# Juniper Networks Junos OS Evolved. Every CVE that names Juniper Networks Junos OS Evolved among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Junos OS Evolved: Receipt of specifically malformed IPv6 packets causes kernel memory exhaustion leading to Denial of Service](https://agentprime.io/advisories/CVE-2025-21599.md) `CVE-2025-21599` · CVE record: Juniper Networks Junos OS Evolved · CVSS 8.7 High · Not analysed yet · Published 9 Jan 2025 · Tags: Denial of service - [Junos OS and Junos OS Evolved: On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to crash](https://agentprime.io/advisories/CVE-2025-21593.md) `CVE-2025-21593` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 9 Jan 2025 · Tags: CWE-664 - [Junos OS and Junos OS Evolved: BGP update message containing aggregator attribute with an ASN value of zero (0) is accepted](https://agentprime.io/advisories/CVE-2024-47507.md) `CVE-2024-47507` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-754 - [Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #3](https://agentprime.io/advisories/CVE-2024-47509.md) `CVE-2024-47509` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.1 High · Not analysed yet · Published 11 Oct 2024 · Tags: Denial of service - [Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #2](https://agentprime.io/advisories/CVE-2024-47508.md) `CVE-2024-47508` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.1 High · Not analysed yet · Published 11 Oct 2024 · Tags: Denial of service - [Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #1](https://agentprime.io/advisories/CVE-2024-47505.md) `CVE-2024-47505` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.1 High · Not analysed yet · Published 11 Oct 2024 · Tags: Denial of service - [Junos OS Evolved: TCP session state is not always cleared on the Routing Engine leading to DoS](https://agentprime.io/advisories/CVE-2024-47502.md) `CVE-2024-47502` · CVE record: Juniper Networks Junos OS Evolved · CVSS 8.7 High · Not analysed yet · Published 11 Oct 2024 · Tags: Denial of service - [Junos OS and Junos OS Evolved: In a BMP scenario receipt of a malformed AS PATH attribute can cause an RPD crash](https://agentprime.io/advisories/CVE-2024-47499.md) `CVE-2024-47499` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-754 - [Junos OS Evolved: QFX5000 Series: Configured MAC learning and move limits are not in effect](https://agentprime.io/advisories/CVE-2024-47498.md) `CVE-2024-47498` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.1 High · Not analysed yet · Published 11 Oct 2024 - [Junos OS Evolved: In a dual-RE scenario a locally authenticated attacker with shell privileges can take over the device.](https://agentprime.io/advisories/CVE-2024-47495.md) `CVE-2024-47495` · CVE record: Juniper Networks Junos OS Evolved · CVSS 8.4 High · Not analysed yet · Published 11 Oct 2024 · Tags: Broken access control - [Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP path attribute leads to an RPD crash](https://agentprime.io/advisories/CVE-2024-47491.md) `CVE-2024-47491` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.2 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-755 - [Junos OS Evolved: ACX 7000 Series: Receipt of specific transit MPLS packets causes resources to be exhausted](https://agentprime.io/advisories/CVE-2024-47490.md) `CVE-2024-47490` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.7 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-923 - [Junos OS Evolved: ACX Series: Receipt of specific transit protocol packets is incorrectly processed by the RE](https://agentprime.io/advisories/CVE-2024-47489.md) `CVE-2024-47489` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.9 Medium · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: cRPD: Receipt of crafted TCP traffic can trigger high CPU utilization](https://agentprime.io/advisories/CVE-2024-39547.md) `CVE-2024-39547` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-755 - [Junos OS Evolved: Low privileged local user able to view NETCONF traceoptions files](https://agentprime.io/advisories/CVE-2024-39544.md) `CVE-2024-39544` · CVE record: Juniper Networks Junos OS Evolved · CVSS 5.1 Medium · Not analysed yet · Published 11 Oct 2024 · Tags: Broken access control - [Junos OS Evolved: Connections to the network and broadcast address accepted](https://agentprime.io/advisories/CVE-2024-39534.md) `CVE-2024-39534` · CVE record: Juniper Networks Junos OS Evolved · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-697 - [Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11/LC9600, MX304, EX9200, PTX Series: Receipt of malformed DHCP packets causes interfaces to stop processing packets](https://agentprime.io/advisories/CVE-2024-39526.md) `CVE-2024-39526` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: When BGP traceoptions is enabled, receipt of specially crafted BGP packet causes RPD crash](https://agentprime.io/advisories/CVE-2024-39525.md) `CVE-2024-39525` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 9 Oct 2024 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash](https://agentprime.io/advisories/CVE-2024-39516.md) `CVE-2024-39516` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 9 Oct 2024 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: With BGP traceoptions enabled, receipt of specifically malformed BGP update causes RPD crash](https://agentprime.io/advisories/CVE-2024-39515.md) `CVE-2024-39515` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 9 Oct 2024 · Tags: CWE-1288 - [Junos OS Evolved: Receipt of arbitrary data when sampling service is enabled, leads to partial Denial of Service (DoS).](https://agentprime.io/advisories/CVE-2024-39553.md) `CVE-2024-39553` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.9 Medium · Not analysed yet · Published 11 Jul 2024 · Tags: Information disclosure - [Junos OS and Junos OS Evolved: Malformed BGP UPDATE causes RPD crash](https://agentprime.io/advisories/CVE-2024-39552.md) `CVE-2024-39552` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 11 Jul 2024 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to a memory leak](https://agentprime.io/advisories/CVE-2024-39549.md) `CVE-2024-39549` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 11 Jul 2024 · Tags: Denial of service - [Junos OS Evolved: Receipt of specific packets in the aftmand process will lead to a memory leak](https://agentprime.io/advisories/CVE-2024-39548.md) `CVE-2024-39548` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.1 High · Not analysed yet · Published 11 Jul 2024 · Tags: Denial of service - [Junos OS Evolved: Local low-privilege user can gain root permissions leading to privilege escalation](https://agentprime.io/advisories/CVE-2024-39546.md) `CVE-2024-39546` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.0 High · Not analysed yet · Published 11 Jul 2024 · Tags: Broken access control - [Junos OS and Junos OS Evolved: Receipt of a large RPKI-RTR PDU packet can cause rpd to crash](https://agentprime.io/advisories/CVE-2024-39543.md) `CVE-2024-39543` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 11 Jul 2024 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: A malformed CFM packet or specific transit traffic leads to FPC crash](https://agentprime.io/advisories/CVE-2024-39542.md) `CVE-2024-39542` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 11 Jul 2024 · Tags: CWE-1286 - [Junos OS and Junos OS Evolved: Inconsistent information in the TE database can lead to an rpd crash](https://agentprime.io/advisories/CVE-2024-39541.md) `CVE-2024-39541` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 11 Jul 2024 · Tags: CWE-755 - [Junos OS Evolved: ACX7000 Series: When multicast traffic with a specific (S,G) is received evo-pfemand crashes](https://agentprime.io/advisories/CVE-2024-39538.md) `CVE-2024-39538` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.1 High · Not analysed yet · Published 11 Jul 2024 · Tags: Memory corruption - [Junos OS Evolved: ACX7000 Series: Ports which have been inadvertently exposed can be reached over the network](https://agentprime.io/advisories/CVE-2024-39537.md) `CVE-2024-39537` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.9 Medium · Not analysed yet · Published 11 Jul 2024 · Tags: CWE-923 - [Junos OS and Junos OS Evolved: Flaps of BFD sessions