Advisories · Technology
Juniper Networks Junos OS Evolved.
Every CVE that names Juniper Networks Junos OS Evolved among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
Junos OS Evolved: An attacker causes denial of service via SNMP when firewall counters are used
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when BGP-LS traffic-engineering is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Malformed RSVP packet causes rpd crash when MPLS-TE error processing is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when BGP-LS TED export is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Malformed RIPv2 messages cause routing service disruption when RIP is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1284
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Malformed PIM Bidir DF-Election messages cause routing service disruption when bidirectional PIM is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An attacker causes routing-plane denial of service when Auto-RP mapping is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes a routing outage when BGP MVPN signaling is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1284
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes root code execution when 802.1X authentication is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 6.7 Medium
Junos OS and Junos OS Evolved: An attacker causes na-grpcd to crash when the InitialSync service is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS Evolved: An attacker causes na-grpcd to crash when gRPC telemetry is enabled
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP link protection is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An attacker causes routing protocol daemon crash when OSPFv3 is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Specific PIM messages causes rpd crash when multiple-triggered-joins is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An unauthenticated attacker causes rpd denial of service when IPv6 PIM is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-20
- CVSS 5.3 Medium
Junos OS and Junos OS Evolved: EX Series, MX Series, ACX Series: An attacker causes rpd heap memory disclosure when Rosen-MVPN data-MDT is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 5.3 Medium
Junos OS and Junos OS Evolved: An attacker causes rpd process memory disclosure when IPv6 LDP is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes routing daemon denial of service when EVPN BGP is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes a routing protocol daemon denial of service when EVPN is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes rpd crash and denial of service when EVPN is configured
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-20
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes rpd denial of service when EVPN route signaling is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-130
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes an rpd crash when routing-policy resolution-map processing and policy event tracing are enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP ISO-VPN egress protection is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: A routing-policy table reference causes routing-daemon denial of service when source-based forwarding is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: SRX Series: An attacker causes a forwarding-plane outage when SVR vector routing is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 6.7 Medium
Junos OS and Junos OS Evolved: An attacker causes Denial of Service in eventd
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.6 High
Junos OS and Junos OS Evolved: An unprivileged local attacker causes denial of service or privilege escalation
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when labeled-unicast aggregate-label is configured
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: A specific IS-IS SRv6 packet causes an rpd crash when flexible algorithm is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1284
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker causes an rpd crash when LDP is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An crafted LDP message causes an rpd crash when LDP is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 9.3 CriticalCritical · CVSS 9+
Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when automatic VPLS site ID is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-20
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An eBGP peer causes an rpd crash when VPLS automatic site-ID collision resolution is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Malformed MC-LAG ICCP message causes l2ald heap disclosure or crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-130
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An inconsistent ICCP peer message causes an l2ald crash when MC-LAG is configured
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes an rpd crash when inter-AS MVPN ingress replication is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Malformed RSVP packet causes a rpd crash when RSVP is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1284
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Specific RSVP packet causes an rpd crash when associated bidirectional LSP is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 6.9 Medium
Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
- Juniper Networks Junos OS Evolved
- CWE-923
- CVSS 7.1 High
Junos OS and Junos OS Evolved: If in a traffic engineering scenario a specific valid BGP-LS attribute is received rpd crashes
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-184
- CVSS 6.9 Medium
Junos OS and Junos OS Evolved: If a specific set of BGP communities is present and graceful-shutdown sender is added while attempting to advertise rpd crashes
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 5.3 Medium
Junos OS and Junos OS Evolved: A BGP-LS peer causes heap data disclosure when traffic-engineering routing is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-130
- CVSS 9.3 CriticalCritical · CVSS 9+
Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Authentication bypass
- CVSS 8.7 High
Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash if a malformed MCAST-TREE NLRI is received and readvertised
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1288
- CVSS 8.7 High
Junos OS and Junos OS Evolved: A remote BGP peer causes an rpd crash when long-lived graceful restart (LLGR) is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-665
- CVSS 8.7 High
Junos OS and Junos OS Evolved: A malformed SRv6 service route causes an rpd crash when dynamic tunnels are enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1284
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Malformed OSPF packets cause rpd memory disclosure or service disruption when link-local TE processing is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1284
- CVSS 7.1 High
Junos OS and Junos OS Evolved: A specific RSVP packet causes an rpd crash when L2 LSP support is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1284
- CVSS 5.3 Medium
Junos OS and Junos OS Evolved: Malformed ICCP packets cause l2ald memory disclosure and disruption
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1284
- CVSS 8.7 High
Junos OS and Junos OS Evolved: A specific BGP FlowSpec update causes an rpd crash when BGP FlowSpec import policy is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when ephemeral configuration is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS Evolved: An attacker causes telemetry disruption when network analytics telemetry is enabled
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 9.3 CriticalCritical · CVSS 9+
Junos OS Evolved: PTX Series: An attacker controlled DHCP response causes root-level compromise when zero-touch provisioning is used
- Juniper Networks Junos OS Evolved
- Command injection
- CVSS 9.2 CriticalCritical · CVSS 9+
Junos OS Evolved: Malformed TCP key-chain traffic causes a kernel panic when BGP or LDP key-chain authentication is used
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS Evolved: QFX Series: A BGP peer causes an rpd crash when global load balancing is enabled
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS Evolved: PTX Series: An attacker controlled gRPC response causes root-level compromise when zero-touch provisioning is used
- Juniper Networks Junos OS Evolved
- Command injection
- CVSS 7.1 High
Junos OS Evolved: PTX Series: An IS-IS peer causes an rpd crash when BIER over IS-IS is enabled
- Juniper Networks Junos OS Evolved
- CWE-1284