# Juniper Networks Junos OS Evolved.

Every CVE that names Juniper Networks Junos OS Evolved among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Junos OS and Junos OS Evolved: In an SR to LDP interworking scenario, with SRMS, when a specific low privileged command is issued on an ABR rpd will crash](https://agentprime.io/advisories/CVE-2022-22233.md)
  `CVE-2022-22233` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-690
- [Junos OS and Junos OS Evolved: RPD crash upon receipt of specific OSPFv3 LSAs](https://agentprime.io/advisories/CVE-2022-22230.md)
  `CVE-2022-22230` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-20
- [Junos OS Evolved: ACX7000 Series: Specific IPv6 transit traffic gets exceptioned to the routing-engine which causes increased CPU utilization](https://agentprime.io/advisories/CVE-2022-22227.md)
  `CVE-2022-22227` · CVE record: Juniper Networks Junos OS Evolved · CVSS 5.3 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-754
- [Junos OS and Junos OS Evolved: In a BGP multipath scenario, when one of the contributing routes is flapping often and rapidly, rpd may crash](https://agentprime.io/advisories/CVE-2022-22225.md)
  `CVE-2022-22225` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: Race condition
- [Junos OS and Junos OS Evolved: PPMD goes into infinite loop upon receipt of malformed OSPF TLV](https://agentprime.io/advisories/CVE-2022-22224.md)
  `CVE-2022-22224` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-703
- [Junos OS and Junos OS Evolved: Due to a race condition the rpd process can crash upon receipt of a BGP update message containing flow spec route](https://agentprime.io/advisories/CVE-2022-22220.md)
  `CVE-2022-22220` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: Race condition
- [Junos OS and Junos OS Evolved: RPD core upon receipt of a specific EVPN route by a BGP route reflector in an EVPN environment](https://agentprime.io/advisories/CVE-2022-22219.md)
  `CVE-2022-22219` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-241
- [Junos OS Evolved: PTX Series: Multiple FPCs become unreachable due to continuous polling of specific SNMP OID](https://agentprime.io/advisories/CVE-2022-22211.md)
  `CVE-2022-22211` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.5 High · Not analysed yet · Published 18 Oct 2022 · Tags: Denial of service
- [Junos OS and Junos OS Evolved: An rpd crash can occur due to memory corruption caused by flapping BGP sessions](https://agentprime.io/advisories/CVE-2022-22208.md)
  `CVE-2022-22208` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 18 Oct 2022 · Tags: Memory corruption
- [Junos OS Evolved: PTX Series: An attacker can cause a kernel panic by sending a malformed TCP packet to the device](https://agentprime.io/advisories/CVE-2022-22192.md)
  `CVE-2022-22192` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.5 High · Not analysed yet · Published 18 Oct 2022 · Tags: CWE-1286
- [Junos OS and Junos OS Evolved: /var/run/\<pid>.env files are potentially not deleted during termination of a gRPC connection causing inode exhaustion](https://agentprime.io/advisories/CVE-2022-22215.md)
  `CVE-2022-22215` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Jul 2022
- [Junos OS and Junos OS Evolved: In an MPLS scenario upon receipt of a specific IPv6 packet an FPC will crash](https://agentprime.io/advisories/CVE-2022-22214.md)
  `CVE-2022-22214` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 20 Jul 2022 · Tags: CWE-20
- [Junos OS and Junos OS Evolved: Denial of Service (DoS) vulnerability in RPD upon receipt of specific BGP update](https://agentprime.io/advisories/CVE-2022-22213.md)
  `CVE-2022-22213` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 20 Jul 2022 · Tags: CWE-232
- [Junos OS Evolved: A high rate of specific hostbound traffic will cause unexpected hostbound traffic delays or drops](https://agentprime.io/advisories/CVE-2022-22212.md)
  `CVE-2022-22212` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.5 High · Not analysed yet · Published 20 Jul 2022 · Tags: Denial of service
- [Junos OS and Junos OS Evolved: An rpd core will be observed with proxy BGP route-target filtering enabled and certain route add and delete event happening](https://agentprime.io/advisories/CVE-2022-22197.md)
  `CVE-2022-22197` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 14 Apr 2022 · Tags: CWE-672
- [Junos OS and Junos OS Evolved: The rpd CPU spikes to 100% after a malformed ISIS TLV has been received](https://agentprime.io/advisories/CVE-2022-22196.md)
