CVE-2019-0031

Specific IPv6 DHCP packets received by the jdhcpd daemon will cause a memory resource consumption issue to occur on a Junos OS device using the jdhcpd daemon configured to respond to IPv6 requests. Once started, memory consumption will eventually impact any IPv4 or IPv6 request serviced by the jdhcpd daemon, thus creating a Denial of Service (DoS) condition to clients requesting and not receiving IP addresses. Additionally, some clients which were previously holding IPv6 addresses will not have their IPv6 Identity Association (IA) address and network tables agreed upon by the jdhcpd daemon after the failover event occurs, which leads to more than one interface, and multiple IP addresses, being denied on the client. Affected releases are Juniper Networks Junos OS: 17.4 versions prior to 17.4R2; 18.1 versions prior to 18.1R2.

• CWE-400
• CWE-770

• http://www.securityfocus.com/bid/107874Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10920Vendor Advisory
• http://www.securityfocus.com/bid/107874Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10920Vendor Advisory

Published

Apr 10, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-0025A persistent cross-site scripting (XSS) vulnerability in RAD…5.4
• CVE-2019-0026A persistent cross-site scripting (XSS) vulnerability in the…5.4
• CVE-2019-0027A persistent cross-site scripting (XSS) vulnerability in the…5.4
• CVE-2019-0028On Junos devices with the BGP graceful restart helper mode e…7.5
• CVE-2019-0029Juniper ATP Series Splunk credentials are logged in a file r…8.8
• CVE-2019-0030Juniper ATP uses DES and a hardcoded salt for password hashi…7.2
• CVE-2019-0032A password management issue exists where the Organization au…7.8
• CVE-2019-0033A firewall bypass vulnerability in the proxy ARP service of …7.5
• CVE-2019-0034Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: T…
• CVE-2019-0035When "set system ports console insecure" is enabled, root lo…6.8
• CVE-2019-0036When configuring a stateless firewall filter in Junos OS, te…9.8
• CVE-2019-0037In a Dynamic Host Configuration Protocol version 6 (DHCPv6) …7.5