwarding Engine manager (fxpc) on all EX, QFX and MX Series devices in a Virtual Chassis configuration. This issue can result in a crash of the fxpc daemon or may potentially lead to remote code execution. This issue only occurs when the crafted packet it destined to the device. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D47 on EX and QFX Virtual Chassis Platforms; 15.1 versions prior to 15.1R7-S3 all Virtual Chassis Platforms 15.1X53 versions prior to 15.1X53-D50 on EX and QFX Virtual Chassis Platforms.


Provide references for further information: Can you share references or external links related to CVE-2019-0006?

{'name': '106666', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106666'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10906'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0006?


Explain the CVE ID: What does the identifier CVE-2019-0007 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0007.

The vMX Series software uses a predictable IP ID Sequence Number. This leaves the system as well as clients connecting through the device susceptible to a family of attacks which rely on the use of predictable IP ID sequence numbers as their base method of attack. This issue was found during internal product security testing. Affected releases are Juniper Networks Junos OS: 15.1 versions prior to 15.1F5 on vMX Series.


Provide references for further information: Can you share references or external links related to CVE-2019-0007?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10903'}, {'name': '106564', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106564'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0007?


Explain the CVE ID: What does the identifier CVE-2019-0008 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0008.

A certain sequence of valid BGP or IPv6 BFD packets may trigger a stack based buffer overflow in the Junos OS Packet Forwarding Engine manager (FXPC) process on QFX5000 series, EX4300, EX4600 devices. This issue can result in a crash of the fxpc daemon or may potentially lead to remote code execution. Affected releases are Juniper Networks Junos OS on QFX 5000 series, EX4300, EX4600 are: 14.1X53; 15.1X53 versions prior to 15.1X53-D235; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R3-S2, 17.3R4; 17.4 versions prior to 17.4R2-S1, 17.4R3; 18.1 versions prior to 18.1R3-S1, 18.1R4; 18.2 versions prior to 18.2R2; 18.2X75 versions prior to 18.2X75-D30; 18.3 versions prior to 18.3R2.


Provide references for further information: Can you share references or external links related to CVE-2019-0008?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10930'}, {'name': '107897', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/107897'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0008?


Explain the CVE ID: What does the identifier CVE-2019-0009 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0009.

On EX2300 and EX3400 series, high disk I/O operations may disrupt the communication between the routing engine (RE) and the packet forwarding engine (PFE). In a virtual chassis (VC) deployment, this issue disrupts communication between the VC members. This issue does not affect other Junos platforms. Affected releases are Junos OS on EX2300 and EX3400 series: 15.1X53 versions prior to 15.1X53-D590; 18.1 versions prior to 18.1R2-S2, 18.1R3; 18.2 versions prior to 18.2R2.


Provide references for further information: Can you share references or external links related to CVE-2019-0009?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10909'}, {'name': '106548', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106548'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0009?


Explain the CVE ID: What does the identifier CVE-2019-0010 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0010.

An SRX Series Service Gateway configured for Unified Threat Management (UTM) may experience a system crash with the error message "mbuf exceed" -- an indication of memory buffer exhaustion -- due to the receipt of crafted HTTP traffic. Each crafted HTTP packet inspected by UTM consumes mbufs which can be identified through the following log messages: all_logs.0:Jun 8 03:25:03 srx1 node0.fpc4 : SPU3 jmpi mbuf stall 50%. all_logs.0:Jun 8 03:25:13 srx1 node0.fpc4 : SPU3 jmpi mbuf stall 51%. all_logs.0:Jun 8 03:25:24 srx1 node0.fpc4 : SPU3 jmpi mbuf stall 52%. ... Eventually the system runs out of mbufs and the system crashes (fails over) with the error "mbuf exceed". This issue only occurs when HTTP AV inspection is configured. Devices configured for Web Filtering alone are unaffected by this issue. Affected releases are Junos OS on SRX Series: 12.1X46 versions prior to 12.1X46-D81; 12.3X48 versions prior to 12.3X48-D77; 15.1X49 versions prior to 15.1X49-D101, 15.1X49-D110.


Provide references for further information: Can you share references or external links related to CVE-2019-0010?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10910'}, {'name': '106535', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106535'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0010?


Explain the CVE ID: What does the identifier CVE-2019-0011 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0011.

The Junos OS kernel crashes after processing a specific incoming packet to the out of band management interface (such as fxp0, me0, em0, vme0) destined for another address. By continuously sending this type of packet, an attacker can repeatedly crash the kernel causing a sustained Denial of Service. Affected releases are Juniper Networks Junos OS: 17.2 versions prior to 17.2R1-S7, 17.2R3; 17.3 versions prior to 17.3R3-S3; 17.4 versions prior to 17.4R1-S4, 17.4R2; 17.2X75 versions prior to 17.2X75-D110; 18.1 versions prior to 18.1R2.


Provide references for further information: Can you share references or external links related to CVE-2019-0011?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10911'}, {'name': '106534', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106534'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0011?


Explain the CVE ID: What does the identifier CVE-2019-0012 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0012.

A Denial of Service (DoS) vulnerability in BGP in Juniper Networks Junos OS configured as a VPLS PE allows an attacker to craft a specific BGP message to cause the routing protocol daemon (rpd) process to crash and restart. While rpd restarts after a crash, repeated crashes can result in an extended DoS condition. This issue only affects PE routers configured with BGP Auto discovery for LDP VPLS. Other BGP configurations are unaffected by this vulnerability. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D81; 12.3 versions prior to 12.3R12-S12; 12.3X48 versions prior to 12.3X48-D76; 14.1X53 versions prior to 14.1X53-D48; 15.1 versions prior to 15.1F6-S12, 15.1R7-S2; 15.1X49 versions prior to 15.1X49-D150; 15.1X53 versions prior to 15.1X53-D235, 15.1X53-D495, 15.1X53-D590, 15.1X53-D68; 16.1 versions prior to 16.1R3-S10, 16.1R4-S12, 16.1R6-S6, 16.1R7-S1; 16.2 versions prior to 16.2R2-S7; 17.1 versions prior to 17.1R2-S9, 17.1R3; 17.2 versions prior to 17.2R1-S7, 17.2R2-S6, 17.2R3; 17.3 versions prior to 17.3R2-S4, 17.3R3; 17.4 versions prior to 17.4R1-S5, 17.4R2; 18.1 versions prior to 18.1R2-S3, 18.1R3.


