CVE-2019-0043

In MPLS environments, receipt of a specific SNMP packet may cause the routing protocol daemon (RPD) process to crash and restart. By continuously sending a specially crafted SNMP packet, an attacker can repetitively crash the RPD process causing prolonged denial of service. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS : 12.1X46 versions prior to 12.1X46-D77 on SRX Series; 12.3 versions prior to 12.3R12-S10; 12.3X48 versions prior to 12.3X48-D75 on SRX Series; 14.1X53 versions prior to 14.1X53-D48 on EX/QFX series; 15.1 versions prior to 15.1R4-S9, 15.1R7-S2; 15.1F6 versions prior to 15.1F6-S11; 15.1X49 versions prior to 15.1X49-D141, 15.1X49-D144, 15.1X49-D150 on SRX Series; 15.1X53 versions prior to 15.1X53-D234 on QFX5200/QFX5110 Series; 15.1X53 versions prior to 15.1X53-D68 on QFX10K Series; 15.1X53 versions prior to 15.1X53-D471, 15.1X53-D490 on NFX Series; 15.1X53 versions prior to 15.1X53-D590 on EX2300/EX3400 Series; 15.1X54 on ACX Series; 16.1 versions prior to 16.1R3-S10, 16.1R4-S11, 16.1R6-S5, 16.1R7; 16.1X65 versions prior to 16.1X65-D48; 16.2 versions prior to 16.2R2-S6; 17.1 versions prior to 17.1R2-S8, 17.1R3; 17.2 versions prior to 17.2R1-S7, 17.2R3; 17.2X75 versions prior to 17.2X75-D92, 17.2X75-D102, 17.2X75-D110; 17.3 versions prior to 17.3R3; 17.4 versions prior to 17.4R1-S4, 17.4R2; 18.1 versions prior to 18.1R1-S1, 18.1R2-S1, 18.1R3; 18.2X75 versions prior to 18.2X75-D10.

• CWE-404

• https://kb.juniper.net/JSA10935Vendor Advisory
• https://kb.juniper.net/JSA10935Vendor Advisory

Published

Apr 10, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-0037In a Dynamic Host Configuration Protocol version 6 (DHCPv6) …7.5
• CVE-2019-0038Crafted packets destined to the management interface (fxp0) …6.5
• CVE-2019-0039If REST API is enabled, the Junos OS login credentials are v…8.1
• CVE-2019-0040On Junos OS, rpcbind should only be listening to port 111 on…9.1
• CVE-2019-0041On EX4300-MP Series devices with any lo0 filters applied, tr…8.6
• CVE-2019-0042Juniper Identity Management Service (JIMS) for Windows versi…4.2
• CVE-2019-0044Receipt of a specific packet on the out-of-band management i…7.5
• CVE-2019-0046A vulnerability in the pfe-chassisd Chassis Manager (CMLC) d…6.5
• CVE-2019-0047A persistent Cross-Site Scripting (XSS) vulnerability in Jun…8.8
• CVE-2019-0048On EX4300 Series switches with TCAM optimization enabled, in…5.8
• CVE-2019-0049On Junos devices with the BGP graceful restart helper mode e…7.5
• CVE-2019-0050Under certain heavy traffic conditions srxpfe process can cr…7.5