CVE-2019-0052

The srxpfe process may crash on SRX Series services gateways when the UTM module processes a specific fragmented HTTP packet. The packet is misinterpreted as a regular TCP packet which causes the processor to crash. This issue affects all SRX Series platforms that support URL-Filtering and have web-filtering enabled. Affected releases are Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D85 on SRX Series; 15.1X49 versions prior to 15.1X49-D181, 15.1X49-D190 on SRX Series; 17.3 versions on SRX Series; 17.4 versions prior to 17.4R1-S8, 17.4R2-S5, 17.4R3 on SRX Series; 18.1 versions prior to 18.1R3-S6 on SRX Series; 18.2 versions prior to 18.2R2-S1, 18.2R3 on SRX Series; 18.3 versions prior to 18.3R1-S2, 18.3R2 on SRX Series; 18.4 versions prior to 18.4R1-S1, 18.4R2 on SRX Series.

• CWE-404
• CWE-436

• http://www.securityfocus.com/bid/109145Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10946Patch, Vendor Advisory
• http://www.securityfocus.com/bid/109145Third Party Advisory, VDB Entry
• https://kb.juniper.net/JSA10946Patch, Vendor Advisory

Published

Jul 11, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-0046A vulnerability in the pfe-chassisd Chassis Manager (CMLC) d…6.5
• CVE-2019-0047A persistent Cross-Site Scripting (XSS) vulnerability in Jun…8.8
• CVE-2019-0048On EX4300 Series switches with TCAM optimization enabled, in…5.8
• CVE-2019-0049On Junos devices with the BGP graceful restart helper mode e…7.5
• CVE-2019-0050Under certain heavy traffic conditions srxpfe process can cr…7.5
• CVE-2019-0051SSL-Proxy feature on SRX devices fails to handle a hardware …7.5
• CVE-2019-0053Insufficient validation of environment variables in the teln…7.8
• CVE-2019-0054An Improper Certificate Validation weakness in the SRX Serie…7.4
• CVE-2019-0055A vulnerability in the SIP ALG packet processing service of …7.5
• CVE-2019-0056This issue only affects devices with three (3) or more MPC10…7.5
• CVE-2019-0057An improper authorization weakness in Juniper Networks Junos…7.8
• CVE-2019-0058A vulnerability in the Veriexec subsystem of Juniper Network…7.8