# Juniper Networks Junos OS.

Every CVE that names Juniper Networks Junos OS among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Junos OS: Kernel crash upon receipt of crafted CLNP datagrams](https://agentprime.io/advisories/CVE-2018-0016.md)
  `CVE-2018-0016` · CVE record: Juniper Networks Junos OS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Apr 2018
- [SRX Series: Firewall bypass vulnerability when UUID with leading zeros is configured.](https://agentprime.io/advisories/CVE-2018-0009.md)
  `CVE-2018-0009` · CVE record: Juniper Networks Junos OS · CVSS 5.4 Medium · Not analysed yet · Published 10 Jan 2018
- [Junos OS: commit script may allow unauthenticated root login upon reboot](https://agentprime.io/advisories/CVE-2018-0008.md)
  `CVE-2018-0008` · CVE record: Juniper Networks Junos OS · CVSS 6.2 Medium · Not analysed yet · Published 10 Jan 2018
- [Junos OS: bbe-smgd process denial of service while processing VLAN authentication requests/rejects](https://agentprime.io/advisories/CVE-2018-0006.md)
  `CVE-2018-0006` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 10 Jan 2018
- [Security Bulletin: Junos OS: MAC move limit configured to drop traffic may forward traffic.](https://agentprime.io/advisories/CVE-2018-0005.md)
  `CVE-2018-0005` · CVE record: Juniper Networks Junos OS · CVSS 7.4 High · Not analysed yet · Published 10 Jan 2018
- [Junos OS: Kernel Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2018-0004.md)
  `CVE-2018-0004` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 10 Jan 2018
- [Junos OS: A crafted MPLS packet may lead to a kernel crash](https://agentprime.io/advisories/CVE-2018-0003.md)
  `CVE-2018-0003` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 10 Jan 2018
- [MX series, SRX series: Junos OS: Denial of service vulnerability in Flowd on devices with ALG enabled.](https://agentprime.io/advisories/CVE-2018-0002.md)
  `CVE-2018-0002` · CVE record: Juniper Networks Junos OS · CVSS 8.2 High · Not analysed yet · Published 10 Jan 2018
- [Junos: Unauthenticated Remote Code Execution through J-Web interface](https://agentprime.io/advisories/CVE-2018-0001.md)
  `CVE-2018-0001` · CVE record: Juniper Networks Junos OS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jan 2018
- [Junos OS: Denial of service vulnerability in telnetd](https://agentprime.io/advisories/CVE-2017-10621.md)
  `CVE-2017-10621` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2017
- [SRX Series: Antivirus updates are downloaded without verification](https://agentprime.io/advisories/CVE-2017-10620.md)
  `CVE-2017-10620` · CVE record: Juniper Networks Junos OS · CVSS 7.4 High · Not analysed yet · Published 13 Oct 2017
- [Junos: SRX cluster denial of service vulnerability in flowd due to multicast packets](https://agentprime.io/advisories/CVE-2017-10619.md)
  `CVE-2017-10619` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2017
- [Junos: RPD core due to BGP UPDATE with malformed optional transitive attributes](https://agentprime.io/advisories/CVE-2017-10618.md)
  `CVE-2017-10618` · CVE record: Juniper Networks Junos OS · CVSS 5.9 Medium · Not analysed yet · Published 13 Oct 2017
- [Junos: Potential remote code execution vulnerability in PAM](https://agentprime.io/advisories/CVE-2017-10615.md)
  `CVE-2017-10615` · CVE record: Juniper Networks Junos OS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2017
- [Junos OS: A remote unauthenticated attacker can consume large amounts of CPU and/or memory through telnetd](https://agentprime.io/advisories/CVE-2017-10614.md)
  `CVE-2017-10614` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 13 Oct 2017
- [Junos OS: A kernel hang may occur due to a specific loopback filter action command](https://agentprime.io/advisories/CVE-2017-10613.md)
  `CVE-2017-10613` · CVE record: Juniper Networks Junos OS · CVSS 5.5 Medium · Not analysed yet · Published 13 Oct 2017
- [Junos: EX Series PFE and MX MPC7E/8E/9E PFE crash when fetching interface stats with 'extended-statistics' enabled](https://agentprime.io/advisories/CVE-2017-10611.md)
  `CVE-2017-10611` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 13 Oct 2017
- [SRX Series: Embedded ICMP may cause the flowd process to crash](https://agentprime.io/advisories/CVE-2017-10610.md)
  `CVE-2017-10610` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2017
- [SRX series: Junos OS: SRX series using IPv6 Sun/MS-RPC ALGs may experience flowd crash on processing packets.](https://agentprime.io/advisories/CVE-2017-10608.md)
  `CVE-2017-10608` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2017
- [Junos: rpd core due to receipt of specially crafted BGP packet](https://agentprime.io/advisories/CVE-2017-10607.md)
  `CVE-2017-10607` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2017
- [SRX Series: Cryptographic weakness in SRX300 Series TPM Firmware](https://agentprime.io/advisories/CVE-2017-10606.md)
  `CVE-2017-10606` · CVE record: Juniper Networks Junos OS · CVSS 4.4 Medium · Not analysed yet · Published 13 Oct 2017
- [vMX: Information leak vulnerability](https://agentprime.io/advisories/CVE-2016-4924.md)
