Riskcovery

CVE-2019-0050

Junos OS: SRX1500: Denial of service due to crash of srxpfe process under heavy traffic conditions.

State
Published
Severity
7.5 High
Published
Oct 9, 2019
Updated
Sep 16, 2024
Reserved
Oct 11, 2018

Read the record on cve.org

Description

Under certain heavy traffic conditions srxpfe process can crash and result in a denial of service condition for the SRX1500 device. Repeated crashes of the srxpfe can result in an extended denial of service condition. The SRX device may fail to forward traffic when this condition occurs. Affected releases are Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D170 on SRX1500; 17.3 versions prior to 17.3R3-S7 on SRX1500; 17.4 versions prior to 17.4R2-S8, 17.4R3 on SRX1500; 18.1 versions prior to 18.1R3-S8 on SRX1500; 18.2 versions prior to 18.2R3 on SRX1500; 18.3 versions prior to 18.3R2 on SRX1500; 18.4 versions prior to 18.4R2 on SRX1500.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hjuniper

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Junos OSJuniper Networks
  • 15.1X49 to before 15.1X49-D170Affected
  • 17.3 to before 17.3R3-S7 (pending)Affected
  • 17.4 to before 17.4R2-S8, 17.4R3Affected
  • 18.1 to before 18.1R3-S8Affected
  • 18.2 to before 18.2R3Affected
  • 18.3 to before 18.3R2Affected
  • 18.4 to before 18.4R2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.