CVE-2019-0005

On EX2300, EX3400, EX4600, QFX3K and QFX5K series, firewall filter configuration cannot perform packet matching on any IPv6 extension headers. This issue may allow IPv6 packets that should have been blocked to be forwarded. IPv4 packet filtering is unaffected by this vulnerability. Affected releases are Juniper Networks Junos OS on EX and QFX series;: 14.1X53 versions prior to 14.1X53-D47; 15.1 versions prior to 15.1R7; 15.1X53 versions prior to 15.1X53-D234 on QFX5200/QFX5110 series; 15.1X53 versions prior to 15.1X53-D591 on EX2300/EX3400 series; 16.1 versions prior to 16.1R7; 17.1 versions prior to 17.1R2-S10, 17.1R3; 17.2 versions prior to 17.2R3; 17.3 versions prior to 17.3R3; 17.4 versions prior to 17.4R2; 18.1 versions prior to 18.1R2.

• CWE-770

• http://www.securityfocus.com/bid/106665Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10905Vendor Advisory
• http://www.securityfocus.com/bid/106665Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10905Vendor Advisory

Published

Jan 15, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-0001Receipt of a malformed packet on MX Series devices with dyna…7.5
• CVE-2019-0002On EX2300 and EX3400 series, stateless firewall filter confi…9.8
• CVE-2019-0003When a specific BGP flowspec configuration is enabled and up…5.9
• CVE-2019-0004On Juniper ATP, the API key and the device key are logged in…5.5
• CVE-2019-0006A certain crafted HTTP packet can trigger an uninitialized f…9.8
• CVE-2019-0007The vMX Series software uses a predictable IP ID Sequence Nu…9.3
• CVE-2019-0008A certain sequence of valid BGP or IPv6 BFD packets may trig…9.8
• CVE-2019-0009On EX2300 and EX3400 series, high disk I/O operations may di…5.5
• CVE-2019-0010An SRX Series Service Gateway configured for Unified Threat …7.5
• CVE-2019-0011The Junos OS kernel crashes after processing a specific inco…6.5