Provide references for further information: Can you share references or external links related to CVE-2019-0012?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10912'}, {'name': '106536', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106536'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0012?


Explain the CVE ID: What does the identifier CVE-2019-0013 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0013.

The routing protocol daemon (RPD) process will crash and restart when a specific invalid IPv4 PIM Join packet is received. While RPD restarts after a crash, repeated crashes can result in an extended Denial of Service (DoS) condition. This issue only affects IPv4 PIM. IPv6 PIM is unaffected by this vulnerability. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D77; 12.3X48 versions prior to 12.3X48-D77; 15.1 versions prior to 15.1F6-S10, 15.1R6-S6, 15.1R7; 15.1X49 versions prior to 15.1X49-D150; 15.1X53 versions prior to 15.1X53-D233, 15.1X53-D59; 16.1 versions prior to 16.1R3-S8, 16.1R4-S8, 16.1R7; 16.2 versions prior to 16.2R2-S6; 17.1 versions prior to 17.1R2-S6, 17.1R3; 17.2 versions prior to 17.2R2-S3, 17.2R3; 17.3 versions prior to 17.3R2-S4, 17.3R3; 17.4 versions prior to 17.4R2.


Provide references for further information: Can you share references or external links related to CVE-2019-0013?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10913'}, {'name': '106519', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106519'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0013?


Explain the CVE ID: What does the identifier CVE-2019-0014 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0014.

On QFX and PTX Series, receipt of a malformed packet for J-Flow sampling might crash the FPC (Flexible PIC Concentrator) process which causes all interfaces to go down. By continuously sending the offending packet, an attacker can repeatedly crash the FPC process causing a sustained Denial of Service (DoS). This issue affects both IPv4 and IPv6 packet processing. Affected releases are Juniper Networks Junos OS on QFX and PTX Series: 17.4 versions prior to 17.4R2-S1, 17.4R3; 18.1 versions prior to 18.1R3-S1; 18.2 versions prior to 18.2R1-S3, 18.2R2; 17.2X75 versions prior to 17.2X75-D91, 17.2X75-D100.


Provide references for further information: Can you share references or external links related to CVE-2019-0014?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10914'}, {'name': '106556', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106556'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0014?


Explain the CVE ID: What does the identifier CVE-2019-0015 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0015.

A vulnerability in the SRX Series Service Gateway allows deleted dynamic VPN users to establish dynamic VPN connections until the device is rebooted. A deleted dynamic VPN connection should be immediately disallowed from establishing new VPN connections. Due to an error in token caching, deleted users are allowed to connect once a previously successful dynamic VPN connection has been established. A reboot is required to clear the cached authentication token. Affected releases are Junos OS on SRX Series: 12.3X48 versions prior to 12.3X48-D75; 15.1X49 versions prior to 15.1X49-D150; 17.3 versions prior to 17.3R3; 17.4 versions prior to 17.4R2; 18.1 versions prior to 18.1R3; 18.2 versions prior to 18.2R2.


Provide references for further information: Can you share references or external links related to CVE-2019-0015?

{'name': '106668', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/106668'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10915'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0015?


Explain the CVE ID: What does the identifier CVE-2019-0016 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0016.

A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from another legitimate delete action performed by another administrative user. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.


Provide references for further information: Can you share references or external links related to CVE-2019-0016?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10917'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0016?


Explain the CVE ID: What does the identifier CVE-2019-0017 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0017.

The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of malicious images or scripts, or other content types. Affected releases are Juniper Networks Junos Space versions prior to 18.3R1.


Provide references for further information: Can you share references or external links related to CVE-2019-0017?


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0017?


Explain the CVE ID: What does the identifier CVE-2019-0018 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0018.

A persistent cross-site scripting (XSS) vulnerability in the file upload menu of Juniper ATP may allow an authenticated user to inject arbitrary scripts and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.


Provide references for further information: Can you share references or external links related to CVE-2019-0018?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10918'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0018?


Explain the CVE ID: What does the identifier CVE-2019-0019 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0019.

When BGP tracing is enabled an incoming BGP message may cause the Junos OS routing protocol daemon (rpd) process to crash and restart. While rpd restarts after a crash, repeated crashes can result in an extended DoS condition. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S4, 16.1R7-S5; 16.2 versions prior to 16.2R2-S9, 16.2R3; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3-S1; 17.3 versions prior to 17.3R3-S3, 17.3R3-S4, 17.3R4; 17.4 versions prior to 17.4R1-S7, 17.4R2-S3, 17.4R2-S4, 17.4R3; 18.1 versions prior to 18.1R2-S4, 18.1R3-S4, 18.1R4; 18.2 versions prior to 18.2R2-S2, 18.2R2-S3, 18.2R3; 18.2X75 versions prior to 18.2X75-D40; 18.3 versions prior to 18.3R1-S3, 18.3R2; 18.4 versions prior to 18.4R1-S2, 18.4R2. This issue does not affect Junos releases prior to 16.1R1.


Provide references for further information: Can you share references or external links related to CVE-2019-0019?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10931'}, {'name': '107893', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/107893'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0019?


Explain the CVE ID: What does the identifier CVE-2019-0020 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0020.

