CVE-2019-0051

SSL-Proxy feature on SRX devices fails to handle a hardware resource limitation which can be exploited by remote SSL/TLS servers to crash the flowd daemon. Repeated crashes of the flowd daemon can result in an extended denial of service condition. For this issue to occur, clients protected by the SRX device must initiate a connection to the malicious server. This issue affects: Juniper Networks Junos OS on SRX5000 Series: 12.3X48 versions prior to 12.3X48-D85; 15.1X49 versions prior to 15.1X49-D180; 17.3 versions prior to 17.3R3-S7; 17.4 versions prior to 17.4R2-S6, 17.4R3; 18.1 versions prior to 18.1R3-S8; 18.2 versions prior to 18.2R3; 18.3 versions prior to 18.3R2; 18.4 versions prior to 18.4R2; 19.1 versions prior to 19.1R2.

• CWE-755
• CWE-755

• https://kb.juniper.net/JSA10973Vendor Advisory
• https://kb.juniper.net/JSA10973Vendor Advisory

Published

Oct 9, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-0044Receipt of a specific packet on the out-of-band management i…7.5
• CVE-2019-0046A vulnerability in the pfe-chassisd Chassis Manager (CMLC) d…6.5
• CVE-2019-0047A persistent Cross-Site Scripting (XSS) vulnerability in Jun…8.8
• CVE-2019-0048On EX4300 Series switches with TCAM optimization enabled, in…5.8
• CVE-2019-0049On Junos devices with the BGP graceful restart helper mode e…7.5
• CVE-2019-0050Under certain heavy traffic conditions srxpfe process can cr…7.5
• CVE-2019-0052The srxpfe process may crash on SRX Series services gateways…7.5
• CVE-2019-0053Insufficient validation of environment variables in the teln…7.8
• CVE-2019-0054An Improper Certificate Validation weakness in the SRX Serie…7.4
• CVE-2019-0055A vulnerability in the SIP ALG packet processing service of …7.5
• CVE-2019-0056This issue only affects devices with three (3) or more MPC10…7.5
• CVE-2019-0057An improper authorization weakness in Juniper Networks Junos…7.8