Juniper Networks Junos OS Evolved.

Junos OS and Junos OS Evolved: In an SR to LDP interworking scenario, with SRMS, when a specific low privileged command is issued on an ABR rpd will crash

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-690

Junos OS and Junos OS Evolved: RPD crash upon receipt of specific OSPFv3 LSAs

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-20

Junos OS Evolved: ACX7000 Series: Specific IPv6 transit traffic gets exceptioned to the routing-engine which causes increased CPU utilization

• Juniper Networks Junos OS Evolved
• CWE-754

Junos OS and Junos OS Evolved: In a BGP multipath scenario, when one of the contributing routes is flapping often and rapidly, rpd may crash

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Race condition

Junos OS and Junos OS Evolved: PPMD goes into infinite loop upon receipt of malformed OSPF TLV

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-703

Junos OS and Junos OS Evolved: Due to a race condition the rpd process can crash upon receipt of a BGP update message containing flow spec route

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Race condition

Junos OS and Junos OS Evolved: RPD core upon receipt of a specific EVPN route by a BGP route reflector in an EVPN environment

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-241

Junos OS Evolved: PTX Series: Multiple FPCs become unreachable due to continuous polling of specific SNMP OID

• Juniper Networks Junos OS Evolved
• Denial of service

Junos OS and Junos OS Evolved: An rpd crash can occur due to memory corruption caused by flapping BGP sessions

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Memory corruption

Junos OS Evolved: PTX Series: An attacker can cause a kernel panic by sending a malformed TCP packet to the device

• Juniper Networks Junos OS Evolved
• CWE-1286

Junos OS and Junos OS Evolved: /var/run/<pid>.env files are potentially not deleted during termination of a gRPC connection causing inode exhaustion

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved

Junos OS and Junos OS Evolved: In an MPLS scenario upon receipt of a specific IPv6 packet an FPC will crash

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-20

Junos OS and Junos OS Evolved: Denial of Service (DoS) vulnerability in RPD upon receipt of specific BGP update

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-232

Junos OS Evolved: A high rate of specific hostbound traffic will cause unexpected hostbound traffic delays or drops

• Juniper Networks Junos OS Evolved
• Denial of service

Junos OS and Junos OS Evolved: An rpd core will be observed with proxy BGP route-target filtering enabled and certain route add and delete event happening

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-672

Junos OS and Junos OS Evolved: The rpd CPU spikes to 100% after a malformed ISIS TLV has been received

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-754

Junos OS Evolved: Specific packets reaching the RE lead to a counter overflow and eventually a crash

• Juniper Networks Junos OS Evolved
• Juniper Networks Junos OS
• CWE-911

Junos OS Evolved: PTX series: An attacker sending a crafted GRE packet will cause the PFE to restart

• Juniper Networks Junos OS Evolved
• Juniper Networks Junos OS
• CWE-754

Junos OS and Junos OS Evolved: In a BGP rib-sharding scenario when a certain CLI command is executed the rpd process might crash

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-241

Junos OS Evolved: A remote attacker may cause a CPU Denial of Service by sending genuine traffic to a device on a specific IPv4 port.

• Juniper Networks Junos OS Evolved
• Juniper Networks Junos OS
• Information disclosure
• Broken access control

Junos OS and Junos OS Evolved: After receiving a specific number of crafted packets snmpd will segmentation fault (SIGSEGV) requiring a manual restart.

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-755

Junos OS and Junos OS Evolved: An l2cpd memory leak can occur when specific LLDP packets are received leading to a DoS

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Denial of service

Junos OS and Junos OS Evolved: OSPFv3 session might go into INIT state upon receipt of multiple crafted packets from a trusted neighbor device.

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-665

Junos OS Evolved: Telnet service may be enabled when it is expected to be disabled.

• Juniper Networks Junos OS Evolved
• CWE-665

Junos OS: An attacker sending crafted packets can cause a traffic and CPU Denial of Service (DoS).

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved

Junos OS and Junos OS Evolved: In Point to MultiPoint (P2MP) scenarios receipt of various crafted packets causes RPD to core.

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Memory corruption

Junos OS and Junos OS Evolved: RPD crash while processing a specially crafted BGP UPDATE or KEEPALIVE message.