Juniper ATP ships with hard coded credentials in the Web Collector instance which gives an attacker the ability to take full control of any installation of the software. Affected releases are Juniper Networks Juniper ATP: 5.0 versions prior to 5.0.3.


Provide references for further information: Can you share references or external links related to CVE-2019-0020?


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0020?


Explain the CVE ID: What does the identifier CVE-2019-0021 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0021.

On Juniper ATP, secret passphrase CLI inputs, such as "set mcm", are logged to /var/log/syslog in clear text, allowing authenticated local user to be able to view these secret information. This issue affects Juniper ATP 5.0 versions prior to 5.0.4.


Provide references for further information: Can you share references or external links related to CVE-2019-0021?


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0021?


Explain the CVE ID: What does the identifier CVE-2019-0022 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0022.

Juniper ATP ships with hard coded credentials in the Cyphort Core instance which gives an attacker the ability to take full control of any installation of the software. Affected releases are Juniper Networks Juniper ATP: 5.0 versions prior to 5.0.3.


Provide references for further information: Can you share references or external links related to CVE-2019-0022?


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0022?


Explain the CVE ID: What does the identifier CVE-2019-0023 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0023.

A persistent cross-site scripting (XSS) vulnerability in the Golden VM menu of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.


Provide references for further information: Can you share references or external links related to CVE-2019-0023?


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0023?


Explain the CVE ID: What does the identifier CVE-2019-0024 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0024.

A persistent cross-site scripting (XSS) vulnerability in the Email Collectors menu of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.


Provide references for further information: Can you share references or external links related to CVE-2019-0024?


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0024?


Explain the CVE ID: What does the identifier CVE-2019-0025 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0025.

A persistent cross-site scripting (XSS) vulnerability in RADIUS configuration menu of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.


Provide references for further information: Can you share references or external links related to CVE-2019-0025?


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0025?


Explain the CVE ID: What does the identifier CVE-2019-0026 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0026.

A persistent cross-site scripting (XSS) vulnerability in the Zone configuration of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.


Provide references for further information: Can you share references or external links related to CVE-2019-0026?


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0026?


Explain the CVE ID: What does the identifier CVE-2019-0027 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0027.

A persistent cross-site scripting (XSS) vulnerability in the Snort Rules configuration of Juniper ATP may allow authenticated user to inject arbitrary script and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform administrative actions on the device. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.


Provide references for further information: Can you share references or external links related to CVE-2019-0027?


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0027?


Explain the CVE ID: What does the identifier CVE-2019-0028 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0028.

On Junos devices with the BGP graceful restart helper mode enabled or the BGP graceful restart mechanism enabled, a BGP session restart on a remote peer that has the graceful restart mechanism enabled may cause the local routing protocol daemon (RPD) process to crash and restart. By simulating a specific BGP session restart, an attacker can repeatedly crash the RPD process causing prolonged denial of service (DoS). Graceful restart helper mode for BGP is enabled by default. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to 16.1R7; 16.1X65 versions prior to 16.1X65-D48; 16.2 versions prior to 16.2R2-S8; 17.1 versions prior to 17.1R2-S7, 17.1R3; 17.2 versions prior to 17.2R1-S7, 17.2R3; 17.2X75 versions prior to 17.2X75-D92, 17.2X75-D102, 17.2X75-D110; 17.3 versions prior to 17.3R2-S2, 17.3R3; 17.4 versions prior to 17.4R1-S4, 17.4R2; 18.1 versions prior to 18.1R2. Junos OS releases prior to 16.1R1 are not affected.


Provide references for further information: Can you share references or external links related to CVE-2019-0028?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10932'}, {'name': '107892', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/107892'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0028?


Explain the CVE ID: What does the identifier CVE-2019-0029 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0029.

Juniper ATP Series Splunk credentials are logged in a file readable by authenticated local users. Using these credentials an attacker can access the Splunk server. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.


Provide references for further information: Can you share references or external links related to CVE-2019-0029?


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0029?


Explain the CVE ID: What does the identifier CVE-2019-0030 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0030.

Juniper ATP uses DES and a hardcoded salt for password hashing, allowing for trivial de-hashing of the password file contents. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.


Provide references for further information: Can you share references or external links related to CVE-2019-0030?


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0030?


Explain the CVE ID: What does the identifier CVE-2019-0031 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0031.

Specific IPv6 DHCP packets received by the jdhcpd daemon will cause a memory resource consumption issue to occur on a Junos OS device using the jdhcpd daemon configured to respond to IPv6 requests. Once started, memory consumption will eventually impact any IPv4 or IPv6 request serviced by the jdhcpd daemon, thus creating a Denial of Service (DoS) condition to clients requesting and not receiving IP addresses. Additionally, some clients which were previously holding IPv6 addresses will not have their IPv6 Identity Association (IA) address and network tables agreed upon by the jdhcpd daemon after the failover event occurs, which leads to more than one interface, and multiple IP addresses, being denied on the client. Affected releases are Juniper Networks Junos OS: 17.4 versions prior to 17.4R2; 18.1 versions prior to 18.1R2.


Provide references for further information: Can you share references or external links related to CVE-2019-0031?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10920'}, {'name': '107874', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/107874'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0031?


Explain the CVE ID: What does the identifier CVE-2019-0032 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0032.

A password management issue exists where the Organization authentication username and password were stored in plaintext in log files. A locally authenticated attacker who is able to access these stored plaintext credentials can use them to login to the Organization. Affected products are: Juniper Networks Service Insight versions from 15.1R1, prior to 18.1R1. Service Now versions from 15.1R1, prior to 18.1R1.


Provide references for further information: Can you share references or external links related to CVE-2019-0032?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10921'}, {'tags': ['x_refsource_MISC'], 'url': 'https://kb.juniper.net/KB27572'}, {'name': '107885', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/107885'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0032?


