CVE-2019-0050
HIGHJuniper Junos OS - Denial of Service via srxpfe Process Crash
Title source: llmDescription
Under certain heavy traffic conditions srxpfe process can crash and result in a denial of service condition for the SRX1500 device. Repeated crashes of the srxpfe can result in an extended denial of service condition. The SRX device may fail to forward traffic when this condition occurs. Affected releases are Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D170 on SRX1500; 17.3 versions prior to 17.3R3-S7 on SRX1500; 17.4 versions prior to 17.4R2-S8, 17.4R3 on SRX1500; 18.1 versions prior to 18.1R3-S8 on SRX1500; 18.2 versions prior to 18.2R3 on SRX1500; 18.3 versions prior to 18.3R2 on SRX1500; 18.4 versions prior to 18.4R2 on SRX1500.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
https://kb.juniper.net/JSA10972
Scores
CVSS v3
7.5
EPSS
0.0039
EPSS Percentile
60.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
Status
published
Products (6)
juniper/junos
15.1x49 d100 (15 CPE variants)
juniper/junos
17.3 (8 CPE variants)
juniper/junos
17.4 (11 CPE variants)
juniper/junos
18.1 (9 CPE variants)
juniper/junos
18.2 (6 CPE variants)
juniper/junos
18.3
Published
Oct 09, 2019
Tracked Since
Feb 18, 2026