  `CVE-2022-22196` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Apr 2022 · Tags: CWE-754
- [Junos OS Evolved: Specific packets reaching the RE lead to a counter overflow and eventually a crash](https://agentprime.io/advisories/CVE-2022-22195.md)
  `CVE-2022-22195` · CVE record: Juniper Networks Junos OS Evolved and 1 more · CVSS 7.5 High · Not analysed yet · Published 14 Apr 2022 · Tags: CWE-911
- [Junos OS Evolved: PTX series: An attacker sending a crafted GRE packet will cause the PFE to restart](https://agentprime.io/advisories/CVE-2022-22194.md)
  `CVE-2022-22194` · CVE record: Juniper Networks Junos OS Evolved and 1 more · CVSS 7.5 High · Not analysed yet · Published 14 Apr 2022 · Tags: CWE-754
- [Junos OS and Junos OS Evolved: In a BGP rib-sharding scenario when a certain CLI command is executed the rpd process might crash](https://agentprime.io/advisories/CVE-2022-22193.md)
  `CVE-2022-22193` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Apr 2022 · Tags: CWE-241
- [Junos OS Evolved: A remote attacker may cause a CPU Denial of Service by sending genuine traffic to a device on a specific IPv4 port.](https://agentprime.io/advisories/CVE-2022-22183.md)
  `CVE-2022-22183` · CVE record: Juniper Networks Junos OS Evolved and 1 more · CVSS 7.5 High · Not analysed yet · Published 14 Apr 2022 · Tags: Information disclosure, Broken access control, CWE-16
- [Junos OS and Junos OS Evolved: After receiving a specific number of crafted packets snmpd will segmentation fault (SIGSEGV) requiring a manual restart.](https://agentprime.io/advisories/CVE-2022-22177.md)
  `CVE-2022-22177` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 19 Jan 2022 · Tags: CWE-755
- [Junos OS and Junos OS Evolved: An l2cpd memory leak can occur when specific LLDP packets are received leading to a DoS](https://agentprime.io/advisories/CVE-2022-22172.md)
  `CVE-2022-22172` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 19 Jan 2022 · Tags: Denial of service
- [Junos OS and Junos OS Evolved: OSPFv3 session might go into INIT state upon receipt of multiple crafted packets from a trusted neighbor device.](https://agentprime.io/advisories/CVE-2022-22169.md)
  `CVE-2022-22169` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 19 Jan 2022 · Tags: CWE-665
- [Junos OS Evolved: Telnet service may be enabled when it is expected to be disabled.](https://agentprime.io/advisories/CVE-2022-22164.md)
  `CVE-2022-22164` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.5 Medium · Not analysed yet · Published 19 Jan 2022 · Tags: CWE-665
- [Junos OS: An attacker sending crafted packets can cause a traffic and CPU Denial of Service (DoS).](https://agentprime.io/advisories/CVE-2022-22159.md)
  `CVE-2022-22159` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 19 Jan 2022
- [Junos OS and Junos OS Evolved: In Point to MultiPoint (P2MP) scenarios receipt of various crafted packets causes RPD to core.](https://agentprime.io/advisories/CVE-2021-31383.md)
  `CVE-2021-31383` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 19 Oct 2021 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: RPD crash while processing a specially crafted BGP UPDATE or KEEPALIVE message.](https://agentprime.io/advisories/CVE-2021-31374.md)
  `CVE-2021-31374` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 19 Oct 2021 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: Receipt of a specific LDP message will cause a Denial of Service](https://agentprime.io/advisories/CVE-2021-31363.md)
  `CVE-2021-31363` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 19 Oct 2021 · Tags: Denial of service
- [Junos OS and Junos OS Evolved: An IS-IS adjacency might be taken down if a bad hello PDU is received for an existing adjacency causing a DoS](https://agentprime.io/advisories/CVE-2021-31362.md)
  `CVE-2021-31362` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 19 Oct 2021 · Tags: CWE-693
- [Junos OS and Junos OS Evolved: Denial of Service vulnerability in local file processing](https://agentprime.io/advisories/CVE-2021-31360.md)
  `CVE-2021-31360` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 19 Oct 2021 · Tags: Privilege escalation, CWE-20
- [Junos OS and Junos OS Evolved: Local Privilege Escalation vulnerability](https://agentprime.io/advisories/CVE-2021-31359.md)
  `CVE-2021-31359` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.8 High · Not analysed yet · Published 19 Oct 2021 · Tags: Memory corruption, Privilege escalation
