QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2019-0060

Back to search

CVE-2019-0060

Published: Oct 9, 2019

Modified: Sep 16, 2024

PUBLISHED

CVSS v3.1

7.5

HIGH

Description

The flowd process, responsible for forwarding traffic in SRX Series services gateways, may crash and restart when processing specific transit IP packets through an IPSec tunnel. Continued processing of these packets may result in an extended Denial of Service (DoS) condition. This issue only occurs when IPSec tunnels are configured. Systems without IPSec tunnel configurations are not vulnerable to this issue. This issue affects Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D171, 15.1X49-D180 on SRX Series; 18.2 versions 18.2R2-S1 and later, prior to 18.2R3 on SRX Series; 18.4 versions prior to 18.4R2 on SRX Series.

VendorProductVersions

Juniper Networks

Junos OS

affected
15.1X49 - < 15.1X49-D171, 15.1X49-D180
affected
18.2R2-S1 - < 18.2*
affected
18.4 - < 18.4R2

Weaknesses (CWE)

CWE-755

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now