CVE-2017-10619

When Express Path (formerly known as service offloading) is configured on Juniper Networks SRX1400, SRX3400, SRX3600, SRX5400, SRX5600, SRX5800 in high availability cluster configuration mode, certain multicast packets might cause the flowd process to crash, halting or interrupting traffic from flowing through the device and triggering RG1+ (data-plane) fail-over to the secondary node. Repeated crashes of the flowd process may constitute an extended denial of service condition. This service is not enabled by default and is only supported in high-end SRX platforms. Affected releases are Juniper Networks Junos OS 12.3X48 prior to 12.3X48-D45, 15.1X49 prior to 15.1X49-D80 on SRX1400, SRX3400, SRX3600, SRX5400, SRX5600, SRX5800.

• https://kb.juniper.net/JSA10821Vendor Advisory
• https://kb.juniper.net/JSA10821Vendor Advisory

Published

Oct 13, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-10613A vulnerability in a specific loopback filter action command…5.5
• CVE-2017-10614A vulnerability in telnetd service on Junos OS allows a remo…5.3
• CVE-2017-10615A vulnerability in the pluggable authentication module (PAM)…9.8
• CVE-2017-10616The ifmap service that comes bundled with Juniper Networks C…5.3
• CVE-2017-10617The ifmap service that comes bundled with Contrail has an XM…5
• CVE-2017-10618When the 'bgp-error-tolerance' feature â€" designe…5.9
• CVE-2017-1062Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-10620Juniper Networks Junos OS on SRX series devices do not verif…7.4
• CVE-2017-10621A denial of service vulnerability in telnetd service on Juni…5.3
• CVE-2017-10622An authentication bypass vulnerability in Juniper Networks J…9.8
• CVE-2017-10623Lack of authentication and authorization of cluster messages…7.1
• CVE-2017-10624Insufficient verification of node certificates in Juniper Ne…7.5