Advisories · Technology
Juniper Networks Junos OS Evolved.
Every CVE that names Juniper Networks Junos OS Evolved among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1287
- CVSS 6.7 Medium
Junos OS Evolved: ACX Series with Paragon Active Assurance Test Agent: A local high privileged attacker can recover other administrators credentials
- Juniper Networks Junos OS Evolved
- CWE-313
- CVSS 6.9 Medium
Junos OS and Junos OS Evolved: Higher CPU consumption on routing engine leads to Denial of Service (DoS).
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 7.1 High
Junos OS and Junos OS Evolved: When LLDP is enabled and a malformed LLDP packet is received, l2cpd crashes
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 5.1 Medium
Junos OS and Junos OS Evolved: A low-privileged user can access confidential information
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Broken access control
- CVSS 8.7 High
Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1286
- CVSS 7.1 High
Junos OS Evolved: Packets which are not destined to the device can reach the RE
- Juniper Networks Junos OS Evolved
- CWE-20
- CVSS 7.5 High
Junos OS and Junos OS Evolved: A specific query via DREND causes rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 6.5 Medium
Junos OS and Junos OS Evolved: A link flap causes patroot memory leak which leads to rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.5 High
Junos OS Evolved: Specific TCP traffic causes OFP core and restart of RE
- Juniper Networks Junos OS Evolved
- CWE-228
- CVSS 7.5 High
Junos OS and Junos OS Evolved: In a jflow scenario continuous route churn will cause a memory leak and eventually an rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.5 High
Junos OS Evolved: A high rate of specific traffic will cause a complete system outage
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.5 High
Junos OS Evolved: ACX7024, ACX7100-32C and ACX7100-48L: Traffic stops when a specific IPv4 UDP packet is received by the RE
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 5.3 Medium
Junos OS and Junos OS Evolved: A specific BGP UPDATE message will cause a crash in the backup Routing Engine in NSR-enabled devices
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 5.9 Medium
Junos OS and Junos OS Evolved: BGP session flaps on NSR-enabled devices can cause rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 6.5 Medium
Junos OS and Junos OS Evolved: The rpd will crash upon receiving a malformed BGP UPDATE message
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1286
- CVSS 5.0 Medium
Junos OS and Junos OS Evolved: A local attacker can retrieve sensitive information and elevate privileges on the device to an authorized user.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Broken access control
- CVSS 7.5 High
Junos OS and Junos OS Evolved: An rpd crash may occur when BGP is processing newly learned routes
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 6.5 Medium
Junos OS Evolved: PTX10003 Series: Packets which are not destined to the router can reach the RE
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 5.4 Medium
Junos OS Evolved: Packets which are not destined to the router can reach the RE
- Juniper Networks Junos OS Evolved
- CWE-923
- CVSS 7.5 High
Junos OS and Junos OS Evolved: In an BGP scenario RPD crashes upon receiving and processing a specific malformed ISO VPN BGP UPDATE packet
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-20
- CVSS 6.5 Medium
Junos OS and Junos OS Evolved: High CPU load due to specific NETCONF command
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.3 High
Junos OS and Junos OS Evolved: An Unchecked Return Value in multiple users interfaces affects confidentiality and integrity of device operations
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-252
- CVSS 5.5 Medium
Junos OS and Junos OS Evolved: Stack overflow vulnerability in CLI command processing
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 6.5 Medium
Junos OS and Junos OS Evolved: Receipt of a specific genuine PIM packet causes RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 6.5 Medium
Junos OS and Junos OS Evolved: An l2cpd crash will occur when specific LLDP packets are received
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1284
- CVSS 6.1 Medium
Junos OS Evolved: PTX10001, PTX10004, PTX10008, PTX10016: MAC address validation bypass vulnerability
- Juniper Networks Junos OS Evolved
- CWE-346
- CVSS 6.1 Medium
Junos OS Evolved: PTX10003 Series: MAC address validation bypass vulnerability
- Juniper Networks Junos OS Evolved
- CWE-346
- CVSS 5.9 Medium
Junos OS Evolved: 'file copy' CLI command can disclose password to shell users
- Juniper Networks Junos OS Evolved
- Information disclosure
- CVSS 7.5 High
Junos OS and Junos OS Evolved: RPD crash when attempting to send a very long AS PATH to a non-4-byte-AS capable BGP neighbor
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 6.5 Medium
Junos OS and Junos OS Evolved: The l2cpd will crash when a malformed LLDP packet is received
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-703
- CVSS 5.5 Medium
Junos OS and Junos OS Evolved: An rpd crash occurs when a specific L2VPN command is run
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 4.7 Medium
Junos OS and Junos OS Evolved: In a MoFRR scenario an rpd core may be observed when a low privileged CLI command is executed
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 6.5 Medium
Junos OS Evolved: PTX10001-36MR, and PTX10004, PTX10008, PTX10016 with LC1201/1202: The aftman-bt process will crash in a MoFRR scenario after multiple link flaps
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.5 High
2023-06: Out-of-Cycle Security Bulletin: Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-20
- CVSS 8.8 High
Junos OS Evolved: Shell Injection vulnerability in the gNOI server
- Juniper Networks Junos OS Evolved
- Command injection
- CVSS 7.5 High
Junos OS and Junos OS Evolved: In a BGP rib sharding scenario when a route is frequently updated an rpd memory leak will occur
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 6.5 Medium
Junos OS and Junos OS Evolved: If malformed IPv6 router advertisements are received, memory corruption will occur which causes an rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-20
- CVSS 5.5 Medium
Junos OS and Junos OS Evolved: In a BGP rib sharding scenario an rpd crash will happen shortly after a specific CLI command is issued
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 5.3 Medium
Junos OS Evolved: Read access to some confidential user information is possible
- Juniper Networks Junos OS Evolved
- CWE-1188
- CVSS 7.1 High
Junos OS Evolved: The 'sysmanctl' shell command allows a local user to gain access to some administrative actions
- Juniper Networks Junos OS Evolved
- Broken access control
- CVSS 7.5 High
Junos OS and Junos OS Evolved: An attacker sending genuine BGP packets causes an RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.8 High
Junos OS Evolved: Local low-privileged user with shell access can execute CLI commands as root
- Juniper Networks Junos OS Evolved
- Broken access control
- CVSS 7.5 High
Junos OS and Junos OS Evolved: Malformed BGP flowspec update causes RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-130
- CVSS 8.2 High
Junos OS Evolved: Docker repository is world-writeable, allowing low-privileged local user to inject files into Docker containers
- Juniper Networks Junos OS Evolved
- Broken access control
- CVSS 6.5 Medium
Junos OS and Junos OS Evolved: An RPD crash can happen due to an MPLS TE tunnel configuration change on a directly connected router
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-459
- CVSS 6.5 Medium
Junos OS and Junos OS Evolved: A memory leak which will ultimately lead to an rpd crash will be observed when a peer interface flaps continuously in a Segment Routing scenario using OSPF
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 5.9 Medium
Junos OS Evolved: The kernel might restart in a BGP scenario where "bgp auto-discovery" is enabled and such a neighbor flaps
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.5 High
Junos OS and Junos OS Evolved: PTX10008, PTX10016: When a specific SNMP MIB is queried the FPC will crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-129
- CVSS 7.5 High
Junos OS Evolved: A specific SNMP GET operation and a specific CLI commands cause resources to leak and eventually the evo-pfemand process will crash
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 5.3 Medium
Junos OS and Junos OS Evolved: RPD might crash when MPLS ping is performed on BGP LSPs
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 6.1 Medium
Junos OS Evolved: PTX10003: An attacker sending specific genuine packets will cause a memory leak in the PFE leading to a Denial of Service
- Juniper Networks Junos OS Evolved
- Race condition
- Denial of service
- CVSS 7.5 High
Junos OS and Junos OS Evolved: RPD crash upon receipt of BGP route with invalid next-hop
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-358
- CWE-754
- CVSS 7.5 High
Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute in version 22.3R1
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-20
- CVSS 6.5 Medium
Junos OS and Junos OS Evolved: An FPC crash might be seen due to an EVPN MAC entry moving from local to remote
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-664
- CVSS 7.3 High
Junos OS Evolved: Incorrect file permissions can allow low-privileged user to cause another user to execute arbitrary commands
- Juniper Networks Junos OS Evolved
- Broken access control
- CVSS 7.5 High
Junos OS Evolved: Kernel processing of unvalidated TCP segments could lead to a Denial of Service (DoS)
- Juniper Networks Junos OS Evolved
- CWE-20
- CVSS 5.5 Medium
Junos OS and Junos OS Evolved: An rpd memory leak might be observed while running a specific cli command in a RIB sharding scenario
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 8.2 High
Junos OS Evolved: The ssh CLI command always runs as root which can lead to privilege escalation
- Juniper Networks Junos OS Evolved
- Privilege escalation
- CVSS 5.3 Medium
Junos OS and Junos OS Evolved: The rpd process will crash when a malformed incoming RESV message is processed
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754