with authentication cause a ppmd memory leak](https://agentprime.io/advisories/CVE-2024-39536.md) `CVE-2024-39536` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.0 Medium · Not analysed yet · Published 11 Jul 2024 · Tags: Denial of service - [Junos OS Evolved: ACX 7000 Series: When specific traffic is received in a VPLS scenario evo-pfemand crashes](https://agentprime.io/advisories/CVE-2024-39535.md) `CVE-2024-39535` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.1 High · Not analysed yet · Published 11 Jul 2024 · Tags: CWE-754 - [Junos OS and Junos OS Evolved: Confidential information in logs can be accessed by another user](https://agentprime.io/advisories/CVE-2024-39532.md) `CVE-2024-39532` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 11 Jul 2024 · Tags: Information disclosure - [Junos OS Evolved: ACX 7000 Series: Protocol specific DDoS configuration affects other protocols](https://agentprime.io/advisories/CVE-2024-39531.md) `CVE-2024-39531` · CVE record: Juniper Networks Junos OS Evolved · CVSS 8.7 High · Not analysed yet · Published 11 Jul 2024 · Tags: CWE-229 - [Junos OS and Junos OS Evolved: Concurrent deletion of a routing-instance and receipt of an SNMP request cause an RPD crash](https://agentprime.io/advisories/CVE-2024-39528.md) `CVE-2024-39528` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.0 Medium · Not analysed yet · Published 11 Jul 2024 · Tags: Memory corruption - [Junos OS Evolved: CLI parameter processing issue allows privilege escalation](https://agentprime.io/advisories/CVE-2024-39524.md) `CVE-2024-39524` · CVE record: Juniper Networks Junos OS Evolved · CVSS 8.5 High · Not analysed yet · Published 11 Jul 2024 · Tags: Command injection - [Junos OS Evolved: CLI parameter processing issue allows privilege escalation](https://agentprime.io/advisories/CVE-2024-39523.md) `CVE-2024-39523` · CVE record: Juniper Networks Junos OS Evolved · CVSS 8.5 High · Not analysed yet · Published 11 Jul 2024 · Tags: Command injection - [Junos OS Evolved: CLI parameter processing issue allows privilege escalation](https://agentprime.io/advisories/CVE-2024-39522.md) `CVE-2024-39522` · CVE record: Juniper Networks Junos OS Evolved · CVSS 8.5 High · Not analysed yet · Published 11 Jul 2024 · Tags: Command injection - [Junos OS Evolved: CLI parameter processing issue allows privilege escalation](https://agentprime.io/advisories/CVE-2024-39521.md) `CVE-2024-39521` · CVE record: Juniper Networks Junos OS Evolved · CVSS 8.5 High · Not analysed yet · Published 11 Jul 2024 · Tags: Command injection - [Junos OS Evolved: CLI parameter processing issue allows privilege escalation](https://agentprime.io/advisories/CVE-2024-39520.md) `CVE-2024-39520` · CVE record: Juniper Networks Junos OS Evolved · CVSS 8.5 High · Not analysed yet · Published 11 Jul 2024 · Tags: Command injection - [Junos OS Evolved: ACX 7000 Series: Multicast traffic is looped in a multihoming EVPN MPLS scenario](https://agentprime.io/advisories/CVE-2024-39519.md) `CVE-2024-39519` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.1 High · Not analysed yet · Published 11 Jul 2024 · Tags: CWE-754 - [Junos OS and Junos OS Evolved: Upon processing specific L2 traffic, rpd can hang in devices with EVPN/VXLAN configured](https://agentprime.io/advisories/CVE-2024-39517.md) `CVE-2024-39517` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 10 Jul 2024 · Tags: CWE-754 - [Junos OS and Junos OS Evolved: Receiving specific traffic on devices with EVPN-VPWS with IGMP-snooping enabled will cause the rpd to crash](https://agentprime.io/advisories/CVE-2024-39514.md) `CVE-2024-39514` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 10 Jul 2024 · Tags: CWE-703 - [Junos OS Evolved: Execution of a specific CLI command will cause a crash in the AFT manager](https://agentprime.io/advisories/CVE-2024-39513.md) `CVE-2024-39513` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.8 Medium · Not analysed yet · Published 10 Jul 2024 · Tags: CWE-20 - [Junos OS Evolved: User is not logged out when the console cable is disconnected](https://agentprime.io/advisories/CVE-2024-39512.md) `CVE-2024-39512` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.0 