# Juniper Networks Junos OS Evolved. Every CVE that names Juniper Networks Junos OS Evolved among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash](https://agentprime.io/advisories/CVE-2024-30395.md) `CVE-2024-30395` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-1287 - [Junos OS Evolved: ACX Series with Paragon Active Assurance Test Agent: A local high privileged attacker can recover other administrators credentials](https://agentprime.io/advisories/CVE-2024-30406.md) `CVE-2024-30406` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.7 Medium · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-313 - [Junos OS and Junos OS Evolved: Higher CPU consumption on routing engine leads to Denial of Service (DoS).](https://agentprime.io/advisories/CVE-2024-30409.md) `CVE-2024-30409` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-754 - [Junos OS and Junos OS Evolved: When LLDP is enabled and a malformed LLDP packet is received, l2cpd crashes](https://agentprime.io/advisories/CVE-2024-21618.md) `CVE-2024-21618` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 12 Apr 2024 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: A low-privileged user can access confidential information](https://agentprime.io/advisories/CVE-2024-21615.md) `CVE-2024-21615` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 12 Apr 2024 · Tags: Broken access control - [Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash](https://agentprime.io/advisories/CVE-2024-21598.md) `CVE-2024-21598` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-1286 - [Junos OS Evolved: Packets which are not destined to the device can reach the RE](https://agentprime.io/advisories/CVE-2024-21590.md) `CVE-2024-21590` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.1 High · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-20 - [Junos OS and Junos OS Evolved: A specific query via DREND causes rpd crash](https://agentprime.io/advisories/CVE-2024-21614.md) `CVE-2024-21614` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2024 · Tags: CWE-754 - [Junos OS and Junos OS Evolved: A link flap causes patroot memory leak which leads to rpd crash](https://agentprime.io/advisories/CVE-2024-21613.md) `CVE-2024-21613` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Jan 2024 · Tags: Denial of service - [Junos OS Evolved: Specific TCP traffic causes OFP core and restart of RE](https://agentprime.io/advisories/CVE-2024-21612.md) `CVE-2024-21612` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2024 · Tags: CWE-228 - [Junos OS and Junos OS Evolved: In a jflow scenario continuous route churn will cause a memory leak and eventually an rpd crash](https://agentprime.io/advisories/CVE-2024-21611.md) `CVE-2024-21611` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2024 · Tags: Denial of service - [Junos OS Evolved: A high rate of specific traffic will cause a complete system outage](https://agentprime.io/advisories/CVE-2024-21604.md) `CVE-2024-21604` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2024 · Tags: Denial of service - [Junos OS Evolved: ACX7024, ACX7100-32C and ACX7100-48L: Traffic stops when a specific IPv4 UDP packet is received by the RE](https://agentprime.io/advisories/CVE-2024-21602.md) `CVE-2024-21602` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2024 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: A specific BGP UPDATE message will cause a crash in the backup Routing Engine in NSR-enabled devices](https://agentprime.io/advisories/CVE-2024-21596.md) `CVE-2024-21596` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 12 Jan 2024 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: BGP session flaps on NSR-enabled devices can cause rpd crash](https://agentprime.io/advisories/CVE-2024-21585.md) `CVE-2024-21585` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 12 Jan 2024 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: The rpd will crash upon receiving a malformed BGP UPDATE message](https://agentprime.io/advisories/CVE-2023-44204.md) `CVE-2023-44204` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: CWE-1286 - [Junos OS and Junos OS Evolved: A local attacker can retrieve sensitive information and elevate privileges on the device to an authorized user.](https://agentprime.io/advisories/CVE-2023-44201.md) `CVE-2023-44201` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.0 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: Broken access control - [Junos OS and Junos OS Evolved: An rpd crash may occur when BGP is processing newly learned routes](https://agentprime.io/advisories/CVE-2023-44197.md) `CVE-2023-44197` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 12 Oct 2023 · Tags: Memory corruption - [Junos OS Evolved: PTX10003 Series: Packets which are not destined to the router can reach the RE](https://agentprime.io/advisories/CVE-2023-44196.md) `CVE-2023-44196` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.5 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: CWE-754 - [Junos OS Evolved: Packets which are not destined to the router can reach the RE](https://agentprime.io/advisories/CVE-2023-44195.md) `CVE-2023-44195` · CVE record: Juniper Networks Junos OS Evolved · CVSS 5.4 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: CWE-923 - [Junos OS and Junos OS Evolved: In an BGP scenario RPD crashes upon receiving and processing a specific malformed ISO VPN BGP UPDATE packet](https://agentprime.io/advisories/CVE-2023-44185.md) `CVE-2023-44185` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 12 Oct 2023 · Tags: CWE-20 - [Junos OS and Junos OS Evolved: High CPU load due to specific NETCONF command](https://agentprime.io/advisories/CVE-2023-44184.md) `CVE-2023-44184` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: An Unchecked Return Value in multiple users interfaces affects confidentiality and integrity of device operations](https://agentprime.io/advisories/CVE-2023-44182.md) `CVE-2023-44182` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.3 High · Not analysed yet · Published 12 Oct 2023 · Tags: CWE-252 - [Junos OS and Junos OS Evolved: Stack overflow vulnerability in CLI command processing](https://agentprime.io/advisories/CVE-2023-44177.md) `CVE-2023-44177` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: Receipt of a specific genuine PIM packet causes RPD crash](https://agentprime.io/advisories/CVE-2023-44175.md) `CVE-2023-44175` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: Denial of service - [Junos OS and Junos OS Evolved: An l2cpd crash will occur when specific LLDP packets are received](https://agentprime.io/advisories/CVE-2023-36839.md) `CVE-2023-36839` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: CWE-1284 - [Junos OS Evolved: PTX10001, PTX10004, PTX10008, PTX10016: MAC address validation bypass vulnerability](https://agentprime.io/advisories/CVE-2023-44190.md) `CVE-2023-44190` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.1 Medium · Not analysed yet · Published 11 Oct 2023 · Tags: CWE-346 - [Junos OS Evolved: PTX10003 Series: MAC address validation bypass vulnerability](https://agentprime.io/advisories/CVE-2023-44189.md) `CVE-2023-44189` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.1 Medium · Not analysed yet · Published 11 Oct 2023 · Tags: CWE-346 - [Junos OS Evolved: 'file copy' CLI command can disclose password to shell users](https://agentprime.io/advisories/CVE-2023-44187.md) `CVE-2023-44187` · CVE record: Juniper Networks Junos OS Evolved · CVSS 5.9 Medium · Not analysed yet · Published 11 Oct 2023 · Tags: Information disclosure - [Junos OS and Junos OS Evolved: RPD crash when attempting to send a very long AS PATH to a non-4-byte-AS capable BGP neighbor](https://agentprime.io/advisories/CVE-2023-44186.md) `CVE-2023-44186` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 11 Oct 2023 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: The l2cpd will crash when a malformed LLDP packet is received](https://agentprime.io/advisories/CVE-2023-36849.md) `CVE-2023-36849` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jul 2023 · Tags: CWE-703 - [Junos OS and Junos OS Evolved: An rpd crash occurs when a specific L2VPN command is run](https://agentprime.io/advisories/CVE-2023-36840.md) `CVE-2023-36840` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jul 2023 · Tags: Denial of service - [Junos OS and Junos OS Evolved: In a MoFRR scenario an rpd core may be observed when a low privileged CLI command is executed](https://agentprime.io/advisories/CVE-2023-36836.md) `CVE-2023-36836` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 4.7 Medium · Not analysed yet · Published 14 Jul 2023 · Tags: Memory corruption - [Junos OS Evolved: PTX10001-36MR, and PTX10004, PTX10008, PTX10016 with LC1201/1202: The aftman-bt process will crash in a MoFRR scenario after multiple link flaps](https://agentprime.io/advisories/CVE-2023-36833.md) `CVE-2023-36833` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.5 Medium · Not analysed yet · Published 14 Jul 2023 · Tags: Memory corruption - [2023-06: Out-of-Cycle Security Bulletin: Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute](https://agentprime.io/advisories/CVE-2023-0026.md) `CVE-2023-0026` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 21 Jun 2023 · Tags: CWE-20 - [Junos OS Evolved: Shell Injection vulnerability in the gNOI server](https://agentprime.io/advisories/CVE-2023-28983.md) `CVE-2023-28983` · CVE record: Juniper Networks Junos OS Evolved · CVSS 8.8 High · Not analysed yet · Published 17 Apr 2023 · Tags: Command injection - [Junos OS and Junos OS Evolved: In a BGP rib sharding scenario when a route is frequently updated an rpd memory leak will occur](https://agentprime.io/advisories/CVE-2023-28982.md) `CVE-2023-28982` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 17 Apr 2023 · Tags: Denial of service - [Junos OS and Junos OS Evolved: If malformed IPv6 router advertisements are received, memory corruption will occur which causes an rpd crash](https://agentprime.io/advisories/CVE-2023-28981.md) `CVE-2023-28981` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 17 Apr 2023 · Tags: CWE-20 - [Junos OS and Junos OS Evolved: In a BGP rib sharding scenario an rpd crash will happen shortly after a specific CLI command is issued](https://agentprime.io/advisories/CVE-2023-28980.md) `CVE-2023-28980` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 17 Apr 2023 · Tags: Memory corruption - [Junos OS Evolved: Read access to some confidential user information is possible](https://agentprime.io/advisories/CVE-2023-28978.md) `CVE-2023-28978` · CVE record: Juniper Networks Junos OS Evolved · CVSS 5.3 Medium · Not analysed yet · Published 17 Apr 2023 · Tags: CWE-1188 - [Junos OS Evolved: The 'sysmanctl' shell command allows a local user to gain access to some administrative actions](https://agentprime.io/advisories/CVE-2023-28973.md) `CVE-2023-28973` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.1 High · Not analysed yet · Published 17 Apr 2023 · Tags: Broken access control - [Junos OS and Junos OS Evolved: An attacker sending genuine BGP packets causes an RPD crash](https://agentprime.io/advisories/CVE-2023-28967.md) `CVE-2023-28967` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 17 Apr 2023 · Tags: Memory corruption - [Junos OS Evolved: Local low-privileged user with shell access can execute CLI commands as root](https://agentprime.io/advisories/CVE-2023-28966.md) `CVE-2023-28966` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.8 High · Not analysed yet · Published 17 Apr 2023 · Tags: Broken access control - [Junos OS and Junos OS Evolved: Malformed BGP flowspec update causes RPD crash](https://agentprime.io/advisories/CVE-2023-28964.md) `CVE-2023-28964` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 17 Apr 2023 · Tags: CWE-130 - [Junos OS Evolved: Docker repository is world-writeable, allowing low-privileged local user to inject files into Docker containers](https://agentprime.io/advisories/CVE-2023-28960.md) `CVE-2023-28960` · CVE record: Juniper Networks Junos OS Evolved · CVSS 8.2 High · Not analysed yet · Published 17 Apr 2023 · Tags: Broken access control - [Junos OS and Junos OS Evolved: An RPD crash can happen due to an MPLS TE tunnel configuration change on a directly connected router](https://agentprime.io/advisories/CVE-2023-22407.md) `CVE-2023-22407` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Jan 2023 · Tags: CWE-459 - [Junos OS and Junos OS Evolved: A memory leak which will ultimately lead to an rpd crash will be observed when a peer interface flaps continuously in a Segment Routing scenario using OSPF](https://agentprime.io/advisories/CVE-2023-22406.md) `CVE-2023-22406` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Jan 2023 · Tags: Denial of service - [Junos OS Evolved: The kernel might restart in a BGP scenario where "bgp auto-discovery" is enabled and such a neighbor flaps](https://agentprime.io/advisories/CVE-2023-22402.md) `CVE-2023-22402` · CVE record: Juniper Networks Junos OS Evolved · CVSS 5.9 Medium · Not analysed yet · Published 12 Jan 2023 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: PTX10008, PTX10016: When a specific SNMP MIB is queried the FPC will crash](https://agentprime.io/advisories/CVE-2023-22401.md) `CVE-2023-22401` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2023 · Tags: CWE-129 - [Junos OS Evolved: A specific SNMP GET operation and a specific CLI commands cause resources to leak and eventually the evo-pfemand process will crash](https://agentprime.io/advisories/CVE-2023-22400.md) `CVE-2023-22400` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2023 · Tags: Denial of service - [Junos OS and Junos OS Evolved: RPD might crash when MPLS ping is performed on BGP LSPs](https://agentprime.io/advisories/CVE-2023-22398.md) `CVE-2023-22398` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 12 Jan 2023 · Tags: Memory corruption - [Junos OS Evolved: PTX10003: An attacker sending specific genuine packets will cause a memory leak in the PFE leading to a Denial of Service](https://agentprime.io/advisories/CVE-2023-22397.md) `CVE-2023-22397` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.1 Medium · Not analysed yet · Published 12 Jan 2023 · Tags: Race condition, Denial of service - [Junos OS and Junos OS Evolved: RPD crash upon receipt of BGP route with invalid next-hop](https://agentprime.io/advisories/CVE-2023-22393.md) `CVE-2023-22393` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2023 · Tags: CWE-358, CWE-754 - [Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute in version 22.3R1](https://agentprime.io/advisories/CVE-2022-22184.md) `CVE-2022-22184` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 23 Dec 2022 · Tags: CWE-20 - [Junos OS and Junos OS Evolved: An FPC crash might be seen due to an EVPN MAC entry moving from local to remote](https://agentprime.io/advisories/CVE-2022-22250.md) `CVE-2022-22250` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-664 - [Junos OS Evolved: Incorrect file permissions can allow low-privileged user to cause another user to execute arbitrary commands](https://agentprime.io/advisories/CVE-2022-22248.md) `CVE-2022-22248` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.3 High · Not analysed yet · Published 18 Oct 2022 · Tags: Broken access control - [Junos OS Evolved: Kernel processing of unvalidated TCP segments could lead to a Denial of Service (DoS)](https://agentprime.io/advisories/CVE-2022-22247.md) `CVE-2022-22247` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.5 High · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-20 - [Junos OS and Junos OS Evolved: An rpd memory leak might be observed while running a specific cli command in a RIB sharding scenario](https://agentprime.io/advisories/CVE-2022-22240.md) `CVE-2022-22240` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: Denial of service - [Junos OS Evolved: The ssh CLI command always runs as root which can lead to privilege escalation](https://agentprime.io/advisories/CVE-2022-22239.md) `CVE-2022-22239` · CVE record: Juniper Networks Junos OS Evolved · CVSS 8.2 High · Not analysed yet · Published 18 Oct 2022 · Tags: Privilege escalation - [Junos OS and Junos OS Evolved: The rpd process will crash when a malformed incoming RESV message is processed](https://agentprime.io/advisories/CVE-2022-22238.md) `CVE-2022-22238` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-754 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .