CVE-2019-0058

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A vulnerability in the Veriexec subsystem of Juniper Networks Junos OS allowing an attacker to fully compromise the host system. A local authenticated user can elevate privileges to gain full control of the system even if they are specifically denied access to perform certain actions. This issue affects: Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D80 on SRX Series.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Juniper Networks	Junos OS	>= 12.3X48, < 12.3X48-D80

References

https://kb.juniper.net/JSA10956Vendor Advisory
https://kb.juniper.net/JSA10956Vendor Advisory

Timeline

Published: Oct 9, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-00597.5A memory leak vulnerability in the of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sendi CVE-2019-00607.5The flowd process, responsible for forwarding traffic in SRX Series services gateways, may crash and restart when processing specific transi CVE-2019-00617.8The management daemon (MGD) is responsible for all configuration and management operations in Junos OS. The Junos CLI communicates with MGD CVE-2019-00628.8A session fixation vulnerability in J-Web on Junos OS may allow an attacker to use social engineering techniques to fix and hijack a J-Web a CVE-2019-00637.5When an MX Series Broadband Remote Access Server (BRAS) is configured as a Broadband Network Gateway (BNG) with DHCPv6 enabled, jdhcpd might CVE-2019-00647.5On SRX5000 Series devices, if 'set security zones security-zone <zone> tcp-rst' is configured, the flowd process may crash when a specific T CVE-2019-00657.5On MX Series, when the SIP ALG is enabled, receipt of a certain malformed SIP packet may crash the MS-PIC component on MS-MIC or MS-MPC. By CVE-2019-00667.5An unexpected status return value weakness in the Next-Generation Multicast VPN (NG-mVPN) service of Juniper Networks Junos OS allows attack CVE-2019-00676.5Receipt of a specific link-local IPv6 packet destined to the RE may cause the system to crash and restart (vmcore). By continuously sending CVE-2019-00687.5The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously CVE-2019-00695.5On EX4600, QFX5100 Series, NFX Series, QFX10K Series, QFX5110, QFX5200 Series, QFX5110, QFX5200, QFX10K Series, vSRX, SRX1500, SRX4000 Serie CVE-2019-00708.8An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions to take control of other portions of th