CVE-2019-0060 Details
Description
The flowd process, responsible for forwarding traffic in SRX Series services gateways, may crash and restart when processing specific transit IP packets through an IPSec tunnel. Continued processing of these packets may result in an extended Denial of Service (DoS) condition. This issue only occurs when IPSec tunnels are configured. Systems without IPSec tunnel configurations are not vulnerable to this issue. This issue affects Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D171, 15.1X49-D180 on SRX Series; 18.2 versions 18.2R2-S1 and later, prior to 18.2R3 on SRX Series; 18.4 versions prior to 18.4R2 on SRX Series.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://kb.juniper.net/JSA10959 | CVE | Vendor Advisory |
| https://www.juniper.net/documentation/en_US/junos/topics/topic-map/ipsec-tunnel-traffic-configuration.html | CVE | Vendor Advisory |
| https://kb.juniper.net/JSA10959 | [email protected] | Vendor Advisory |
| https://www.juniper.net/documentation/en_US/junos/topics/topic-map/ipsec-tunnel-traffic-configuration.html | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-755 | Improper Handling of Exceptional Conditions | [email protected] |
| CWE-755 | Improper Handling of Exceptional Conditions | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| juniper junos | 15.1x49 - 15.1x49 d10 15.1x49 d100 15.1x49 d110 15.1x49 d120 15.1x49 d130 15.1x49 d140 15.1x49 d150 15.1x49 d160 15.1x49 d170 15.1x49 d20 15.1x49 d30 15.1x49 d35 15.1x49 d40 15.1x49 d45 15.1x49 d50 15.1x49 d55 15.1x49 d60 15.1x49 d65 15.1x49 d70 15.1x49 d75 15.1x49 d80 15.1x49 d90 18.2 - 18.2 r1-s5 18.4 - 18.4 r1 18.4 r1-s2 |
CPE
Remediation
| |
| juniper csrx | All versions |
CPE
Remediation
| |
| juniper srx100 | All versions |
CPE
Remediation
| |
| juniper srx110 | All versions |
CPE
Remediation
| |
| juniper srx1400 | All versions |
CPE
Remediation
| |
| juniper srx1500 | All versions |
CPE
Remediation
| |
| juniper srx210 | All versions |
CPE
Remediation
| |
| juniper srx220 | All versions |
CPE
Remediation
| |
| juniper srx240 | All versions |
CPE
Remediation
| |
| juniper srx300 | All versions |
CPE
Remediation
| |
| juniper srx320 | All versions |
CPE
Remediation
| |
| juniper srx340 | All versions |
CPE
Remediation
| |
| juniper srx3400 | All versions |
CPE
Remediation
| |
| juniper srx345 | All versions |
CPE
Remediation
| |
| juniper srx3600 | All versions |
CPE
Remediation
| |
| juniper srx4100 | All versions |
CPE
Remediation
| |
| juniper srx4200 | All versions |
CPE
Remediation
| |
| juniper srx4600 | All versions |
CPE
Remediation
| |
| juniper srx5400 | All versions |
CPE
Remediation
| |
| juniper srx550 | All versions |
CPE
Remediation
| |
| juniper srx550 hm | All versions |
CPE
Remediation
| |
| juniper srx5600 | All versions |
CPE
Remediation
| |
| juniper srx5800 | All versions |
CPE
Remediation
| |
| juniper srx650 | All versions |
CPE
Remediation
| |
| juniper vsrx | All versions |
CPE
Remediation
| |
Change History
8 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Feb 5, 2021 | CPE Deprecation Remap | [email protected] |
| Feb 5, 2021 | CPE Deprecation Remap | [email protected] |
| Feb 5, 2021 | CPE Deprecation Remap | [email protected] |
| Feb 5, 2021 | CPE Deprecation Remap | [email protected] |
| Oct 18, 2019 | Initial Analysis | [email protected] |