CVE-2019-0033

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A firewall bypass vulnerability in the proxy ARP service of Juniper Networks Junos OS allows an attacker to cause a high CPU condition leading to a Denial of Service (DoS). This issue affects only IPv4. Affected releases are Juniper Networks Junos OS: 12.1X46 versions above and including 12.1X46-D25 prior to 12.1X46-D71, 12.1X46-D73 on SRX Series; 12.3X48 versions prior to 12.3X48-D50 on SRX Series; 15.1X49 versions prior to 15.1X49-D75 on SRX Series.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

Vendor	Product	Versions
Juniper Networks	Junos OS	>= 12.1X46-D25, < 12.1X46*; >= 12.3X48, < 12.3X48-D50; >= 15.1X49, < 15.1X49-D75

References

http://www.securityfocus.com/bid/107882
https://kb.juniper.net/JSA10922Mitigation, Vendor Advisory
http://www.securityfocus.com/bid/107882
https://kb.juniper.net/JSA10922Mitigation, Vendor Advisory

Timeline

Published: Apr 10, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-00356.8When "set system ports console insecure" is enabled, root login is disallowed for Junos OS as expected. However, the root password can be ch CVE-2019-00369.8When configuring a stateless firewall filter in Junos OS, terms named using the format "internal-n" (e.g. "internal-1", "internal-2", etc.) CVE-2019-00377.5In a Dynamic Host Configuration Protocol version 6 (DHCPv6) environment, the jdhcpd daemon may crash and restart upon receipt of certain DHC CVE-2019-00386.5Crafted packets destined to the management interface (fxp0) of an SRX340 or SRX345 services gateway may create a denial of service (DoS) con CVE-2019-00398.1If REST API is enabled, the Junos OS login credentials are vulnerable to brute force attacks. The high default connection limit of the REST CVE-2019-00409.1On Junos OS, rpcbind should only be listening to port 111 on the internal routing instance (IRI). External packets destined to port 111 shou CVE-2019-00418.6On EX4300-MP Series devices with any lo0 filters applied, transit network traffic may reach the control plane via loopback interface (lo0). CVE-2019-00424.2Juniper Identity Management Service (JIMS) for Windows versions prior to 1.1.4 may send an incorrect message to associated SRX services gate CVE-2019-00437.5In MPLS environments, receipt of a specific SNMP packet may cause the routing protocol daemon (RPD) process to crash and restart. By continu CVE-2019-00447.5Receipt of a specific packet on the out-of-band management interface fxp0 may cause the system to crash and restart (vmcore). By continuousl CVE-2019-00466.5A vulnerability in the pfe-chassisd Chassis Manager (CMLC) daemon of Juniper Networks Junos OS allows an attacker to cause a Denial of Servi CVE-2019-00478.8A persistent Cross-Site Scripting (XSS) vulnerability in Junos OS J-Web interface may allow remote unauthenticated attackers to perform admi