Explain the CVE ID: What does the identifier CVE-2019-0033 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0033.

A firewall bypass vulnerability in the proxy ARP service of Juniper Networks Junos OS allows an attacker to cause a high CPU condition leading to a Denial of Service (DoS). This issue affects only IPv4. Affected releases are Juniper Networks Junos OS: 12.1X46 versions above and including 12.1X46-D25 prior to 12.1X46-D71, 12.1X46-D73 on SRX Series; 12.3X48 versions prior to 12.3X48-D50 on SRX Series; 15.1X49 versions prior to 15.1X49-D75 on SRX Series.


Provide references for further information: Can you share references or external links related to CVE-2019-0033?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10922'}, {'name': '107882', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/107882'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0033?


Explain the CVE ID: What does the identifier CVE-2019-0034 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0034.


Provide references for further information: Can you share references or external links related to CVE-2019-0034?


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0034?


Explain the CVE ID: What does the identifier CVE-2019-0035 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0035.

When "set system ports console insecure" is enabled, root login is disallowed for Junos OS as expected. However, the root password can be changed using "set system root-authentication plain-text-password" on systems booted from an OAM (Operations, Administration, and Maintenance) volume, leading to a possible administrative bypass with physical access to the console. OAM volumes (e.g. flash drives) are typically instantiated as /dev/gpt/oam, or /oam for short. Password recovery, changing the root password from a console, should not have been allowed from an insecure console. Affected releases are Juniper Networks Junos OS: 15.1 versions prior to 15.1F6-S12, 15.1R7-S3; 15.1X49 versions prior to 15.1X49-D160; 15.1X53 versions prior to 15.1X53-D236, 15.1X53-D496, 15.1X53-D68; 16.1 versions prior to 16.1R3-S10, 16.1R6-S6, 16.1R7-S3; 16.1X65 versions prior to 16.1X65-D49; 16.2 versions prior to 16.2R2-S8; 17.1 versions prior to 17.1R2-S10, 17.1R3; 17.2 versions prior to 17.2R1-S8, 17.2R3-S1; 17.3 versions prior to 17.3R3-S3; 17.4 versions prior to 17.4R1-S6, 17.4R2-S2; 18.1 versions prior to 18.1R2-S4, 18.1R3-S3; 18.2 versions prior to 18.2R2; 18.2X75 versions prior to 18.2X75-D40; 18.3 versions prior to 18.3R1-S2. This issue does not affect Junos OS releases prior to 15.1.


Provide references for further information: Can you share references or external links related to CVE-2019-0035?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10924'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0035?


Explain the CVE ID: What does the identifier CVE-2019-0036 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0036.

When configuring a stateless firewall filter in Junos OS, terms named using the format "internal-n" (e.g. "internal-1", "internal-2", etc.) are silently ignored. No warning is issued during configuration, and the config is committed without error, but the filter criteria will match all packets leading to unexpected results. Affected releases are Juniper Networks Junos OS: All versions prior to and including 12.3; 14.1X53 versions prior to 14.1X53-D130, 14.1X53-D49; 15.1 versions prior to 15.1F6-S12, 15.1R7-S4; 15.1X49 versions prior to 15.1X49-D161, 15.1X49-D170; 15.1X53 versions prior to 15.1X53-D236, 15.1X53-D496, 15.1X53-D69; 16.1 versions prior to 16.1R7-S4, 16.1R7-S5; 16.2 versions prior to 16.2R2-S9; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R1-S8, 17.2R3-S1; 17.3 versions prior to 17.3R3-S4; 17.4 versions prior to 17.4R1-S7, 17.4R2-S3; 18.1 versions prior to 18.1R2-S4, 18.1R3-S4; 18.2 versions prior to 18.2R1-S5, 18.2R2-S1; 18.2X75 versions prior to 18.2X75-D40; 18.3 versions prior to 18.3R1-S3; 18.4 versions prior to 18.4R1-S1, 18.4R1-S2.


Provide references for further information: Can you share references or external links related to CVE-2019-0036?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10925'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0036?


Explain the CVE ID: What does the identifier CVE-2019-0037 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0037.

In a Dynamic Host Configuration Protocol version 6 (DHCPv6) environment, the jdhcpd daemon may crash and restart upon receipt of certain DHCPv6 solicit messages received from a DHCPv6 client. By continuously sending the same crafted packet, an attacker can repeatedly crash the jdhcpd process causing a sustained Denial of Service (DoS) to both IPv4 and IPv6 clients. Affected releases are Juniper Networks Junos OS: 15.1 versions prior to 15.1F6-S12, 15.1R7-S3; 15.1X49 versions prior to 15.1X49-D171, 15.1X49-D180; 15.1X53 versions prior to 15.1X53-D236, 15.1X53-D496; 16.1 versions prior to 16.1R3-S10, 16.1R7-S4; 16.2 versions prior to 16.2R2-S8; 17.1 versions prior to 17.1R2-S10, 17.1R3; 17.2 versions prior to 17.2R1-S8, 17.2R3-S1; 17.3 versions prior to 17.3R3-S3; 17.4 versions prior to 17.4R1-S6, 17.4R2-S3; 18.1 versions prior to 18.1R2-S4, 18.1R3-S2; 18.2 versions prior to 18.2R2; 18.2X75 versions prior to 18.2X75-D30; 18.3 versions prior to 18.3R1-S2. This issue does not affect Junos OS releases prior to 15.1.


Provide references for further information: Can you share references or external links related to CVE-2019-0037?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10926'}, {'name': '107894', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/107894'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0037?


Explain the CVE ID: What does the identifier CVE-2019-0038 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0038.

