CVE-2019-0052

The srxpfe process may crash on SRX Series services gateways when the UTM module processes a specific fragmented HTTP packet. The packet is misinterpreted as a regular TCP packet which causes the processor to crash. This issue affects all SRX Series platforms that support URL-Filtering and have web-filtering enabled. Affected releases are Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D85 on SRX Series; 15.1X49 versions prior to 15.1X49-D181, 15.1X49-D190 on SRX Series; 17.3 versions on SRX Series; 17.4 versions prior to 17.4R1-S8, 17.4R2-S5, 17.4R3 on SRX Series; 18.1 versions prior to 18.1R3-S6 on SRX Series; 18.2 versions prior to 18.2R2-S1, 18.2R3 on SRX Series; 18.3 versions prior to 18.3R1-S2, 18.3R2 on SRX Series; 18.4 versions prior to 18.4R1-S1, 18.4R2 on SRX Series.

The srxpfe process may crash on SRX Series services gateways when the UTM module processes a specific fragmented HTTP packet. The packet is misinterpreted as a regular TCP packet which causes the processor to crash. This issue affects all SRX Series platforms that support URL-Filtering and have web-filtering enabled. Affected releases are Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D85 on SRX Series; 15.1X49 versions prior to 15.1X49-D181, 15.1X49-D190 on SRX Series; 17.3 versions on SRX Series; 17.4 versions prior to 17.4R1-S8, 17.4R2-S5, 17.4R3 on SRX Series; 18.1 versions prior to 18.1R3-S6 on SRX Series; 18.2 versions prior to 18.2R2-S1, 18.2R3 on SRX Series; 18.3 versions prior to 18.3R1-S2, 18.3R2 on SRX Series; 18.4 versions prior to 18.4R1-S1, 18.4R2 on SRX Series.

El proceso srxpfe puede bloquearse en los gateways de servicios de la serie SRX cuando el módulo UTM procesa un paquete HTTP fragmentado específico. El paquete es malinterpretado como un paquete TCP regular lo que causa que el procesador se bloquee. Este problema afecta a todas las plataformas de la serie SRX que admiten el Filtrado de URL y tienen habilitado el filtrado web. Las versiones afectadas son Junos OS de Juniper Networks : versiones 12.3X48 anteriores a 12.3X48-D85 en la serie SRX; versiones 15.1X49 anteriores a 15.1X49-D181,15.1X49-D190 en la serie SRX; versión 17.3 en la serie SRX; versiones 17.4 anteriores a 17.4R1-S8, 17.4R2-S5, 17.4R3 en la serie SRX; versiones 18.1 anteriores a 18.1R3-S6 en la serie SRX; versiones 18.2 anteriores a 18.2R2-S1, 18.2R3 en la serie SRX; versiones 18.3 anteriores a 18.3R1-S2, 18.3R2 en la serie SRX; versiones 18.4 anteriores a 18.4R1-S1, 18.4R2 en la serie SRX.