Advisories · Technology
Juniper Networks Junos OS Evolved.
Every CVE that names Juniper Networks Junos OS Evolved among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
Junos OS Evolved: A crafted analytics sensor resource causes telemetry dial-out daemon denial of service
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 6.0 Medium
Junos OS Evolved: QFX Series: When sFlow collector reachability changes evo-pfemand process can crash
- Juniper Networks Junos OS Evolved
- CWE-820
- CVSS 6.9 Medium
Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
- Juniper Networks Junos OS Evolved
- CWE-923
- CVSS 6.8 Medium
Junos OS and Junos OS Evolved: EX Series, QFX Series, MX Series: A specific 'show l2-learning/ethernet-switching' command causes l2ald crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-466
- CVSS 6.9 Medium
Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
- Juniper Networks Junos OS Evolved
- CWE-923
- CVSS 7.1 High
Junos OS and Junos OS Evolved: When a specifically malformed BGP route update is received RPD crashes
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 5.3 Medium
Junos OS and Junos OS Evolved: Receipt of a specific SNMPv3 request results in memory leak and eventual snmpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.2 High
Junos OS Evolved: PTX Series: Receipt of repeated ECMP routing updates results in PFE crash
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 6.7 Medium
Junos OS and Junos OS Evolved: Configuration of a specific SSH option results in mgd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.4 High
Junos OS and Junos OS Evolved: Execution of crafted CLI commands allows for arbitrary shell injection as root
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Command injection
- CVSS 7.1 High
Junos OS Evolved: PTX Series: If SRTE tunnels provisioned via PCEP are present and specific gRPC queries are received evo-aftmand crashes
- Juniper Networks Junos OS Evolved
- CWE-686
- CVSS 6.8 Medium
Junos OS and Junos OS Evolved: Specific low privileged CLI command exposes sensitive information
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Broken access control
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An attacker sending a specific genuine BGP packet causes a BGP reset
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-20
- CVSS 7.1 High
Junos OS and Junos OS Evolved: In an EVPN-MPLS scenario churn of ESI routes causes a memory leak in l2ald
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 8.5 High
Junos OS Evolved: Local, authenticated attacker can gain privileged access to FPCs
- Juniper Networks Junos OS Evolved
- Authentication bypass
- CVSS 7.1 High
Junos OS and Junos OS Evolved: A high frequency of connecting and disconnecting NETCONF sessions causes management unavailability
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-821
- CVSS 7.1 High
Junos OS Evolved: QFX5000 Series and PTX Series: An attacker sending crafted multicast packets will cause evo-aftmand / evo-pfemand to crash and restart
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.5 High
Junos OS and Junos OS Evolved: When an unsigned Python op script configuration is present, a local low privileged user can compromise the system
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Privilege escalation
- CVSS 9.3 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root
- Juniper Networks Junos OS Evolved
- Broken access control
- CVSS 7.1 High
Junos OS and Junos OS Evolved: When telemetry collectors are frequently subscribing and unsubscribing to sensors chassisd or rpd will crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS Evolved: Flapping management interface causes MAC learning on label-switched interfaces to stop
- Juniper Networks Junos OS Evolved
- CWE-682
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Receipt of specific IS-IS update packet causes memory leak leading to RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.5 High
Junos OS and Junos OS Evolved: Use after free vulnerability In 802.1X authentication daemon can cause crash of the dot1xd process
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 6.9 Medium
Junos OS and Junos OS Evolved: Optional transitive BGP attribute is modified before propagation to peers causing sessions to flap
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 8.7 High
Junos OS and Junos OS Evolved: BGP update with a set of specific attributes causes rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-126
- CVSS 6.8 Medium
Junos OS and Junos OS Evolved: Unix socket used to control the jdhcpd process is world-writable
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Broken access control
- CVSS 6.3 Medium
Junos OS and Junos OS Evolved: DHCP Option 82 messages from clients being passed unmodified to the DHCP server
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 6.8 Medium
Junos OS and Junos OS Evolved: Executing a specific show command leads to an rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 5.3 Medium
Junos OS and Junos OS Evolved: Device allows login for user with expired password