  `CVE-2016-4924` · CVE record: Juniper Networks Junos OS · CVSS 8.4 High · Not analysed yet · Published 13 Oct 2017
- [Junos J-Web: Cross Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2016-4923.md)
  `CVE-2016-4923` · CVE record: Juniper Networks Junos OS · CVSS 8.0 High · Not analysed yet · Published 13 Oct 2017
- [Junos: Privilege escalation vulnerabilities in Junos CLI](https://agentprime.io/advisories/CVE-2016-4922.md)
  `CVE-2016-4922` · CVE record: Juniper Networks Junos OS · CVSS 8.4 High · Not analysed yet · Published 13 Oct 2017
- [Junos: IPv6 denial of service vulnerability due to resource exhaustion (CVE-2016-4921)](https://agentprime.io/advisories/CVE-2016-4921.md)
  `CVE-2016-4921` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2017
- [Junos Space: privilege escalation vulnerabilities in Junos Space](https://agentprime.io/advisories/CVE-2016-1265.md)
  `CVE-2016-1265` · CVE record: Juniper Networks Junos OS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2017
- [Junos: vulnerabilities in J-Web (CVE-2016-1261)](https://agentprime.io/advisories/CVE-2016-1261.md)
  `CVE-2016-1261` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 13 Oct 2017
- [SRX Series: Command injection vulnerability in SRX IDP feature.](https://agentprime.io/advisories/CVE-2017-2349.md)
  `CVE-2017-2349` · CVE record: Juniper Networks Junos OS · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jul 2017
- [Junos OS: jdhcpd daemon crash due to invalid IPv6 UDP packets](https://agentprime.io/advisories/CVE-2017-2348.md)
  `CVE-2017-2348` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2017
- [Junos: Denial of Service vulnerability in rpd daemon](https://agentprime.io/advisories/CVE-2017-2347.md)
  `CVE-2017-2347` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 14 Jul 2017
- [MS-MPC or MS-MIC crash when passing large fragmented traffic through an ALG](https://agentprime.io/advisories/CVE-2017-2346.md)
  `CVE-2017-2346` · CVE record: Juniper Networks Junos OS · CVSS 5.9 Medium · Not analysed yet · Published 14 Jul 2017
- [Junos: snmpd denial of service upon receipt of crafted SNMP packet](https://agentprime.io/advisories/CVE-2017-2345.md)
  `CVE-2017-2345` · CVE record: Juniper Networks Junos OS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jul 2017
- [Junos: Buffer overflow in sockets library](https://agentprime.io/advisories/CVE-2017-2344.md)
  `CVE-2017-2344` · CVE record: Juniper Networks Junos OS · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2017
- [SRX Series: Hardcoded credentials in Integrated UserFW feature.](https://agentprime.io/advisories/CVE-2017-2343.md)
  `CVE-2017-2343` · CVE record: Juniper Networks Junos OS · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jul 2017
- [SRX Series: MACsec failure to report errors](https://agentprime.io/advisories/CVE-2017-2342.md)
  `CVE-2017-2342` · CVE record: Juniper Networks Junos OS · CVSS 8.1 High · Not analysed yet · Published 14 Jul 2017 · Tags: CWE-392
- [Junos OS: VM to host privilege escalation in platforms with Junos OS running in a virtualized environment.](https://agentprime.io/advisories/CVE-2017-2341.md)
  `CVE-2017-2341` · CVE record: Juniper Networks Junos OS · CVSS 8.8 High · Not analysed yet · Published 14 Jul 2017
- [Junos: RPD crash due to malformed BGP OPEN message](https://agentprime.io/advisories/CVE-2017-2314.md)
  `CVE-2017-2314` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2017
- [Junos: SRX Series denial of service vulnerability in flowd due to crafted DHCP packet](https://agentprime.io/advisories/CVE-2017-10605.md)
  `CVE-2017-10605` · CVE record: Juniper Networks Junos OS · CVSS 8.6 High · Not analysed yet · Published 14 Jul 2017
- [Junos OS: SRX Series: Cluster configuration sync failures occur if the root user account is locked out](https://agentprime.io/advisories/CVE-2017-10604.md)
  `CVE-2017-10604` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 14 Jul 2017
- [Junos OS: Local XML Injection through CLI command can lead to privilege escalation](https://agentprime.io/advisories/CVE-2017-10603.md)
  `CVE-2017-10603` · CVE record: Juniper Networks Junos OS · CVSS 7.0 High · Not analysed yet · Published 14 Jul 2017
- [Junos OS: buffer overflow vulnerability in Junos CLI](https://agentprime.io/advisories/CVE-2017-10602.md)
  `CVE-2017-10602` · CVE record: Juniper Networks Junos OS · CVSS 7.0 High · Not analysed yet · Published 14 Jul 2017
- [Junos OS: Insufficient authentication for user login when a specific system configuration error occurs.](https://agentprime.io/advisories/CVE-2017-10601.md)
  `CVE-2017-10601` · CVE record: Juniper Networks Junos OS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jul 2017

Newest: <https://agentprime.io/advisories/technology/juniper-networks-junos-os.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=juniper-networks-junos-os&cursor=WyIyMDE4LTA0LTExVDE5OjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxOC0wMDE3Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/juniper-networks-junos-os/?cursor=WyIyMDE4LTA0LTExVDE5OjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxOC0wMDE3Il0>. Everything for agents: <https://agentprime.io/llms.txt>.