- [Junos OS Evolved: shell-injection vulnerabilities in evo_sftp UI wrapper script](https://agentprime.io/advisories/CVE-2021-31358.md)
  `CVE-2021-31358` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.8 High · Not analysed yet · Published 19 Oct 2021 · Tags: Command injection
- [Junos OS Evolved: shell-injection vulnerabilities in evo_tcpdump UI wrapper script](https://agentprime.io/advisories/CVE-2021-31357.md)
  `CVE-2021-31357` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.8 High · Not analysed yet · Published 19 Oct 2021 · Tags: Command injection
- [Junos OS Evolved: Multiple shell-injection vulnerabilities in EVO UI wrapper scripts](https://agentprime.io/advisories/CVE-2021-31356.md)
  `CVE-2021-31356` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.8 High · Not analysed yet · Published 19 Oct 2021 · Tags: Command injection
- [Junos OS and Junos OS Evolved: A vulnerability in the Juniper Agile License Client may allow an attacker to perform Remote Code Execution (RCE)](https://agentprime.io/advisories/CVE-2021-31354.md)
  `CVE-2021-31354` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 19 Oct 2021 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: RPD core upon receipt of specific BGP update](https://agentprime.io/advisories/CVE-2021-31353.md)
  `CVE-2021-31353` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 19 Oct 2021 · Tags: CWE-755
- [Junos OS and Junos OS Evolved: Privilege escalation vulnerability in Juniper Extension Toolkit (JET)](https://agentprime.io/advisories/CVE-2021-31350.md)
  `CVE-2021-31350` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 19 Oct 2021 · Tags: Privilege escalation
- [Junos OS Evolved: PTX10003, PTX10008: picd core while executing the "show chassis pic" command under certain conditions](https://agentprime.io/advisories/CVE-2021-0298.md)
  `CVE-2021-0298` · CVE record: Juniper Networks Junos OS Evolved · CVSS 4.7 Medium · Not analysed yet · Published 19 Oct 2021 · Tags: Race condition
- [Junos OS Evolved: BGP and LDP sessions with TCP MD5 authentication established with peers not configured for authentication](https://agentprime.io/advisories/CVE-2021-0297.md)
  `CVE-2021-0297` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.5 Medium · Not analysed yet · Published 19 Oct 2021 · Tags: CWE-755
- [Junos OS Evolved: Memory leak in arpd or ndp processes can lead to Denial of Service (DoS)](https://agentprime.io/advisories/CVE-2021-0292.md)
  `CVE-2021-0292` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.5 Medium · Not analysed yet · Published 15 Jul 2021 · Tags: Denial of service
- [Junos OS and Junos OS Evolved: A vulnerability allows a network based unauthenticated attacker which sends a high rate of specific traffic to cause a partial Denial of Service](https://agentprime.io/advisories/CVE-2021-0291.md)
  `CVE-2021-0291` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 15 Jul 2021 · Tags: Information disclosure
- [Junos OS: User-defined ARP Policer isn't applied on Aggregated Ethernet (AE) interface until firewall process is restarted](https://agentprime.io/advisories/CVE-2021-0289.md)
  `CVE-2021-0289` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 15 Jul 2021 · Tags: Race condition
- [Junos OS and Junos OS Evolved: RPD could crash in SR-ISIS/MPLS environment due to a flap of an ISIS link in the network](https://agentprime.io/advisories/CVE-2021-0287.md)
  `CVE-2021-0287` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 15 Jul 2021 · Tags: CWE-754
- [Junos OS Evolved: Specially crafted packets may cause the AFT manager process to crash and restart](https://agentprime.io/advisories/CVE-2021-0286.md)
  `CVE-2021-0286` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.5 High · Not analysed yet · Published 15 Jul 2021 · Tags: CWE-703
- [Junos OS and Junos OS Evolved: Specific packets can trigger rpd crash when BGP Origin Validation is configured with RPKI](https://agentprime.io/advisories/CVE-2021-0281.md)
  `CVE-2021-0281` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 15 Jul 2021 · Tags: CWE-754
- [Junos OS and Junos OS Evolved: LLDP Out-of-Bounds Read vulnerability in l2cpd](https://agentprime.io/advisories/CVE-2021-0277.md)
  `CVE-2021-0277` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Jul 2021 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: Trio Chipset: Denial of Service due to packet destined to device's interfaces.](https://agentprime.io/advisories/CVE-2021-0273.md)
