What is CVE-2019-0014?

CVE-2019-0014 is a high-severity vulnerability in Juniper Junos, classified under CWE-19. CVSS score: 7.5/10. Published 2019-01-15.

How severe is CVE-2019-0014?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Juniper Junos

CVE-2019-0014

On QFX and PTX Series, receipt of a malformed packet for J-Flow sampling might crash the FPC (Flexible PIC Concentrator) process which causes all interfaces to go down. By continuously sending the offending packet, an attacker can repeatedly crash the FPC process causing a sustained Denial of Service (DoS). This issue affects both IPv4 and IPv6 packet processing. Affected releases are Juniper Networks Junos OS on QFX and PTX Series: 17.4 versions prior to 17.4R2-S1, 17.4R3; 18.1 versions prior to 18.1R3-S1; 18.2 versions prior to 18.2R1-S3, 18.2R2; 17.2X75 versions prior to 17.2X75-D91, 17.2X75-D100.

Published 2019-01-15 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

EPSS exploit prediction

EPSS: 0.017 (77.3th percentile), scored 2026-11-01.

Low probability of exploitation in the next 30 days, but still tracked. 77th percentile — 77.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.017 · newest: 0.017 · change: 0.000

Affected products

Juniper Junos — versions 17.2x75, 17.4, 18.2
Juniper Ptx1000
Juniper Ptx10002
Juniper Ptx10008
Juniper Ptx10016
Juniper Ptx3000
Juniper Ptx5000
Juniper Qfx10002
Juniper Qfx10008
Juniper Qfx10016

Weakness classification (CWE)

CWE-19

References

kb.juniper.net/JSA10914 (Patch, Mitigation, Vendor Advisory)
www.securityfocus.com/bid/106556 (VDB Entry, Third Party Advisory, vdb-entry)

Frequently asked questions

What is CVE-2019-0014?: CVE-2019-0014 is a high-severity vulnerability in Juniper Junos, classified under CWE-19. CVSS score: 7.5/10. Published 2019-01-15.
How severe is CVE-2019-0014?: High severity. CVSS v3 base score is 7.5 out of 10.