# Juniper Networks Junos OS.

Every CVE that names Juniper Networks Junos OS among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Junos OS: RPD process crashes upon receipt of a specific SNMP packet](https://agentprime.io/advisories/CVE-2019-0043.md)
  `CVE-2019-0043` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 10 Apr 2019 · Tags: Denial of service
- [Junos OS: EX4300-MP Series: IP transit traffic can reach the control plane via loopback interface.](https://agentprime.io/advisories/CVE-2019-0041.md)
  `CVE-2019-0041` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 10 Apr 2019 · Tags: Broken access control
- [Junos OS: Specially crafted packets sent to port 111 on any interface triggers responses from the management interface](https://agentprime.io/advisories/CVE-2019-0040.md)
  `CVE-2019-0040` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 10 Apr 2019 · Tags: Information disclosure
- [Junos OS: Login credentials are vulnerable to brute force attacks through the REST API](https://agentprime.io/advisories/CVE-2019-0039.md)
  `CVE-2019-0039` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 10 Apr 2019 · Tags: Authentication bypass
- [SRX Series: Crafted packets destined to fxp0 management interface on SRX340/SRX345 devices can lead to DoS](https://agentprime.io/advisories/CVE-2019-0038.md)
  `CVE-2019-0038` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 10 Apr 2019 · Tags: Denial of service
- [Junos OS: jdhcpd crash upon receipt of crafted DHCPv6 solicit message](https://agentprime.io/advisories/CVE-2019-0037.md)
  `CVE-2019-0037` · CVE record: Juniper Networks Junos OS · CVSS 7.4 High · Not analysed yet · Published 10 Apr 2019
- [Junos OS: Firewall filter terms named "internal-1" and "internal-2" being ignored](https://agentprime.io/advisories/CVE-2019-0036.md)
  `CVE-2019-0036` · CVE record: Juniper Networks Junos OS · CVSS 7.2 High · Not analysed yet · Published 10 Apr 2019 · Tags: Broken access control
- [Junos OS: 'set system ports console insecure' allows root password recovery on OAM volumes](https://agentprime.io/advisories/CVE-2019-0035.md)
  `CVE-2019-0035` · CVE record: Juniper Networks Junos OS · CVSS 6.8 Medium · Not analysed yet · Published 10 Apr 2019 · Tags: CWE-501
- [SRX Series: A remote attacker may cause a high CPU Denial of Service to the device when proxy ARP is configured.](https://agentprime.io/advisories/CVE-2019-0033.md)
  `CVE-2019-0033` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 10 Apr 2019 · Tags: Denial of service
- [Junos OS: jdhcpd daemon memory consumption Denial of Service when receiving specific IPv6 DHCP packets.](https://agentprime.io/advisories/CVE-2019-0031.md)
  `CVE-2019-0031` · CVE record: Juniper Networks Junos OS · CVSS 7.4 High · Not analysed yet · Published 10 Apr 2019 · Tags: Denial of service
- [Junos OS: RPD process crashes due to specific BGP peer restarts condition.](https://agentprime.io/advisories/CVE-2019-0028.md)
  `CVE-2019-0028` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 10 Apr 2019 · Tags: Denial of service
- [BGP packets can trigger rpd crash when BGP tracing is enabled.](https://agentprime.io/advisories/CVE-2019-0019.md)
  `CVE-2019-0019` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 10 Apr 2019 · Tags: Denial of service
- [QFX5000 Series, EX4300, EX4600: A stack buffer overflow vulnerability in Packet Forwarding Engine manager (FXPC) process](https://agentprime.io/advisories/CVE-2019-0008.md)
  `CVE-2019-0008` · CVE record: Juniper Networks Junos OS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Apr 2019 · Tags: Memory corruption
- [Junos OS: SRX Series: Deleted dynamic VPN users are allowed to establish VPN connections until reboot](https://agentprime.io/advisories/CVE-2019-0015.md)
  `CVE-2019-0015` · CVE record: Juniper Networks Junos OS · CVSS 5.4 Medium · Not analysed yet · Published 15 Jan 2019
- [Junos OS: QFX and PTX Series: FPC process crashes after J-Flow processes a malformed packet](https://agentprime.io/advisories/CVE-2019-0014.md)
  `CVE-2019-0014` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 15 Jan 2019
- [Junos OS: RPD crash upon receipt of malformed PIM packet](https://agentprime.io/advisories/CVE-2019-0013.md)
  `CVE-2019-0013` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 15 Jan 2019
- [Junos OS: rpd crash on VPLS PE upon receipt of specific BGP message](https://agentprime.io/advisories/CVE-2019-0012.md)
  `CVE-2019-0012` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 15 Jan 2019
- [Junos OS: Kernel crash after processing specific incoming packet to the out of band management interface (CVE-2019-0011)](https://agentprime.io/advisories/CVE-2019-0011.md)
  `CVE-2019-0011` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 15 Jan 2019
- [Junos OS: SRX Series: Crafted HTTP traffic may cause UTM to consume all mbufs, leading to Denial of Service](https://agentprime.io/advisories/CVE-2019-0010.md)
  `CVE-2019-0010` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 15 Jan 2019
- [Junos OS: EX2300 and EX3400: High disk I/O operations may disrupt the communication between RE and PFE](https://agentprime.io/advisories/CVE-2019-0009.md)
  `CVE-2019-0009` · CVE record: Juniper Networks Junos OS · CVSS 5.5 Medium · Not analysed yet · Published 15 Jan 2019
- [Junos OS: vMX series: Predictable IP ID sequence numbers vulnerability](https://agentprime.io/advisories/CVE-2019-0007.md)
  `CVE-2019-0007` · CVE record: Juniper Networks Junos OS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Jan 2019
- [Junos OS: EX, QFX and MX series: Packet Forwarding Engine manager (FXPC) process crashes due to a crafted HTTP packet in a Virtual Chassis configuration](https://agentprime.io/advisories/CVE-2019-0006.md)
  `CVE-2019-0006` · CVE record: Juniper Networks Junos OS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Jan 2019 · Tags: Memory corruption
- [Junos OS: A flowspec BGP update with a specific term-order causes routing protocol daemon (rpd) process to crash with a core.](https://agentprime.io/advisories/CVE-2019-0003.md)
  `CVE-2019-0003` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 15 Jan 2019 · Tags: Denial of service
- [Junos OS: EX2300 and EX3400 series: Certain stateless firewall filter rules might not take effect](https://agentprime.io/advisories/CVE-2019-0002.md)
  `CVE-2019-0002` · CVE record: Juniper Networks Junos OS · CVSS 5.8 Medium · Not analysed yet · Published 15 Jan 2019 · Tags: CWE-794
- [Junos OS: MX Series: uncontrolled recursion and crash in Broadband Edge subscriber management daemon (bbe-smgd).](https://agentprime.io/advisories/CVE-2019-0001.md)
  `CVE-2019-0001` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 15 Jan 2019 · Tags: Denial of service
- [Junos OS: Nexthop index allocation failed: private index space exhausted after incoming ARP requests to management interface](https://agentprime.io/advisories/CVE-2018-0063.md)
  `CVE-2018-0063` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 10 Oct 2018
- [Junos OS: Denial of Service in J-Web](https://agentprime.io/advisories/CVE-2018-0062.md)
  `CVE-2018-0062` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2018
- [Junos OS: Denial of service in telnetd](https://agentprime.io/advisories/CVE-2018-0061.md)
  `CVE-2018-0061` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2018
- [Junos OS: Invalid IP/mask learned from DHCP server might cause device control daemon (dcd) process crash](https://agentprime.io/advisories/CVE-2018-0060.md)
  `CVE-2018-0060` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2018
- [MX Series: In BBE configurations, receipt of a crafted IPv6 exception packet causes a Denial of Service](https://agentprime.io/advisories/CVE-2018-0058.md)