High · Not analysed yet · Published 10 Jul 2024 · Tags: CWE-1263 - [Junos OS Evolved: A high rate of SSH connections causes a Denial of Service](https://agentprime.io/advisories/CVE-2024-39562.md) `CVE-2024-39562` · CVE record: Juniper Networks Junos OS Evolved · CVSS 8.7 High · Not analysed yet · Published 10 Jul 2024 · Tags: Denial of service - [Junos OS and Junos OS Evolved: Memory leak due to RSVP neighbor persistent error leading to kernel crash](https://agentprime.io/advisories/CVE-2024-39560.md) `CVE-2024-39560` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 10 Jul 2024 · Tags: CWE-755 - [Junos OS Evolved: Receipt of a specific TCP packet may result in a system crash (vmcore) on dual RE systems with NSR enabled](https://agentprime.io/advisories/CVE-2024-39559.md) `CVE-2024-39559` · CVE record: Juniper Networks Junos OS Evolved · CVSS 8.2 High · Not analysed yet · Published 10 Jul 2024 · Tags: CWE-754 - [Junos OS and Junos OS Evolved: Receipt of specific PIM packet causes rpd crash when PIM is configured along with MoFRR](https://agentprime.io/advisories/CVE-2024-39558.md) `CVE-2024-39558` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 10 Jul 2024 · Tags: CWE-252 - [Junos OS Evolved: MAC table changes cause a memory leak](https://agentprime.io/advisories/CVE-2024-39557.md) `CVE-2024-39557` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.1 High · Not analysed yet · Published 10 Jul 2024 · Tags: Denial of service - [Junos OS and Junos OS Evolved: Loading a malicious certificate from the CLI may result in a stack-based overflow](https://agentprime.io/advisories/CVE-2024-39556.md) `CVE-2024-39556` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 10 Jul 2024 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP update causes the session to reset](https://agentprime.io/advisories/CVE-2024-39555.md) `CVE-2024-39555` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 10 Jul 2024 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: BGP multipath incremental calculation is resulting in an rpd crash](https://agentprime.io/advisories/CVE-2024-39554.md) `CVE-2024-39554` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.2 High · Not analysed yet · Published 10 Jul 2024 · Tags: Race condition - [Junos OS and Junos OS Evolved: l2cpd crash upon receipt of a specific TLV](https://agentprime.io/advisories/CVE-2024-30380.md) `CVE-2024-30380` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 16 Apr 2024 · Tags: CWE-755 - [Junos OS Evolved: When MAC learning happens, and an interface gets flapped, the PFE crashes](https://agentprime.io/advisories/CVE-2024-30403.md) `CVE-2024-30403` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.1 High · Not analysed yet · Published 12 Apr 2024 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: The l2ald crashes on receiving telemetry messages from a specific subscription](https://agentprime.io/advisories/CVE-2024-30402.md) `CVE-2024-30402` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.2 High · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-754 - [Junos OS Evolved: Connection limits is not being enforced while the resp. rate limit is being enforced](https://agentprime.io/advisories/CVE-2024-30390.md) `CVE-2024-30390` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.9 Medium · Not analysed yet · Published 12 Apr 2024 · Tags: Authentication bypass - [Junos OS and Junos OS Evolved: In a EVPN-VXLAN scenario state changes on adjacent systems can cause an l2ald process crash](https://agentprime.io/advisories/CVE-2024-30386.md) `CVE-2024-30386` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 12 Apr 2024 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: RPD crash when CoS-based forwarding (CBF) policy is configured](https://agentprime.io/advisories/CVE-2024-30382.md) `CVE-2024-30382` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: A specific EVPN type-5 route causes rpd crash](https://agentprime.io/advisories/CVE-2024-30394.md) `CVE-2024-30394` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 12 Apr 2024 · Tags: Memory corruption Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .