Vulnerability in Juniper Junos
CVE-2019-0051
SSL-Proxy feature on SRX devices fails to handle a hardware resource limitation which can be exploited by remote SSL/TLS servers to crash the flowd daemon. Repeated crashes of the flowd daemon can result in an extended denial of service condition. For this issue to occur, clients protected by the SRX device must initiate a connection to the malicious server. This issue affects: Juniper Networks Junos OS on SRX5000 Series: 12.3X48 versions prior to 12.3X48-D85; 15.1X49 versions prior to 15.1X49-D180; 17.3 versions prior to 17.3R3-S7; 17.4 versions prior to 17.4R2-S6, 17.4R3; 18.1 versions prior to 18.1R3-S8; 18.2 versions prior to 18.2R3; 18.3 versions prior to 18.3R2; 18.4 versions prior to 18.4R2; 19.1 versions prior to 19.1R2.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.011 (63.4th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 63rd percentile — 63.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.011 · newest: 0.011 · change: 0.000
Affected products
- Juniper Junos — versions 12.3x48, 15.1x49, 17.3
- Juniper Srx5400
- Juniper Srx5600
- Juniper Srx5800
- Juniper Networks Junos OS — versions 12.3X48, 15.1X49, 17.3
Weakness classification (CWE)
References
- kb.juniper.net/JSA10973 (Vendor Advisory)
Frequently asked questions
- What is CVE-2019-0051?
- CVE-2019-0051 is a medium-severity vulnerability in Juniper Junos, classified under Improper Handling of Exceptional Conditions. CVSS score: 6.5/10. Published 2019-10-09.
- How severe is CVE-2019-0051?
- Medium severity. CVSS v3 base score is 6.5 out of 10.