CVE-2019-0052 — SRX Series: srxpfe process crash while JSF/UTM module parses specific HTTP packets

Back Back to CVE browser

HIGH

SRX Series: srxpfe process crash while JSF/UTM module parses specific HTTP packets

Published Jul 11, 2019

7.5

HIGH

CVSS 3.1

EPSS 1.84%

Description

The srxpfe process may crash on SRX Series services gateways when the UTM module processes a specific fragmented HTTP packet. The packet is misinterpreted as a regular TCP packet which causes the processor to crash. This issue affects all SRX Series platforms that support URL-Filtering and have web-filtering enabled. Affected releases are Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D85 on SRX Series; 15.1X49 versions prior to 15.1X49-D181, 15.1X49-D190 on SRX Series; 17.3 versions on SRX Series; 17.4 versions prior to 17.4R1-S8, 17.4R2-S5, 17.4R3 on SRX Series; 18.1 versions prior to 18.1R3-S6 on SRX Series; 18.2 versions prior to 18.2R2-S1, 18.2R3 on SRX Series; 18.3 versions prior to 18.3R1-S2, 18.3R2 on SRX Series; 18.4 versions prior to 18.4R1-S1, 18.4R2 on SRX Series.

Affected products

Vendor Juniper Networks Product Junos OS Default
n/a
- Version
  12.3X48 versions prior to 12.3X48-D85 on SRX Series
  Status
  affected
  Constraints
  -
- Version
  15.1X49 versions prior to 15.1X49-D181 and 15.1X49-D190 on SRX Series
  Status
  affected
  Constraints
  -
- Version
  17.3 versions on SRX Series
  Status
  affected
  Constraints
  -
- Version
  17.4 versions prior to 17.4R1-S8 and to 17.4R2-S5 and to 17.4R3 on SRX Series
  Status
  affected
  Constraints
  -
- Version
  18.1 versions prior to 18.1R3-S6 on SRX Series
  Status
  affected
  Constraints
  -
- Version
  18.2 versions prior to 18.2R2-S1 and to 18.2R3 on SRX Series
  Status
  affected
  Constraints
  -
- Version
  18.3 versions prior to 18.3R1-S2 and to 18.3R2 on SRX Series
  Status
  affected
  Constraints
  -
- Version
  18.4 versions prior to 18.4R1-S1 and to 18.4R2 on SRX Series
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Juniper Networks

Junos OS

n/a

Version	Status	Constraints
12.3X48 versions prior to 12.3X48-D85 on SRX Series	affected	-
15.1X49 versions prior to 15.1X49-D181 and 15.1X49-D190 on SRX Series	affected	-
17.3 versions on SRX Series	affected	-
17.4 versions prior to 17.4R1-S8 and to 17.4R2-S5 and to 17.4R3 on SRX Series	affected	-
18.1 versions prior to 18.1R3-S6 on SRX Series	affected	-
18.2 versions prior to 18.2R2-S1 and to 18.2R3 on SRX Series	affected	-
18.3 versions prior to 18.3R1-S2 and to 18.3R2 on SRX Series	affected	-
18.4 versions prior to 18.4R1-S1 and to 18.4R2 on SRX Series	affected	-

Remediation

Vendor solution

The following software releases have been updated to resolve this specific issue: 12.3X48-D85, 12.3X48-D90, 15.1X49-D181, 15.1X49-D190, 17.4R1-S8, 17.4R2-S5, 17.4R3, 18.1R3-S6, 18.2R2-S1, 18.2R3, 18.3R1-S2, 18.3R2, 18.4R1-S1, 18.4R2, 19.1R1, 19.2R1, and all subsequent releases.

Metrics

1.84% 0.01841

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.01841

Score over time

2021–2026

EPSS v1
EPSS v2
EPSS v3
EPSS v5

Percentile over time

EPSS v1
EPSS v2
EPSS v3
EPSS v5

Table of values (13 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	1.84% (0.01841)	78.22th	v5 (v2026.06.15)
Jun 15, 2026	1.84% (0.01841)	76.15th	v5 (v2026.06.15)
Jul 20, 2024	0.11% (0.00112)	45.06th	v3 (v2023.03.01)
Jun 28, 2024	0.11% (0.00112)	44.93th	v3 (v2023.03.01)
Mar 7, 2023	0.11% (0.00112)	42.92th	v3 (v2023.03.01)
Mar 6, 2023	0.89% (0.00885)	27.89th	v2 (v2022.01.01)
Sep 10, 2022	0.89% (0.00885)	26.24th	v2 (v2022.01.01)
Apr 1, 2022	0.89% (0.00885)	24.24th	v2 (v2022.01.01)
Feb 4, 2022	5.46% (0.05463)	76.57th	v2 (v2022.01.01)
Feb 3, 2022	2.91% (0.02909)	64.88th	v1
Jan 6, 2022	2.91% (0.02909)	64.55th	v1
Sep 1, 2021	0.66% (0.00663)	47.40th	v1
Apr 14, 2021	0.66% (0.00663)	0.00th	v1

Weaknesses (2)

CWE-404

Improper Resource Shutdown or Release

CWE-436

References (2)

http://www.securityfocus.com/bid/109145
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://kb.juniper.net/JSA10946
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/109145		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://kb.juniper.net/JSA10946		x_refsource_CONFIRMPatchVendor Advisory