CVE-2019-0049

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

On Junos devices with the BGP graceful restart helper mode enabled or the BGP graceful restart mechanism enabled, a certain sequence of BGP session restart on a remote peer that has the graceful restart mechanism enabled may cause the local routing protocol daemon (RPD) process to crash and restart. Repeated crashes of the RPD process can cause prolonged Denial of Service (DoS). Graceful restart helper mode for BGP is enabled by default. No other Juniper Networks products or platforms are affected by this issue. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S3; 16.2 versions prior to 16.2R2-S9; 17.1 versions prior to 17.1R3; 17.2 versions prior to 17.2R3; 17.2X75 versions prior to 17.2X75-D105; 17.3 versions prior to 17.3R3-S2; 17.4 versions prior to 17.4R1-S7, 17.4R2-S2, 17.4R3; 18.1 versions prior to 18.1R3-S2; 18.2 versions prior to 18.2R2; 18.2X75 versions prior to 18.2X75-D12, 18.2X75-D30; 18.3 versions prior to 18.3R1-S4, 18.3R2. Junos OS releases prior to 16.1R1 are not affected.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-404

Affected software

No affected versions have been published.

Timeline

Published: Jul 11, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-00507.5Under certain heavy traffic conditions srxpfe process can crash and result in a denial of service condition for the SRX1500 device. Repeated CVE-2019-00517.5SSL-Proxy feature on SRX devices fails to handle a hardware resource limitation which can be exploited by remote SSL/TLS servers to crash th CVE-2019-00527.5The srxpfe process may crash on SRX Series services gateways when the UTM module processes a specific fragmented HTTP packet. The packet is CVE-2019-00537.8Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based buffer overflows, which c CVE-2019-00547.4An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Network CVE-2019-00557.5A vulnerability in the SIP ALG packet processing service of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) CVE-2019-00567.5This issue only affects devices with three (3) or more MPC10's installed in a single chassis with OSPF enabled and configured on the device.CVE-2019-00577.8An improper authorization weakness in Juniper Networks Junos OS allows a local authenticated attacker to bypass regular security controls to CVE-2019-00587.8A vulnerability in the Veriexec subsystem of Juniper Networks Junos OS allowing an attacker to fully compromise the host system. A local aut CVE-2019-00597.5A memory leak vulnerability in the of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sendi CVE-2019-00607.5The flowd process, responsible for forwarding traffic in SRX Series services gateways, may crash and restart when processing specific transi CVE-2019-00617.8The management daemon (MGD) is responsible for all configuration and management operations in Junos OS. The Junos CLI communicates with MGD