CVE-2019-0071

Veriexec is a kernel-based file integrity subsystem in Junos OS that ensures only authorized binaries are able to be executed. Due to a flaw in specific versions of Junos OS, affecting specific EX Series platforms, the Veriexec subsystem will fail to initialize, in essence disabling file integrity checking. This may allow a locally authenticated user with shell access to install untrusted executable images, and elevate privileges to gain full control of the system. During the installation of an affected version of Junos OS are installed, the following messages will be logged to the console: Initializing Verified Exec: /sbin/veriexec: Undefined symbol "__aeabi_uidiv" /sbin/veriexec: Undefined symbol "__aeabi_uidiv" /sbin/veriexec: Undefined symbol "__aeabi_uidiv" veriexec: /.mount/packages/db/os-kernel-prd-arm-32-20190221.70c2600_builder_stable_11/boot/brcm-hr3.dtb: Authentication error veriexec: /.mount/packages/db/os-kernel-prd-arm-32-20190221.70c2600_builder_stable_11/boot/contents.izo: Authentication error ... This issue affects Juniper Networks Junos OS: 18.1R3-S4 on EX2300, EX2300-C and EX3400; 18.3R1-S3 on EX2300, EX2300-C and EX3400.

• CWE-347
• CWE-354

• https://kb.juniper.net/JSA10978Vendor Advisory
• https://www.juniper.net/documentation/en_US/junos/topics/concept/veriexec.htmlVendor Advisory
• https://kb.juniper.net/JSA10978Vendor Advisory
• https://www.juniper.net/documentation/en_US/junos/topics/concept/veriexec.htmlVendor Advisory

Published

Oct 9, 2019

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-0065On MX Series, when the SIP ALG is enabled, receipt of a cert…7.5
• CVE-2019-0066An unexpected status return value weakness in the Next-Gener…7.5
• CVE-2019-0067Receipt of a specific link-local IPv6 packet destined to the…6.5
• CVE-2019-0068The SRX flowd process, responsible for packet forwarding, ma…7.5
• CVE-2019-0069On EX4600, QFX5100 Series, NFX Series, QFX10K Series, QFX511…5.5
• CVE-2019-0070An Improper Input Validation weakness allows a malicious loc…8.8
• CVE-2019-0072An Unprotected Storage of Credentials vulnerability in the i…5.5
• CVE-2019-0073The PKI keys exported using the command "run request securit…7.1
• CVE-2019-0074A path traversal vulnerability in NFX150 Series and QFX10K S…5.5
• CVE-2019-0075A vulnerability in the srxpfe process on Protocol Independen…7.5
• CVE-2019-0086Insufficient access control vulnerability in Dynamic Applica…
• CVE-2019-0087Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…