Crafted packets destined to the management interface (fxp0) of an SRX340 or SRX345 services gateway may create a denial of service (DoS) condition due to buffer space exhaustion. This issue only affects the SRX340 and SRX345 services gateways. No other products or platforms are affected by this vulnerability. Affected releases are Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D160 on SRX340/SRX345; 17.3 on SRX340/SRX345; 17.4 versions prior to 17.4R2-S3, 17.4R3 on SRX340/SRX345; 18.1 versions prior to 18.1R3-S1 on SRX340/SRX345; 18.2 versions prior to 18.2R2 on SRX340/SRX345; 18.3 versions prior to 18.3R1-S2, 18.3R2 on SRX340/SRX345. This issue does not affect Junos OS releases prior to 15.1X49 on any platform.


Provide references for further information: Can you share references or external links related to CVE-2019-0038?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10927'}, {'name': '107873', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/107873'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0038?


Explain the CVE ID: What does the identifier CVE-2019-0039 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0039.

If REST API is enabled, the Junos OS login credentials are vulnerable to brute force attacks. The high default connection limit of the REST API may allow an attacker to brute-force passwords using advanced scripting techniques. Additionally, administrators who do not enforce a strong password policy can increase the likelihood of success from brute force attacks. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D49; 15.1 versions prior to 15.1F6-S12, 15.1R7-S3; 15.1X49 versions prior to 15.1X49-D160; 15.1X53 versions prior to 15.1X53-D236, 15.1X53-D495, 15.1X53-D591, 15.1X53-D69; 16.1 versions prior to 16.1R3-S10, 16.1R4-S12, 16.1R6-S6, 16.1R7-S3; 16.1X65 versions prior to 16.1X65-D49; 16.2 versions prior to 16.2R2-S7; 17.1 versions prior to 17.1R2-S10, 17.1R3; 17.2 versions prior to 17.2R1-S8, 17.2R3-S1; 17.3 versions prior to 17.3R3-S2; 17.4 versions prior to 17.4R1-S6, 17.4R2-S2; 18.1 versions prior to 18.1R2-S4, 18.1R3-S1; 18.2 versions prior to 18.2R1-S5; 18.2X75 versions prior to 18.2X75-D30; 18.3 versions prior to 18.3R1-S1.


Provide references for further information: Can you share references or external links related to CVE-2019-0039?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10928'}, {'name': '107899', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/107899'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0039?


Explain the CVE ID: What does the identifier CVE-2019-0040 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0040.

On Junos OS, rpcbind should only be listening to port 111 on the internal routing instance (IRI). External packets destined to port 111 should be dropped. Due to an information leak vulnerability, responses were being generated from the source address of the management interface (e.g. fxp0) thus disclosing internal addressing and existence of the management interface itself. A high rate of crafted packets destined to port 111 may also lead to a partial Denial of Service (DoS). Note: Systems with fxp0 disabled or unconfigured are not vulnerable to this issue. This issue only affects Junos OS releases based on FreeBSD 10 or higher (typically Junos OS 15.1+). Administrators can confirm whether systems are running a version of Junos OS based on FreeBSD 10 or higher by typing: user@junos> show version | match kernel JUNOS OS Kernel 64-bit [20181214.223829_fbsd-builder_stable_10] Affected releases are Juniper Networks Junos OS: 15.1 versions prior to 15.1F6-S12, 15.1R7-S4; 15.1X53 versions prior to 15.1X53-D236; 16.1 versions prior to 16.1R7-S1; 16.2 versions prior to 16.2R2-S9; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R1-S8; 17.3 versions prior to 17.3R2; 17.4 versions prior to 17.4R1-S1, 17.4R1-S7, 17.4R2. This issue does not affect Junos OS releases prior to 15.1.


Provide references for further information: Can you share references or external links related to CVE-2019-0040?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10929'}, {'name': '107902', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/107902'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0040?


Explain the CVE ID: What does the identifier CVE-2019-0041 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0041.

On EX4300-MP Series devices with any lo0 filters applied, transit network traffic may reach the control plane via loopback interface (lo0). The device may fail to forward such traffic. This issue affects Juniper Networks Junos OS 18.2 versions prior to 18.2R1-S2, 18.2R2 on EX4300-MP Series. This issue does not affect any other EX series devices.


Provide references for further information: Can you share references or external links related to CVE-2019-0041?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10933'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0041?


Explain the CVE ID: What does the identifier CVE-2019-0042 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0042.

Juniper Identity Management Service (JIMS) for Windows versions prior to 1.1.4 may send an incorrect message to associated SRX services gateways. This may allow an attacker with physical access to an existing domain connected Windows system to bypass SRX firewall policies, or trigger a Denial of Service (DoS) condition for the network.


Provide references for further information: Can you share references or external links related to CVE-2019-0042?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10934'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0042?


Explain the CVE ID: What does the identifier CVE-2019-0043 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0043.

In MPLS environments, receipt of a specific SNMP packet may cause the routing protocol daemon (RPD) process to crash and restart. By continuously sending a specially crafted SNMP packet, an attacker can repetitively crash the RPD process causing prolonged denial of service. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS : 12.1X46 versions prior to 12.1X46-D77 on SRX Series; 12.3 versions prior to 12.3R12-S10; 12.3X48 versions prior to 12.3X48-D75 on SRX Series; 14.1X53 versions prior to 14.1X53-D48 on EX/QFX series; 15.1 versions prior to 15.1R4-S9, 15.1R7-S2; 15.1F6 versions prior to 15.1F6-S11; 15.1X49 versions prior to 15.1X49-D141, 15.1X49-D144, 15.1X49-D150 on SRX Series; 15.1X53 versions prior to 15.1X53-D234 on QFX5200/QFX5110 Series; 15.1X53 versions prior to 15.1X53-D68 on QFX10K Series; 15.1X53 versions prior to 15.1X53-D471, 15.1X53-D490 on NFX Series; 15.1X53 versions prior to 15.1X53-D590 on EX2300/EX3400 Series; 15.1X54 on ACX Series; 16.1 versions prior to 16.1R3-S10, 16.1R4-S11, 16.1R6-S5, 16.1R7; 16.1X65 versions prior to 16.1X65-D48; 16.2 versions prior to 16.2R2-S6; 17.1 versions prior to 17.1R2-S8, 17.1R3; 17.2 versions prior to 17.2R1-S7, 17.2R3; 17.2X75 versions prior to 17.2X75-D92, 17.2X75-D102, 17.2X75-D110; 17.3 versions prior to 17.3R3; 17.4 versions prior to 17.4R1-S4, 17.4R2; 18.1 versions prior to 18.1R1-S1, 18.1R2-S1, 18.1R3; 18.2X75 versions prior to 18.2X75-D10.


