CVE-2019-0056

This issue only affects devices with three (3) or more MPC10's installed in a single chassis with OSPF enabled and configured on the device. An Insufficient Resource Pool weakness allows an attacker to cause the device's Open Shortest Path First (OSPF) states to transition to Down, resulting in a Denial of Service (DoS) attack. This attack requires a relatively large number of specific Internet Mixed (IMIXed) types of genuine and valid IPv6 packets to be transferred by the attacker in a relatively short period of time, across three or more PFE's on the device at the same time. Continued receipt of the traffic sent by the attacker will continue to cause OSPF to remain in the Down starting state, or flap between other states and then again to Down, causing a persistent Denial of Service. This attack will affect all IPv4, and IPv6 traffic served by the OSPF routes once the OSPF states transition to Down. This issue affects: Juniper Networks Junos OS on MX480, MX960, MX2008, MX2010, MX2020: 18.1 versions prior to 18.1R2-S4, 18.1R3-S5; 18.1X75 version 18.1X75-D10 and later versions; 18.2 versions prior to 18.2R1-S5, 18.2R2-S3, 18.2R3; 18.2X75 versions prior to 18.2X75-D50; 18.3 versions prior to 18.3R1-S4, 18.3R2, 18.3R3; 18.4 versions prior to 18.4R1-S2, 18.4R2.

• CWE-410

• https://kb.juniper.net/JSA10954Vendor Advisory
• https://kb.juniper.net/JSA10954Vendor Advisory

Published

Oct 9, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-0050Under certain heavy traffic conditions srxpfe process can cr…7.5
• CVE-2019-0051SSL-Proxy feature on SRX devices fails to handle a hardware …7.5
• CVE-2019-0052The srxpfe process may crash on SRX Series services gateways…7.5
• CVE-2019-0053Insufficient validation of environment variables in the teln…7.8
• CVE-2019-0054An Improper Certificate Validation weakness in the SRX Serie…7.4
• CVE-2019-0055A vulnerability in the SIP ALG packet processing service of …7.5
• CVE-2019-0057An improper authorization weakness in Juniper Networks Junos…7.8
• CVE-2019-0058A vulnerability in the Veriexec subsystem of Juniper Network…7.8
• CVE-2019-0059A memory leak vulnerability in the of Juniper Networks Junos…7.5
• CVE-2019-0060The flowd process, responsible for forwarding traffic in SRX…7.5
• CVE-2019-0061The management daemon (MGD) is responsible for all configura…7.8
• CVE-2019-0062A session fixation vulnerability in J-Web on Junos OS may al…8.8