{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2019-0060",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2019-0060",
    "idYear": 2019,
    "status": "PUBLISHED",
    "publishedAt": "2019-10-09T19:26:17.576Z",
    "updatedAt": "2024-09-16T20:51:54.618Z",
    "importedAt": "2026-10-24T01:56:04.670Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "Junos OS: SRX Series: flowd process crash due to processing of specific transit IP packets",
      "summary": "The flowd process, responsible for forwarding traffic in SRX Series services gateways, may crash and restart when processing specific transit IP packets through an IPSec tunnel. Continued processing of these packets may result in an extended Denial of Service (DoS) condition. This issue only occurs when IPSec tunnels are configured. Systems without IPSec tunnel configurations are not vulnerable to this issue. This issue affects Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D171, 15.1X49-D180 on SRX Series; 18.2 versions 18.2R2-S1 and later, prior to 18.2R3 on SRX Series; 18.4 versions prior to 18.4R2 on SRX Series.",
      "affected": [
        {
          "vendor": "Juniper Networks",
          "product": "Junos OS",
          "platforms": [
            "SRX Series"
          ],
          "versions": [
            {
              "version": "15.1X49",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "15.1X49-D171, 15.1X49-D180"
            },
            {
              "version": "18.2R2-S1",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "18.2*",
              "changes": [
                {
                  "at": "18.2R3",
                  "status": "unaffected"
                }
              ]
            },
            {
              "version": "18.4",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "18.4R2"
            }
          ]
        }
      ]
    }
  }
}