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-262
- CVSS 4.8 Medium
Junos OS Evolved: OS command injection vulnerabilities fixed
- Juniper Networks Junos OS Evolved
- Command injection
- CVSS 8.7 High
Junos OS and Junos OS Evolved: Specific BGP EVPN update message causes rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 7.1 High
Junos OS Evolved: ACX7024, ACX7024X, ACX7100-32C, ACX7100-48L, ACX7348, ACX7509: When specific valid multicast traffic is received on the L3 interface on a vulnerable device evo-pfemand crashes and r…
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 6.0 Medium
Junos OS and Junos OS Evolved: With BGP sharding enabled, change in indirect next-hop can cause RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 6.9 Medium
Junos OS Evolved: PTX Series: When a firewall filter rejects traffic these packets are erroneously sent to the RE
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 7.1 High
Junos OS Evolved: PTX Series except PTX10003: An unauthenticated adjacent attacker sending specific valid traffic can cause a memory leak in cfmman leading to FPC crash and restart
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 8.4 High
Junos OS and Junos OS Evolved: Privilege escalation to root via CLI command 'request system logout'
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Command injection
- CVSS 6.8 Medium
Junos OS and Junos OS Evolved: Annotate configuration command can be used to change the configuration
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-140
- CVSS 6.8 Medium
Junos OS and Junos OS Evolved: When RIB sharding is configured each time a show command is executed RPD memory leaks
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 6.9 Medium
Junos OS Evolved: When a control-plane firewall filter refers to a prefix-list with more than 10 entries it's not matching
- Juniper Networks Junos OS Evolved
- CWE-480
- CVSS 8.2 High
Junos OS and Junos OS Evolved: When a static route points to a reject next-hop and a gNMI query for this route is processed, RPD crashes
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Receipt of a specific BGP UPDATE causes an rpd crash on devices with BGP multipath configured
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session reset
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-440
- CVSS 6.0 Medium
Junos OS and Junos OS Evolved: When route validation is enabled, BGP connection establishment failure causes RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: When jflow/sflow is configured continuous logical interface flaps causes rpd crash and restart
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.5 High
Junos OS Evolved: A low-privileged user can execute arbitrary Junos commands and modify the configuration, thereby compromising the system
- Juniper Networks Junos OS Evolved
- Broken access control
- CVSS 7.1 High
Junos OS and Junos OS Evolved: In an EVPN environment, receipt of specifically malformed BGP update causes RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-130
- CVSS 8.7 High
Junos OS and Junos OS Evolved: With traceoptions enabled, receipt of malformed AS PATH causes RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 6.8 Medium
Junos OS and Junos OS Evolved: A specific CLI command will cause an RPD crash when rib-sharding and update-threading is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 6.8 Medium
Junos OS and Junos OS Evolved: A local, low privileged user can access sensitive information
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Information disclosure
- CVSS 6.0 Medium
Junos OS and Junos OS Evolved: LSP flap in a specific MPLS scenario leads to rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 6.8 Medium
Junos OS and Junos OS Evolved: Executing a specific CLI command when asregex-optimized is configured causes an rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 8.7 High
Junos OS and Junos OS Evolved: Receipt of a specific ICMPv6 packet causes a memory overrun leading to an rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Receipt of a specifically malformed DHCP packet causes jdhcpd process to crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-20
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Receipt of a malformed LLDP TLV results in l2cpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-195
- CVSS 6.0 Medium
Junos OS and Junos OS Evolved: When BGP rib-sharding and update-threading are configured and a peer flaps, an rpd core is observed
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 7.1 High
Junos OS and Junos OS Evolved: In an EVPN-VXLAN scenario specific ARP or NDP packets cause FPC to crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 8.7 High
Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.2 High
Junos OS and Junos OS Evolved: When BGP traceoptions are configured, receipt of malformed BGP packets causes RPD to crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Receipt of specially crafted BGP update packet causes RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755