Advisories · Technology
Juniper Networks Junos OS Evolved.
Every CVE that names Juniper Networks Junos OS Evolved among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
Junos OS Evolved: Receipt of specifically malformed IPv6 packets causes kernel memory exhaustion leading to Denial of Service
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-664
- CVSS 6.9 Medium
Junos OS and Junos OS Evolved: BGP update message containing aggregator attribute with an ASN value of zero (0) is accepted
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 7.1 High
Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #3
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #2
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #1
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 8.7 High
Junos OS Evolved: TCP session state is not always cleared on the Routing Engine leading to DoS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 8.7 High
Junos OS and Junos OS Evolved: In a BMP scenario receipt of a malformed AS PATH attribute can cause an RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 7.1 High
Junos OS Evolved: QFX5000 Series: Configured MAC learning and move limits are not in effect
- Juniper Networks Junos OS Evolved
- CVSS 8.4 High
Junos OS Evolved: In a dual-RE scenario a locally authenticated attacker with shell privileges can take over the device.
- Juniper Networks Junos OS Evolved
- Broken access control
- CVSS 8.2 High
Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP path attribute leads to an RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 7.7 High
Junos OS Evolved: ACX 7000 Series: Receipt of specific transit MPLS packets causes resources to be exhausted
- Juniper Networks Junos OS Evolved
- CWE-923
- CVSS 6.9 Medium
Junos OS Evolved: ACX Series: Receipt of specific transit protocol packets is incorrectly processed by the RE
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 8.7 High
Junos OS and Junos OS Evolved: cRPD: Receipt of crafted TCP traffic can trigger high CPU utilization
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 5.1 Medium
Junos OS Evolved: Low privileged local user able to view NETCONF traceoptions files
- Juniper Networks Junos OS Evolved
- Broken access control
- CVSS 5.3 Medium
Junos OS Evolved: Connections to the network and broadcast address accepted
- Juniper Networks Junos OS Evolved
- CWE-697
- CVSS 7.1 High
Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11/LC9600, MX304, EX9200, PTX Series: Receipt of malformed DHCP packets causes interfaces to stop processing packets
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 8.7 High
Junos OS and Junos OS Evolved: When BGP traceoptions is enabled, receipt of specially crafted BGP packet causes RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 8.7 High
Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: With BGP traceoptions enabled, receipt of specifically malformed BGP update causes RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1288
- CVSS 6.9 Medium
Junos OS Evolved: Receipt of arbitrary data when sampling service is enabled, leads to partial Denial of Service (DoS).
- Juniper Networks Junos OS Evolved
- Information disclosure
- CVSS 8.7 High
Junos OS and Junos OS Evolved: Malformed BGP UPDATE causes RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 8.7 High
Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to a memory leak
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS Evolved: Receipt of specific packets in the aftmand process will lead to a memory leak
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.0 High
Junos OS Evolved: Local low-privilege user can gain root permissions leading to privilege escalation
- Juniper Networks Junos OS Evolved
- Broken access control
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Receipt of a large RPKI-RTR PDU packet can cause rpd to crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: A malformed CFM packet or specific transit traffic leads to FPC crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1286
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Inconsistent information in the TE database can lead to an rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 7.1 High
Junos OS Evolved: ACX7000 Series: When multicast traffic with a specific (S,G) is received evo-pfemand crashes
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 6.9 Medium
Junos OS Evolved: ACX7000 Series: Ports which have been inadvertently exposed can be reached over the network
- Juniper Networks Junos OS Evolved
- CWE-923
- CVSS 6.0 Medium
Junos OS and Junos OS Evolved: Flaps of BFD sessions with authentication cause a ppmd memory leak
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS Evolved: ACX 7000 Series: When specific traffic is received in a VPLS scenario evo-pfemand crashes
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 6.3 Medium
Junos OS and Junos OS Evolved: Confidential information in logs can be accessed by another user
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Information disclosure
- CVSS 8.7 High
Junos OS Evolved: ACX 7000 Series: Protocol specific DDoS configuration affects other protocols
- Juniper Networks Junos OS Evolved
- CWE-229
- CVSS 6.0 Medium
Junos OS and Junos OS Evolved: Concurrent deletion of a routing-instance and receipt of an SNMP request cause an RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.5 High
Junos OS Evolved: CLI parameter processing issue allows privilege escalation
- Juniper Networks Junos OS Evolved
- Command injection
- CVSS 8.5 High
Junos OS Evolved: CLI parameter processing issue allows privilege escalation
- Juniper Networks Junos OS Evolved
- Command injection
- CVSS 8.5 High
Junos OS Evolved: CLI parameter processing issue allows privilege escalation
- Juniper Networks Junos OS Evolved
- Command injection
- CVSS 8.5 High
Junos OS Evolved: CLI parameter processing issue allows privilege escalation
- Juniper Networks Junos OS Evolved
- Command injection
- CVSS 8.5 High
Junos OS Evolved: CLI parameter processing issue allows privilege escalation
- Juniper Networks Junos OS Evolved
- Command injection
- CVSS 7.1 High
Junos OS Evolved: ACX 7000 Series: Multicast traffic is looped in a multihoming EVPN MPLS scenario
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Upon processing specific L2 traffic, rpd can hang in devices with EVPN/VXLAN configured
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Receiving specific traffic on devices with EVPN-VPWS with IGMP-snooping enabled will cause the rpd to crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-703
- CVSS 6.8 Medium
Junos OS Evolved: Execution of a specific CLI command will cause a crash in the AFT manager
- Juniper Networks Junos OS Evolved
- CWE-20
- CVSS 7.0 High
Junos OS Evolved: User is not logged out when the console cable is disconnected
- Juniper Networks Junos OS Evolved
- CWE-1263
- CVSS 8.7 High
Junos OS Evolved: A high rate of SSH connections causes a Denial of Service
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Memory leak due to RSVP neighbor persistent error leading to kernel crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 8.2 High
Junos OS Evolved: Receipt of a specific TCP packet may result in a system crash (vmcore) on dual RE systems with NSR enabled
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Receipt of specific PIM packet causes rpd crash when PIM is configured along with MoFRR
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-252
- CVSS 7.1 High
Junos OS Evolved: MAC table changes cause a memory leak
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Loading a malicious certificate from the CLI may result in a stack-based overflow
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP update causes the session to reset
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 8.2 High
Junos OS and Junos OS Evolved: BGP multipath incremental calculation is resulting in an rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Race condition
- CVSS 7.1 High
Junos OS and Junos OS Evolved: l2cpd crash upon receipt of a specific TLV
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 7.1 High
Junos OS Evolved: When MAC learning happens, and an interface gets flapped, the PFE crashes
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.2 High
Junos OS and Junos OS Evolved: The l2ald crashes on receiving telemetry messages from a specific subscription
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 6.9 Medium
Junos OS Evolved: Connection limits is not being enforced while the resp. rate limit is being enforced
- Juniper Networks Junos OS Evolved
- Authentication bypass
- CVSS 7.1 High
Junos OS and Junos OS Evolved: In a EVPN-VXLAN scenario state changes on adjacent systems can cause an l2ald process crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: RPD crash when CoS-based forwarding (CBF) policy is configured
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 8.7 High
Junos OS and Junos OS Evolved: A specific EVPN type-5 route causes rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption