CVE-2019-0028

On Junos devices with the BGP graceful restart helper mode enabled or the BGP graceful restart mechanism enabled, a BGP session restart on a remote peer that has the graceful restart mechanism enabled may cause the local routing protocol daemon (RPD) process to crash and restart. By simulating a specific BGP session restart, an attacker can repeatedly crash the RPD process causing prolonged denial of service (DoS). Graceful restart helper mode for BGP is enabled by default. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to 16.1R7; 16.1X65 versions prior to 16.1X65-D48; 16.2 versions prior to 16.2R2-S8; 17.1 versions prior to 17.1R2-S7, 17.1R3; 17.2 versions prior to 17.2R1-S7, 17.2R3; 17.2X75 versions prior to 17.2X75-D92, 17.2X75-D102, 17.2X75-D110; 17.3 versions prior to 17.3R2-S2, 17.3R3; 17.4 versions prior to 17.4R1-S4, 17.4R2; 18.1 versions prior to 18.1R2. Junos OS releases prior to 16.1R1 are not affected.

• CWE-404

• http://www.securityfocus.com/bid/107892Broken Link
• https://kb.juniper.net/JSA10932Mitigation, Vendor Advisory
• http://www.securityfocus.com/bid/107892Broken Link
• https://kb.juniper.net/JSA10932Mitigation, Vendor Advisory

Published

Apr 10, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-0022Juniper ATP ships with hard coded credentials in the Cyphort…10
• CVE-2019-0023A persistent cross-site scripting (XSS) vulnerability in the…5.4
• CVE-2019-0024A persistent cross-site scripting (XSS) vulnerability in the…5.4
• CVE-2019-0025A persistent cross-site scripting (XSS) vulnerability in RAD…5.4
• CVE-2019-0026A persistent cross-site scripting (XSS) vulnerability in the…5.4
• CVE-2019-0027A persistent cross-site scripting (XSS) vulnerability in the…5.4
• CVE-2019-0029Juniper ATP Series Splunk credentials are logged in a file r…8.8
• CVE-2019-0030Juniper ATP uses DES and a hardcoded salt for password hashi…7.2
• CVE-2019-0031Specific IPv6 DHCP packets received by the jdhcpd daemon wil…7.5
• CVE-2019-0032A password management issue exists where the Organization au…7.8
• CVE-2019-0033A firewall bypass vulnerability in the proxy ARP service of …7.5
• CVE-2019-0034Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: T…