Provide references for further information: Can you share references or external links related to CVE-2019-0043?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10935'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0043?


Explain the CVE ID: What does the identifier CVE-2019-0044 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0044.

Receipt of a specific packet on the out-of-band management interface fxp0 may cause the system to crash and restart (vmcore). By continuously sending a specially crafted packet to the fxp0 interface, an attacker can repetitively crash the rpd process causing prolonged Denial of Service (DoS). Affected releases are Juniper Networks SRX5000 Series: 12.1X46 versions prior to 12.1X46-D82; 12.3X48 versions prior to 12.3X48-D80; 15.1X49 versions prior to 15.1X49-D160.


Provide references for further information: Can you share references or external links related to CVE-2019-0044?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10936'}, {'name': '107872', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/107872'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0044?


Explain the CVE ID: What does the identifier CVE-2019-0046 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0046.

A vulnerability in the pfe-chassisd Chassis Manager (CMLC) daemon of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the EX4300 when specific valid broadcast packets create a broadcast storm condition when received on the me0 interface of the EX4300 Series device. A reboot of the device is required to restore service. Continued receipt of these valid broadcast packets will create a sustained Denial of Service (DoS) against the device. Affected releases are Juniper Networks Junos OS: 16.1 versions above and including 16.1R1 prior to 16.1R7-S5; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R3-S2; 17.4 versions prior to 17.4R2; 18.1 versions prior to 18.1R3; 18.2 versions prior to 18.2R2.


Provide references for further information: Can you share references or external links related to CVE-2019-0046?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10938'}, {'name': '109272', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/109272'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0046?


Explain the CVE ID: What does the identifier CVE-2019-0047 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0047.

A persistent Cross-Site Scripting (XSS) vulnerability in Junos OS J-Web interface may allow remote unauthenticated attackers to perform administrative actions on the Junos device. Successful exploitation requires a Junos administrator to first perform certain diagnostic actions on J-Web. This issue affects: Juniper Networks Junos OS 12.1X46 versions prior to 12.1X46-D86; 12.3 versions prior to 12.3R12-S13; 12.3X48 versions prior to 12.3X48-D80; 14.1X53 versions prior to 14.1X53-D51; 15.1 versions prior to 15.1F6-S13, 15.1R7-S4; 15.1X49 versions prior to 15.1X49-D171, 15.1X49-D180; 15.1X53 versions prior to 15.1X53-D497, 15.1X53-D69; 16.1 versions prior to 16.1R7-S5; 16.2 versions prior to 16.2R2-S9; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R1-S8, 17.2R2-S7, 17.2R3-S1; 17.3 versions prior to 17.3R3-S6; 17.4 versions prior to 17.4R1-S7, 17.4R2-S4, 17.4R3; 18.1 versions prior to 18.1R3-S5; 18.2 versions prior to 18.2R1-S5, 18.2R2-S3, 18.2R3; 18.3 versions prior to 18.3R1-S3, 18.3R2, 18.3R3; 18.4 versions prior to 18.4R1-S2, 18.4R2.


Provide references for further information: Can you share references or external links related to CVE-2019-0047?

{'tags': ['x_refsource_MISC'], 'url': 'https://kb.juniper.net/JSA10970'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0047?


Explain the CVE ID: What does the identifier CVE-2019-0048 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0048.

On EX4300 Series switches with TCAM optimization enabled, incoming multicast traffic matches an implicit loopback filter rule first, since it has high priority. This rule is meant for reserved multicast addresses 224.0.0.x, but incorrectly matches on 224.x.x.x. Due to this bug, when a firewall filter is applied on the loopback interface, other firewall filters might stop working for multicast traffic. The command 'show firewall filter' can be used to confirm whether the filter is working. This issue only affects the EX4300 switch. No other products or platforms are affected by this vulnerability. This issue affects: Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D51, 14.1X53-D115 on EX4300 Series; 17.1 versions prior to 17.1R3 on EX4300 Series; 17.2 versions prior to 17.2R3-S2 on EX4300 Series; 17.3 versions prior to 17.3R3-S3 on EX4300 Series; 17.4 versions prior to 17.4R2-S5, 17.4R3 on EX4300 Series; 18.1 versions prior to 18.1R3-S1 on EX4300 Series; 18.2 versions prior to 18.2R2 on EX4300 Series; 18.3 versions prior to 18.3R2 on EX4300 Series.


Provide references for further information: Can you share references or external links related to CVE-2019-0048?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10942'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0048?


Explain the CVE ID: What does the identifier CVE-2019-0049 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0049.

On Junos devices with the BGP graceful restart helper mode enabled or the BGP graceful restart mechanism enabled, a certain sequence of BGP session restart on a remote peer that has the graceful restart mechanism enabled may cause the local routing protocol daemon (RPD) process to crash and restart. Repeated crashes of the RPD process can cause prolonged Denial of Service (DoS). Graceful restart helper mode for BGP is enabled by default. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S3; 16.2 versions prior to 16.2R2-S9; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3; 17.2X75 versions prior to 17.2X75-D105; 17.3 versions prior to 17.3R3-S2; 17.4 versions prior to 17.4R1-S7, 17.4R2-S2, 17.4R3; 18.1 versions prior to 18.1R3-S2; 18.2 versions prior to 18.2R2; 18.2X75 versions prior to 18.2X75-D12, 18.2X75-D30; 18.3 versions prior to 18.3R1-S4, 18.3R2. Junos OS releases prior to 16.1R1 are not affected.


Provide references for further information: Can you share references or external links related to CVE-2019-0049?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10943'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0049?


Explain the CVE ID: What does the identifier CVE-2019-0050 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0050.

Under certain heavy traffic conditions srxpfe process can crash and result in a denial of service condition for the SRX1500 device. Repeated crashes of the srxpfe can result in an extended denial of service condition. The SRX device may fail to forward traffic when this condition occurs. Affected releases are Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D170 on SRX1500; 17.3 versions prior to 17.3R3-S7 on SRX1500; 17.4 versions prior to 17.4R2-S8, 17.4R3 on SRX1500; 18.1 versions prior to 18.1R3-S8 on SRX1500; 18.2 versions prior to 18.2R3 on SRX1500; 18.3 versions prior to 18.3R2 on SRX1500; 18.4 versions prior to 18.4R2 on SRX1500.


Provide references for further information: Can you share references or external links related to CVE-2019-0050?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10972'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0050?


Explain the CVE ID: What does the identifier CVE-2019-0051 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0051.

SSL-Proxy feature on SRX devices fails to handle a hardware resource limitation which can be exploited by remote SSL/TLS servers to crash the flowd daemon. Repeated crashes of the flowd daemon can result in an extended denial of service condition. For this issue to occur, clients protected by the SRX device must initiate a connection to the malicious server. This issue affects: Juniper Networks Junos OS on SRX5000 Series: 12.3X48 versions prior to 12.3X48-D85; 15.1X49 versions prior to 15.1X49-D180; 17.3 versions prior to 17.3R3-S7; 17.4 versions prior to 17.4R2-S6, 17.4R3; 18.1 versions prior to 18.1R3-S8; 18.2 versions prior to 18.2R3; 18.3 versions prior to 18.3R2; 18.4 versions prior to 18.4R2; 19.1 versions prior to 19.1R2.


Provide references for further information: Can you share references or external links related to CVE-2019-0051?

{'tags': ['x_refsource_MISC'], 'url': 'https://kb.juniper.net/JSA10973'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0051?


Explain the CVE ID: What does the identifier CVE-2019-0052 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0052.

The srxpfe process may crash on SRX Series services gateways when the UTM module processes a specific fragmented HTTP packet. The packet is misinterpreted as a regular TCP packet which causes the processor to crash. This issue affects all SRX Series platforms that support URL-Filtering and have web-filtering enabled. Affected releases are Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D85 on SRX Series; 15.1X49 versions prior to 15.1X49-D181, 15.1X49-D190 on SRX Series; 17.3 versions on SRX Series; 17.4 versions prior to 17.4R1-S8, 17.4R2-S5, 17.4R3 on SRX Series; 18.1 versions prior to 18.1R3-S6 on SRX Series; 18.2 versions prior to 18.2R2-S1, 18.2R3 on SRX Series; 18.3 versions prior to 18.3R1-S2, 18.3R2 on SRX Series; 18.4 versions prior to 18.4R1-S1, 18.4R2 on SRX Series.


Provide references for further information: Can you share references or external links related to CVE-2019-0052?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.juniper.net/JSA10946'}, {'name': '109145', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/109145'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0052?


Explain the CVE ID: What does the identifier CVE-2019-0053 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0053.

Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based buffer overflows, which can be exploited to bypass veriexec restrictions on Junos OS. A stack-based overflow is present in the handling of environment variables when connecting via the telnet client to remote telnet servers. This issue only affects the telnet client — accessible from the CLI or shell — in Junos OS. Inbound telnet services are not affected by this issue. This issue affects: Juniper Networks Junos OS: 12.3 versions prior to 12.3R12-S13; 12.3X48 versions prior to 12.3X48-D80; 14.1X53 versions prior to 14.1X53-D130, 14.1X53-D49; 15.1 versions prior to 15.1F6-S12, 15.1R7-S4; 15.1X49 versions prior to 15.1X49-D170; 15.1X53 versions prior to 15.1X53-D237, 15.1X53-D496, 15.1X53-D591, 15.1X53-D69; 16.1 versions prior to 16.1R3-S11, 16.1R7-S4; 16.2 versions prior to 16.2R2-S9; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R1-S8, 17.2R2-S7, 17.2R3-S1; 17.3 versions prior to 17.3R3-S4; 17.4 versions prior to 17.4R1-S6, 17.4R2-S3, 17.4R3; 18.1 versions prior to 18.1R2-S4, 18.1R3-S3; 18.2 versions prior to 18.2R1-S5, 18.2R2-S2, 18.2R3; 18.2X75 versions prior to 18.2X75-D40; 18.3 versions prior to 18.3R1-S3, 18.3R2; 18.4 versions prior to 18.4R1-S2, 18.4R2.


Provide references for further information: Can you share references or external links related to CVE-2019-0053?

