Vulnerability Database

290,476

Total vulnerabilities in the database

CVE-2019-0010

An SRX Series Service Gateway configured for Unified Threat Management (UTM) may experience a system crash with the error message "mbuf exceed" -- an indication of memory buffer exhaustion -- due to the receipt of crafted HTTP traffic. Each crafted HTTP packet inspected by UTM consumes mbufs which can be identified through the following log messages: all_logs.0:Jun 8 03:25:03 srx1 node0.fpc4 : SPU3 jmpi mbuf stall 50%. all_logs.0:Jun 8 03:25:13 srx1 node0.fpc4 : SPU3 jmpi mbuf stall 51%. all_logs.0:Jun 8 03:25:24 srx1 node0.fpc4 : SPU3 jmpi mbuf stall 52%. ... Eventually the system runs out of mbufs and the system crashes (fails over) with the error "mbuf exceed". This issue only occurs when HTTP AV inspection is configured. Devices configured for Web Filtering alone are unaffected by this issue. Affected releases are Junos OS on SRX Series: 12.1X46 versions prior to 12.1X46-D81; 12.3X48 versions prior to 12.3X48-D77; 15.1X49 versions prior to 15.1X49-D101, 15.1X49-D110.

  • Published: Jan 15, 2019
  • Updated: Apr 13, 2023
  • CVE: CVE-2019-0010
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:N/A:P

CWEs:

Software From Fixed in
juniper / junos 12.1x46-d60 12.1x46-d60.x
juniper / junos 12.1x46-d30 12.1x46-d30.x
juniper / junos 12.1x46-d45 12.1x46-d45.x
juniper / junos 12.1x46-d25 12.1x46-d25.x
juniper / junos 12.1x46 12.1x46.x
juniper / junos 12.1x46-d35 12.1x46-d35.x
juniper / junos 12.1x46-d20 12.1x46-d20.x
juniper / junos 12.1x46-d40 12.1x46-d40.x
juniper / junos 12.1x46-d15 12.1x46-d15.x
juniper / junos 12.1x46-d10 12.1x46-d10.x
juniper / junos 12.1x46-d55 12.1x46-d55.x
juniper / junos 12.3x48-d10 12.3x48-d10.x
juniper / junos 12.3x48-d15 12.3x48-d15.x
juniper / junos 12.3x48-d35 12.3x48-d35.x
juniper / junos 12.3x48-d50 12.3x48-d50.x
juniper / junos 12.3x48-d30 12.3x48-d30.x
juniper / junos 12.3x48-d25 12.3x48-d25.x
juniper / junos 12.3x48-d45 12.3x48-d45.x
juniper / junos 12.3x48-d55 12.3x48-d55.x
juniper / junos 12.3x48-d40 12.3x48-d40.x
juniper / junos 12.3x48-d60 12.3x48-d60.x
juniper / junos 12.3x48-d65 12.3x48-d65.x
juniper / junos 12.3x48-d70 12.3x48-d70.x
juniper / junos 12.3x48-d75 12.3x48-d75.x
juniper / junos 15.1x49-d50 15.1x49-d50.x
juniper / junos 15.1x49-d30 15.1x49-d30.x
juniper / junos 15.1x49-d70 15.1x49-d70.x
juniper / junos 15.1x49-d80 15.1x49-d80.x
juniper / junos 15.1x49-d60 15.1x49-d60.x
juniper / junos 15.1x49-d100 15.1x49-d100.x
juniper / junos 15.1x49-d35 15.1x49-d35.x
juniper / junos 15.1x49-d45 15.1x49-d45.x
juniper / junos 15.1x49-d75 15.1x49-d75.x
juniper / junos 15.1x49-d65 15.1x49-d65.x
juniper / junos 15.1x49-d90 15.1x49-d90.x
juniper / junos 15.1x49-d40 15.1x49-d40.x
juniper / junos 15.1x49-d20 15.1x49-d20.x
juniper / junos 15.1x49-d10 15.1x49-d10.x
juniper / junos 15.1x49-d55 15.1x49-d55.x