CVE-2019-0058

CVE-2019-0058 affects Juniper Networks Junos OS Veriexec subsystem on SRX Series: versions 12.3X48 prior to 12.3X48-D80 are vulnerable. A locally authenticated user can elevate privileges to gain full control of the system. The issue is documented across multiple feeds (including NVD and Nessus e...

CVE-2019-0058: Undefined Security Weakness

A vulnerability in the Veriexec subsystem of Juniper Networks Junos OS allowing an attacker to fully compromise the host system. A local authenticated user can elevate privileges to gain full control of the system even if they are specifically denied access to perform certain actions. This issue...

CVE-2019-0064: Undefined Security Weakness

On SRX5000 Series devices, if 'set security zones security-zone tcp-rst' is configured, the flowd process may crash when a specific TCP packet is received by the device and triggers a new session. The process restarts automatically. However, receipt of a constant stream of these TCP packets may...

PT-2019-3596

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on SRX Series versions prior to 12.3X48-D80 Juniper Networks Junos OS on SRX Series versions prior to 15.1X49-D160 Juniper Networks Junos OS on SRX Series versions prior to 17.3R3-S7 Juniper Networks Junos OS on SRX...

CVE-2019-0054: Improper Certificate Validation

An Improper Certificate Validation weakness in the SRX Series Application Identification app-id signature update client of Juniper Networks Junos OS allows an attacker to perform Man-in-the-Middle MitM attacks which may compromise the integrity and confidentiality of the device. This issue affect...

CVE-2019-0055: Improper Handling of Length Parameter Inconsistency

A vulnerability in the SIP ALG packet processing service of Juniper Networks Junos OS allows an attacker to cause a Denial of Service DoS to the device by sending specific types of valid SIP traffic to the device. In this case, the flowd process crashes and generates a core dump while processing...

PT-2019-3488

Name of the Vulnerable Software and Affected Versions Junos OS versions 18.2R3 through 19.2R1 on SRX 5000 Series Description The issue is related to resource release errors in the Junos OS, which can be exploited by a remote attacker to cause a denial of service DoS by sending specially crafted T...

PT-2019-3492

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.3X48-D90 Junos OS versions prior to 15.1X49-D180 Junos OS version 17.3 Junos OS versions prior to 17.4R2-S5 Junos OS versions prior to 17.4R3 Junos OS versions prior to 18.1R3-S6 Junos OS versions prior to 18.2R2-...

PT-2019-3482

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 12.3X48-D80 on SRX Series. Description A vulnerability in the Veriexec subsystem of Juniper Networks Junos OS allows an attacker to fully compromise the host system. A local authenticated user can...

CVE-2019-0068: Improper Check for Unusual or Exceptional Conditions

The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending the specific multicast packets, an attacker can repeatedly crash the flowd process causing a sustained Denial of Service. This issue affects Juniper...

CVE-2019-0075: Undefined Security Weakness

A vulnerability in the srxpfe process on Protocol Independent Multicast PIM enabled SRX series devices may lead to crash of the srxpfe process and an FPC reboot while processing PIM messages. Sustained receipt of these packets may lead to an extended denial of service condition. Affected releases...

PT-2019-3479

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 15.1X49-D120 on SRX Series devices. Description The issue is related to an Improper Certificate Validation weakness in the SRX Series Application Identification app-id signature update client, allowi...

CVE-2019-0060: Improper Handling of Exceptional Conditions

The flowd process, responsible for forwarding traffic in SRX Series services gateways, may crash and restart when processing specific transit IP packets through an IPSec tunnel. Continued processing of these packets may result in an extended Denial of Service DoS condition. This issue only occurs...

CVE-2019-0052

The srxpfe process may crash on SRX Series services gateways when the UTM module processes a specific fragmented HTTP packet. The packet is misinterpreted as a regular TCP packet which causes the processor to crash. This issue affects all SRX Series platforms that support URL-Filtering and have...

CVE-2019-0052

The srxpfe process may crash on SRX Series services gateways when the UTM module processes a specific fragmented HTTP packet. The packet is misinterpreted as a regular TCP packet which causes the processor to crash. This issue affects all SRX Series platforms that support URL-Filtering and have...

Design/Logic Flaw

The srxpfe process may crash on SRX Series services gateways when the UTM module processes a specific fragmented HTTP packet. The packet is misinterpreted as a regular TCP packet which causes the processor to crash. This issue affects all SRX Series platforms that support URL-Filtering and have...

CVE-2019-0052 SRX Series: srxpfe process crash while JSF/UTM module parses specific HTTP packets

The srxpfe process may crash on SRX Series services gateways when the UTM module processes a specific fragmented HTTP packet. The packet is misinterpreted as a regular TCP packet which causes the processor to crash. This issue affects all SRX Series platforms that support URL-Filtering and have...

CVE-2019-0052

The CVE-2019-0052 issue affects Juniper Networks Junos OS on SRX Series gateways, where the srxpfe process crashes when the UTM/JSF module processes a specific fragmented HTTP packet. The packet is misinterpreted as a normal TCP packet, causing a processor crash. Affected releases cover multiple ...

CVE-2019-0052: Improper Resource Shutdown or Release

The srxpfe process may crash on SRX Series services gateways when the UTM module processes a specific fragmented HTTP packet. The packet is misinterpreted as a regular TCP packet which causes the processor to crash. This issue affects all SRX Series platforms that support URL-Filtering and have...

Juniper Junos SRX crafted packets destined to fxp0 denial of service (JSA10927)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability in the management interface due to buffer space exhaustion. An unauthenticated, adjacent attacker can exploit this issue, via crafted packets destined to the management...