CVE-2019-0050

Summary

Under certain heavy traffic conditions srxpfe process can crash and result in a denial of service condition for the SRX1500 device. Repeated crashes of the srxpfe can result in an extended denial of service condition. The SRX device may fail to forward traffic when this condition occurs. Affected releases are Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D170 on SRX1500; 17.3 versions prior to 17.3R3-S7 on SRX1500; 17.4 versions prior to 17.4R2-S8, 17.4R3 on SRX1500; 18.1 versions prior to 18.1R3-S8 on SRX1500; 18.2 versions prior to 18.2R3 on SRX1500; 18.3 versions prior to 18.3R2 on SRX1500; 18.4 versions prior to 18.4R2 on SRX1500.

Affected Software

VendorProductVersion RangeStatus
Juniper NetworksJunos OS15.1X49 < 15.1X49-D170affected
Juniper NetworksJunos OS17.3 < 17.3R3-S7 (pending)affected
Juniper NetworksJunos OS17.4 < 17.4R2-S8, 17.4R3affected
Juniper NetworksJunos OS18.1 < 18.1R3-S8affected
Juniper NetworksJunos OS18.2 < 18.2R3affected
Juniper NetworksJunos OS18.3 < 18.3R2affected
Juniper NetworksJunos OS18.4 < 18.4R2affected

Weaknesses

  • Denial of Service

Workarounds

There are no viable workarounds for this issue.

ADP Enrichment

CVE Program Container

Additional References

References