CVE-2019-0037 describes a Denial of Service (DoS) vulnerability in Juniper Networks Junos OS, affecting various versions prior to 15.1F6-S12 and later. The jdhcpd daemon, responsible for DHCPv6 services, can crash and restart when receiving specially crafted DHCPv6 solicit messages from a client. This issue allows an unauthenticated attacker to repeatedly crash the daemon, leading to a sustained DoS for both IPv4 and IPv6 clients. The vulnerability has a CVSSv3.1 score of 7.5 (High), indicating a significant impact. The attack vector is network-based (AV:N) with low attack complexity (AC:L), requiring no privileges (PR:N) or user interaction (UI:N), and resulting in high availability impact (A:H). Currently, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public awareness or attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
15.1CPE matchmatch criteria | cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:* | ||
15.1CPE matchmatch criteria | cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:* | ||
15.1CPE matchmatch criteria | cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:* | ||
15.1CPE matchmatch criteria | cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:* | ||
15.1CPE matchmatch criteria | cpe:2.3:o:juniper:junos:15.1:r5:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.