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Memory corruption

Junos OS and Junos OS Evolved: Receipt of a specific LDP message will cause a Denial of Service

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Denial of service

Junos OS and Junos OS Evolved: An IS-IS adjacency might be taken down if a bad hello PDU is received for an existing adjacency causing a DoS

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-693

Junos OS and Junos OS Evolved: Denial of Service vulnerability in local file processing

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Privilege escalation
• CWE-20

Junos OS and Junos OS Evolved: Local Privilege Escalation vulnerability

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Memory corruption
• Privilege escalation

Junos OS Evolved: shell-injection vulnerabilities in evo_sftp UI wrapper script

• Juniper Networks Junos OS Evolved
• Command injection

Junos OS Evolved: shell-injection vulnerabilities in evo_tcpdump UI wrapper script

• Juniper Networks Junos OS Evolved
• Command injection

Junos OS Evolved: Multiple shell-injection vulnerabilities in EVO UI wrapper scripts

• Juniper Networks Junos OS Evolved
• Command injection

Junos OS and Junos OS Evolved: A vulnerability in the Juniper Agile License Client may allow an attacker to perform Remote Code Execution (RCE)

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Memory corruption

Junos OS and Junos OS Evolved: RPD core upon receipt of specific BGP update

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-755

Junos OS and Junos OS Evolved: Privilege escalation vulnerability in Juniper Extension Toolkit (JET)

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Privilege escalation

Junos OS Evolved: PTX10003, PTX10008: picd core while executing the "show chassis pic" command under certain conditions

• Juniper Networks Junos OS Evolved
• Race condition

Junos OS Evolved: BGP and LDP sessions with TCP MD5 authentication established with peers not configured for authentication

• Juniper Networks Junos OS Evolved
• CWE-755

Junos OS Evolved: Memory leak in arpd or ndp processes can lead to Denial of Service (DoS)

• Juniper Networks Junos OS Evolved
• Denial of service

Junos OS and Junos OS Evolved: A vulnerability allows a network based unauthenticated attacker which sends a high rate of specific traffic to cause a partial Denial of Service

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Information disclosure

Junos OS: User-defined ARP Policer isn't applied on Aggregated Ethernet (AE) interface until firewall process is restarted

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Race condition

Junos OS and Junos OS Evolved: RPD could crash in SR-ISIS/MPLS environment due to a flap of an ISIS link in the network

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-754

Junos OS Evolved: Specially crafted packets may cause the AFT manager process to crash and restart

• Juniper Networks Junos OS Evolved
• CWE-703

Junos OS and Junos OS Evolved: Specific packets can trigger rpd crash when BGP Origin Validation is configured with RPKI

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-754

Junos OS and Junos OS Evolved: LLDP Out-of-Bounds Read vulnerability in l2cpd

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Memory corruption

Junos OS and Junos OS Evolved: Trio Chipset: Denial of Service due to packet destined to device's interfaces.

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Denial of service
• CWE-670

Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11, PTX10003, PTX10008: Line card may crash and restart when traffic is hitting a firewall filter having a term with syslog action configured

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-703

Junos OS and Junos OS Evolved: QFX5K Series: Underlay network traffic might not be processed upon receipt of high rate of specific genuine overlay packets in VXLAN scenario

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-755

Junos OS and Junos OS Evolved: An attacker sending a specific crafted BGP update message will crash RPD

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved

Junos OS Evolved: Denial of Service due to receipt of specific genuine layer 2 frames.

• Juniper Networks Junos OS Evolved
• CWE-754

Junos OS: A specific BGP VPNv6 flowspec message causes routing protocol daemon (rpd) process to crash with a core.

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-754

Junos OS Evolved: The IPv6 BGP session will flap due to receipt of a specific IPv6 packet

• Juniper Networks Junos OS Evolved
• CWE-665

Junos OS Evolved: Stateless IP firewall filter does not work as expected

• Juniper Networks Junos OS Evolved
• CWE-754

Junos OS and Junos OS Evolved: Upon receipt of a specific BGP FlowSpec message network traffic may be disrupted.

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved

Junos OS Evolved: Receipt of certain valid BGP update packets from BGP peers may cause RPD to core when using REGEX.

• Juniper Networks Junos OS Evolved
• Memory corruption

Junos OS and Junos OS Evolved: In bidirectional LSP configurations, on MPLS egress router RPD may core upon receipt of specific malformed RSVP packet.

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-20

Junos OS Evolved: Receipt of a specifically malformed NDP packet could lead to Denial of Service

• Juniper Networks Junos OS Evolved
• CWE-755

Junos OS and Junos OS Evolved: RPD can crash due to a slow memory leak.

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Denial of service

Junos OS Evolved: 'console log-out-on-disconnect' fails to terminate session on console cable disconnection

• Juniper Networks Junos OS Evolved
• Broken access control