{'url': 'https://kb.juniper.net/JSA10947'}, {'url': 'https://www.exploit-db.com/exploits/45982'}, {'name': 'FreeBSD-SA-19:12', 'tags': ['vendor-advisory'], 'url': 'https://security.FreeBSD.org/advisories/FreeBSD-SA-19:12.telnet.asc'}, {'name': '20190724 FreeBSD Security Advisory FreeBSD-SA-19:12.telnet', 'tags': ['mailing-list'], 'url': 'https://seclists.org/bugtraq/2019/Jul/45'}, {'url': 'http://packetstormsecurity.com/files/153746/FreeBSD-Security-Advisory-FreeBSD-SA-19-12.telnet.html'}, {'name': '[debian-lts-announce] 20221125 [SECURITY] [DLA 3205-1] inetutils security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/11/msg00033.html'}, {'name': '[debian-lts-announce] 20231008 [SECURITY] [DLA 3611-1] inetutils security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/10/msg00013.html'}, {'url': 'https://lists.debian.org/debian-lts-announce/2023/10/msg00013.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0053?


Explain the CVE ID: What does the identifier CVE-2019-0054 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0054.

An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos OS allows an attacker to perform Man-in-the-Middle (MitM) attacks which may compromise the integrity and confidentiality of the device. This issue affects: Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D120 on SRX Series devices. No other versions of Junos OS are affected.


Provide references for further information: Can you share references or external links related to CVE-2019-0054?

{'tags': ['x_refsource_MISC'], 'url': 'https://kb.juniper.net/JSA10952'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-application-identification-overview.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0054?


Explain the CVE ID: What does the identifier CVE-2019-0055 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0055.

A vulnerability in the SIP ALG packet processing service of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending specific types of valid SIP traffic to the device. In this case, the flowd process crashes and generates a core dump while processing SIP ALG traffic. Continued receipt of these valid SIP packets will result in a sustained Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D61, 12.3X48-D65 on SRX Series; 15.1X49 versions prior to 15.1X49-D130 on SRX Series; 17.3 versions prior to 17.3R3 on SRX Series; 17.4 versions prior to 17.4R2 on SRX Series.


Provide references for further information: Can you share references or external links related to CVE-2019-0055?

{'tags': ['x_refsource_MISC'], 'url': 'https://kb.juniper.net/JSA10953'}, {'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-sip-alg.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0055?


Explain the CVE ID: What does the identifier CVE-2019-0056 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0056.

This issue only affects devices with three (3) or more MPC10's installed in a single chassis with OSPF enabled and configured on the device. An Insufficient Resource Pool weakness allows an attacker to cause the device's Open Shortest Path First (OSPF) states to transition to Down, resulting in a Denial of Service (DoS) attack. This attack requires a relatively large number of specific Internet Mixed (IMIXed) types of genuine and valid IPv6 packets to be transferred by the attacker in a relatively short period of time, across three or more PFE's on the device at the same time. Continued receipt of the traffic sent by the attacker will continue to cause OSPF to remain in the Down starting state, or flap between other states and then again to Down, causing a persistent Denial of Service. This attack will affect all IPv4, and IPv6 traffic served by the OSPF routes once the OSPF states transition to Down. This issue affects: Juniper Networks Junos OS on MX480, MX960, MX2008, MX2010, MX2020: 18.1 versions prior to 18.1R2-S4, 18.1R3-S5; 18.1X75 version 18.1X75-D10 and later versions; 18.2 versions prior to 18.2R1-S5, 18.2R2-S3, 18.2R3; 18.2X75 versions prior to 18.2X75-D50; 18.3 versions prior to 18.3R1-S4, 18.3R2, 18.3R3; 18.4 versions prior to 18.4R1-S2, 18.4R2.


Provide references for further information: Can you share references or external links related to CVE-2019-0056?

{'tags': ['x_refsource_MISC'], 'url': 'https://kb.juniper.net/JSA10954'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0056?


Explain the CVE ID: What does the identifier CVE-2019-0057 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0057.

An improper authorization weakness in Juniper Networks Junos OS allows a local authenticated attacker to bypass regular security controls to access the Junos Device Manager (JDM) application and take control of the system. This issue affects: Juniper Networks Junos OS versions prior to 18.2R1, 18.2X75-D5.


Provide references for further information: Can you share references or external links related to CVE-2019-0057?

{'tags': ['x_refsource_MISC'], 'url': 'https://kb.juniper.net/JSA10955'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0057?


Explain the CVE ID: What does the identifier CVE-2019-0058 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0058.

A vulnerability in the Veriexec subsystem of Juniper Networks Junos OS allowing an attacker to fully compromise the host system. A local authenticated user can elevate privileges to gain full control of the system even if they are specifically denied access to perform certain actions. This issue affects: Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D80 on SRX Series.


Provide references for further information: Can you share references or external links related to CVE-2019-0058?

{'tags': ['x_refsource_MISC'], 'url': 'https://kb.juniper.net/JSA10956'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0058?


Explain the CVE ID: What does the identifier CVE-2019-0059 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0059.

A memory leak vulnerability in the of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending specific commands from a peered BGP host and having those BGP states delivered to the vulnerable device. This issue affects: Juniper Networks Junos OS: 18.1 versions prior to 18.1R2-S4, 18.1R3-S1; 18.1X75 all versions. Versions before 18.1R1 are not affected.


Provide references for further information: Can you share references or external links related to CVE-2019-0059?

{'tags': ['x_refsource_MISC'], 'url': 'https://kb.juniper.net/JSA10957'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2019-0059?


Explain the CVE ID: What does the identifier CVE-2019-0060 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2019-0060.

The flowd process, responsible for forwarding traffic in SRX Series services gateways, may crash and restart when processing specific transit IP packets through an IPSec tunnel. Continued processing of these packets may result in an extended Denial of Service (DoS) condition. This issue only occurs when IPSec tunnels are configured. Systems without IPSec tunnel configurations are not vulnerable to this issue. This issue affects Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D171, 15.1X49-D180 on SRX Series; 18.2 versions 18.2R2-S1 and later, prior to 18.2R3 on SRX Series; 18.4 versions prior to 18.4R2 on SRX Series.