Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Juniper SRX devices can crash on certain multicast traffic

CVE-2019-0075 · published 7 years ago
Summary

SRX firewalls running older Junos OS versions may stop processing and restart when they receive specific multicast packets. This can cause a temporary loss of network service. Update the device to a newer Junos release or apply the vendor’s patch to prevent the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
juniper junos 12.3x48
15.1x49
17.3
17.4
18.1
18.2
18.3
cpe:2.3:o:juniper:junos:12.3x48:-:*:*:*:*:*:*
Original advisory text
A vulnerability in the srxpfe process on Protocol Independent Multicast (PIM) enabled SRX series devices may lead to crash of the srxpfe process and an FPC reboot while processing (PIM) messages. S...
A vulnerability in the srxpfe process on Protocol Independent Multicast (PIM) enabled SRX series devices may lead to crash of the srxpfe process and an FPC reboot while processing (PIM) messages. Sustained receipt of these packets may lead to an extended denial of service condition. Affected releases are Juniper Networks Junos OS on SRX Series: 12.3X48 versions prior to 12.3X48-D80; 15.1X49 versions prior to 15.1X49-D160; 17.3 versions prior to 17.3R3-S7 17.4 versions prior to 17.4R2-S8, 17.4R3; 18.1 versions prior to 18.1R3-S8; 18.2 versions prior to 18.2R2; 18.3 versions prior to 18.3R2.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
1% chance of attack within 30 days
Timeline
Published9 Oct 2019
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2019-0075 · NVD
Track software like this
Free during beta