  `CVE-2021-0273` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: Denial of service, CWE-670
- [Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11, PTX10003, PTX10008: Line card may crash and restart when traffic is hitting a firewall filter having a term with syslog action configured](https://agentprime.io/advisories/CVE-2021-0264.md)
  `CVE-2021-0264` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-703
- [Junos OS and Junos OS Evolved: QFX5K Series: Underlay network traffic might not be processed upon receipt of high rate of specific genuine overlay packets in VXLAN scenario](https://agentprime.io/advisories/CVE-2021-0259.md)
  `CVE-2021-0259` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.4 High · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-755
- [Junos OS and Junos OS Evolved: An attacker sending a specific crafted BGP update message will crash RPD](https://agentprime.io/advisories/CVE-2021-0250.md)
  `CVE-2021-0250` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 22 Apr 2021
- [Junos OS Evolved: Denial of Service due to receipt of specific genuine layer 2 frames.](https://agentprime.io/advisories/CVE-2021-0239.md)
  `CVE-2021-0239` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.5 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-754
- [Junos OS: A specific BGP VPNv6 flowspec message causes routing protocol daemon (rpd) process to crash with a core.](https://agentprime.io/advisories/CVE-2021-0236.md)
  `CVE-2021-0236` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-754
- [Junos OS Evolved: The IPv6 BGP session will flap due to receipt of a specific IPv6 packet](https://agentprime.io/advisories/CVE-2021-0226.md)
  `CVE-2021-0226` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.1 High · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-665
- [Junos OS Evolved: Stateless IP firewall filter does not work as expected](https://agentprime.io/advisories/CVE-2021-0225.md)
  `CVE-2021-0225` · CVE record: Juniper Networks Junos OS Evolved · CVSS 5.8 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-754
- [Junos OS and Junos OS Evolved: Upon receipt of a specific BGP FlowSpec message network traffic may be disrupted.](https://agentprime.io/advisories/CVE-2021-0211.md)
  `CVE-2021-0211` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Jan 2021
- [Junos OS Evolved: Receipt of certain valid BGP update packets from BGP peers may cause RPD to core when using REGEX.](https://agentprime.io/advisories/CVE-2021-0209.md)
  `CVE-2021-0209` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.5 Medium · Not analysed yet · Published 15 Jan 2021 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: In bidirectional LSP configurations, on MPLS egress router RPD may core upon receipt of specific malformed RSVP packet.](https://agentprime.io/advisories/CVE-2021-0208.md)
  `CVE-2021-0208` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Jan 2021 · Tags: CWE-20
- [Junos OS Evolved: Receipt of a specifically malformed NDP packet could lead to Denial of Service](https://agentprime.io/advisories/CVE-2020-1681.md)
  `CVE-2020-1681` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.5 Medium · Not analysed yet · Published 16 Oct 2020 · Tags: CWE-755
- [Junos OS and Junos OS Evolved: RPD can crash due to a slow memory leak.](https://agentprime.io/advisories/CVE-2020-1678.md)
  `CVE-2020-1678` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 16 Oct 2020 · Tags: Denial of service
- [Junos OS Evolved: 'console log-out-on-disconnect' fails to terminate session on console cable disconnection](https://agentprime.io/advisories/CVE-2020-1666.md)
  `CVE-2020-1666` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.6 Medium · Not analysed yet · Published 16 Oct 2020 · Tags: Broken access control

Newest: <https://agentprime.io/advisories/technology/juniper-networks-junos-os-evolved.md>
Older: <https://agentprime.io/advisories/technology/juniper-networks-junos-os-evolved.md?cursor=WyIyMDIwLTEwLTE2VDIwOjMxOjI4LjIyMTAwMFoiLCJDVkUtMjAyMC0xNjY2Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=juniper-networks-junos-os-evolved&cursor=WyIyMDIyLTEwLTE4VDAyOjQ2OjQwLjMwNjAwMFoiLCJDVkUtMjAyMi0yMjIzOCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/juniper-networks-junos-os-evolved/?cursor=WyIyMDIyLTEwLTE4VDAyOjQ2OjQwLjMwNjAwMFoiLCJDVkUtMjAyMi0yMjIzOCJd>. Everything for agents: <https://agentprime.io/llms.txt>.