CVE-2019-0050
Last modified
CVE-2019-0050 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Under certain heavy traffic conditions srxpfe process can crash and result in a denial of service condition for the SRX1500 device. Repeated crashes of the srxpfe can result in an extended denial of service condition. EPSS estimates a 1.28% chance of exploitation in the next 30 days.
Description
Under certain heavy traffic conditions srxpfe process can crash and result in a denial of service condition for the SRX1500 device. Repeated crashes of the srxpfe can result in an extended denial of service condition. The SRX device may fail to forward traffic when this condition occurs. Affected releases are Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D170 on SRX1500; 17.3 versions prior to 17.3R3-S7 on SRX1500; 17.4 versions prior to 17.4R2-S8, 17.4R3 on SRX1500; 18.1 versions prior to 18.1R3-S8 on SRX1500; 18.2 versions prior to 18.2R3 on SRX1500; 18.3 versions prior to 18.3R2 on SRX1500; 18.4 versions prior to 18.4R2 on SRX1500.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Juniper | Junos | 15.1x49 | D100 |
| Juniper | Junos | 17.3 | — |
| Juniper | Junos | 17.4 | — |
| Juniper | Junos | 18.1 | — |
| Juniper | Junos | 18.2 | — |
| Juniper | Junos | 18.3 | — |
| Juniper | Junos | 18.4 | — |
References
- https://kb.juniper.net/JSA10972Vendor Advisory
- https://kb.juniper.net/JSA10972Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-0050?
How severe is CVE-2019-0050?
How do I fix CVE-2019-0050?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-0043In MPLS environments, receipt of a specific SNMP packet may …7.5
- CVE-2019-0044Receipt of a specific packet on the out-of-band management i…7.5
- CVE-2019-0046A vulnerability in the pfe-chassisd Chassis Manager (CMLC) d…6.5
- CVE-2019-0047A persistent Cross-Site Scripting (XSS) vulnerability in Jun…8.8
- CVE-2019-0048On EX4300 Series switches with TCAM optimization enabled, in…5.8
- CVE-2019-0049On Junos devices with the BGP graceful restart helper mode e…7.5
- CVE-2019-0051SSL-Proxy feature on SRX devices fails to handle a hardware …7.5
- CVE-2019-0052The srxpfe process may crash on SRX Series services gateways…7.5
- CVE-2019-0053Insufficient validation of environment variables in the teln…7.8
- CVE-2019-0054An Improper Certificate Validation weakness in the SRX Serie…7.4
- CVE-2019-0055A vulnerability in the SIP ALG packet processing service of …7.5
- CVE-2019-0056This issue only affects devices with three (3) or more MPC10…7.5
Are you affected by CVE-2019-0050?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST