CVE-2019-0033: SRX Series: A remote attacker may cause a high CPU Denial of Service to the device when proxy ARP is configured.

Published Apr 10, 2019
·
Updated

A firewall bypass vulnerability in the proxy ARP service of Juniper Networks Junos OS allows an attacker to cause a high CPU condition leading to a Denial of Service (DoS). This issue affects only IPv4. Affected releases are Juniper Networks Junos OS: 12.1X46 versions above and including 12.1X46-D25 prior to 12.1X46-D71, 12.1X46-D73 on SRX Series; 12.3X48 versions prior to 12.3X48-D50 on SRX Series; 15.1X49 versions prior to 15.1X49-D75 on SRX Series.

Affected Software

17 affected components
Juniper Junos>=12.1x46<=12.1x46-d10
Juniper Junos>=12.1x46-d25<12.1x46-d71
Juniper Junos>=12.3x48<12.3x48-d50
Juniper Junos>=15.1x49<15.1x49-d75
Juniper SRX100
Juniper SRX110
Juniper SRX1400
Juniper SRX210
Juniper SRX220
Juniper SRX240
Juniper SRX3400
Juniper SRX3600
Juniper SRX5400
Juniper SRX550
Juniper SRX5600
Juniper SRX5800
Juniper SRX650

Remediation

Information

The following software releases have been updated to resolve this specific issue: 12.1X46-D71, 12.1X46-D73, 12.3X48-D50, 15.1X49-D75, 17.3R1, and all subsequent releases.

Event History

Apr 10, 2019
CVE Published
via MITRE·08:13 PM
Data Sourced
via MITRE·08:13 PM
RemedyDescriptionSeverityWeakness

Frequently Asked Questions

1

What is the severity of CVE-2019-0033?

CVE-2019-0033 is classified as a high severity vulnerability that can lead to a Denial of Service (DoS).

2

How do I fix CVE-2019-0033?

To fix CVE-2019-0033, upgrade to a fixed version of Junos OS as specified in the vendor advisory.

3

What versions of Junos OS are affected by CVE-2019-0033?

CVE-2019-0033 affects specific versions of Junos OS ranging from 12.1X46 to 15.1X49 inclusive.

4

Can CVE-2019-0033 affect IPv6 traffic?

No, CVE-2019-0033 specifically affects only IPv4 traffic.

5

What can an attacker achieve by exploiting CVE-2019-0033?

An attacker can exploit CVE-2019-0033 to cause a high CPU condition on the device, leading to potential downtime.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203