Advisories · Technology

Juniper Networks Junos OS Evolved.

Every CVE that names Juniper Networks Junos OS Evolved among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2020-1662 CVE record

CVSS 7.5 High

Junos OS and Junos OS Evolved: RPD crash due to BGP session flapping.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-20
Not analysed yet 16 Oct 2020
CVE-2020-1648 CVE record

CVSS 7.5 High

Junos OS and Junos OS Evolved: RPD crash when processing a specific BGP packet
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-159
- CWE-690
Not analysed yet 17 Jul 2020
CVE-2020-1646 CVE record

CVSS 7.5 High

Junos OS and Junos OS Evolved: RPD crash while processing a specific BGP update information.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-159
Not analysed yet 17 Jul 2020
CVE-2020-1644 CVE record

CVSS 7.5 High

Junos OS and Junos OS Evolved: RPD crash due to specific BGP UPDATE packets
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-703
Not analysed yet 17 Jul 2020
CVE-2020-1632 CVE record

CVSS 8.6 High

Junos OS and Junos OS Evolved: Invalid BGP UPDATE sent to peer device may cause BGP session to terminate.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
Not analysed yet 15 Apr 2020
CVE-2020-1638 CVE record

CVSS 7.5 High

Junos OS & Junos OS Evolved: A specific IPv4 packet can lead to FPC restart.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-467
Not analysed yet 8 Apr 2020
CVE-2020-1626 CVE record

CVSS 7.5 High

Junos OS Evolved: Denial of Service vulnerability in processing high rate of specific packets
- Juniper Networks Junos OS Evolved
Not analysed yet 8 Apr 2020
CVE-2020-1624 CVE record

CVSS 5.5 Medium

Junos OS Evolved: objmon logs may leak sensitive information
- Juniper Networks Junos OS Evolved
- Information disclosure
Not analysed yet 8 Apr 2020
CVE-2020-1623 CVE record

CVSS 5.5 Medium

Junos OS Evolved: ev.ops file may leak sensitive information
- Juniper Networks Junos OS Evolved
- Information disclosure
Not analysed yet 8 Apr 2020
CVE-2020-1622 CVE record

CVSS 5.5 Medium

Junos OS Evolved: EvoSharedObjStore may leak sensitive information
- Juniper Networks Junos OS Evolved
- CWE-664
Not analysed yet 8 Apr 2020
CVE-2020-1621 CVE record

CVSS 5.5 Medium

Junos OS Evolved: Configd leaks hashes via stream and is world readable
- Juniper Networks Junos OS Evolved
- CWE-664
Not analysed yet 8 Apr 2020
CVE-2020-1620 CVE record

CVSS 5.5 Medium

Junos OS Evolved: Configd leaks hashes via log file and is world readable
- Juniper Networks Junos OS Evolved
- CWE-664
Not analysed yet 8 Apr 2020
CVE-2020-1609 CVE record

CVSS 8.8 High

Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv6 packets and arbitrarily execute commands on the target device.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Command injection
- Memory corruption
Not analysed yet 15 Jan 2020
CVE-2020-1605 CVE record

CVSS 8.8 High

Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv4 packets and arbitrarily execute commands on the target device.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Command injection
- Memory corruption
Not analysed yet 15 Jan 2020
CVE-2020-1602 CVE record

CVSS 7.1 High

Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv4 packets may take over the code execution of the JDHCPD process.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
Not analysed yet 15 Jan 2020