CVE-2019-0055 describes a Denial of Service (DoS) vulnerability in the SIP ALG packet processing service of Juniper Networks Junos OS, affecting various versions on SRX Series devices. An unauthenticated attacker can trigger a flowd process crash and core dump by sending specific valid SIP traffic, leading to a sustained DoS. With a CVSS score of 7.5 (HIGH), this vulnerability is network-exploitable with low attack complexity, resulting in high availability impact. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 15.1X49, < 15.1X49-D130CPE match | cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:* | ||
>= 17.3, < 17.3R3CPE match | cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:* | ||
>= 17.4, < 17.4R2CPE match | cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:* | ||
12.3x48CPE matchmatch criteria | cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:* | ||
12.3x48CPE matchmatch criteria | cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.