  `CVE-2018-0058` · CVE record: Juniper Networks Junos OS · CVSS 5.9 Medium · Not analysed yet · Published 10 Oct 2018
- [Junos OS: authd allows assignment of IP address requested by DHCP subscriber logging in with Option 50 (Requested IP Address)](https://agentprime.io/advisories/CVE-2018-0057.md)
  `CVE-2018-0057` · CVE record: Juniper Networks Junos OS · CVSS 6.1 Medium · Not analysed yet · Published 10 Oct 2018
- [MX Series: L2ALD daemon may crash if a duplicate MAC is learned by two different interfaces](https://agentprime.io/advisories/CVE-2018-0056.md)
  `CVE-2018-0056` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 10 Oct 2018
- [Junos OS: jdhcpd process crash during processing of specially crafted DHCPv6 message](https://agentprime.io/advisories/CVE-2018-0055.md)
  `CVE-2018-0055` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 10 Oct 2018
- [QFX5000/EX4600 Series: Routing protocol flap upon receipt of high rate of Ethernet frames](https://agentprime.io/advisories/CVE-2018-0054.md)
  `CVE-2018-0054` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 10 Oct 2018
- [vSRX Series: A local authentication vulnerability may lead to full control of a vSRX instance while the system is booting.](https://agentprime.io/advisories/CVE-2018-0053.md)
  `CVE-2018-0053` · CVE record: Juniper Networks Junos OS · CVSS 6.8 Medium · Not analysed yet · Published 10 Oct 2018
- [Junos OS: Unauthenticated remote root access possible when RSH service is enabled](https://agentprime.io/advisories/CVE-2018-0052.md)
  `CVE-2018-0052` · CVE record: Juniper Networks Junos OS · CVSS 7.2 High · Not analysed yet · Published 10 Oct 2018
- [Junos OS: Denial of Service vulnerability in MS-PIC, MS-MIC, MS-MPC, MS-DPC and SRX flow daemon (flowd) related to SIP ALG](https://agentprime.io/advisories/CVE-2018-0051.md)
  `CVE-2018-0051` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 10 Oct 2018
- [Junos OS: Receipt of a malformed MPLS RSVP packet leads to a Routing Protocols Daemon (RPD) crash.](https://agentprime.io/advisories/CVE-2018-0050.md)
  `CVE-2018-0050` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 10 Oct 2018
- [Junos OS: Receipt of a specifically crafted malicious MPLS packet leads to a Junos kernel crash.](https://agentprime.io/advisories/CVE-2018-0049.md)
  `CVE-2018-0049` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 10 Oct 2018
- [Junos OS: Memory exhaustion denial of service vulnerability in Routing Protocols Daemon (RPD) with Juniper Extension Toolkit (JET) support.](https://agentprime.io/advisories/CVE-2018-0048.md)
  `CVE-2018-0048` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 10 Oct 2018 · Tags: Denial of service
- [Junos OS: RPD daemon crashes due to receipt of specific Draft-Rosen MVPN control packet in Draft-Rosen MVPN configuration](https://agentprime.io/advisories/CVE-2018-0045.md)
  `CVE-2018-0045` · CVE record: Juniper Networks Junos OS · CVSS 8.8 High · Not analysed yet · Published 10 Oct 2018
- [NFX Series: Insecure sshd configuration in Juniper Device Manager (JDM) and host OS](https://agentprime.io/advisories/CVE-2018-0044.md)
  `CVE-2018-0044` · CVE record: Juniper Networks Junos OS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Oct 2018
- [Junos OS: RPD daemon crashes upon receipt of specific MPLS packet](https://agentprime.io/advisories/CVE-2018-0043.md)
  `CVE-2018-0043` · CVE record: Juniper Networks Junos OS · CVSS 8.8 High · Not analysed yet · Published 10 Oct 2018
- [Junos OS: RPD daemon crashes due to receipt of crafted BGP NOTIFICATION messages](https://agentprime.io/advisories/CVE-2018-0037.md)
  `CVE-2018-0037` · CVE record: Juniper Networks Junos OS · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Jul 2018
- [Junos OS: QFX5200 and QFX10002: Unintended ONIE partition was shipped with certain Junos OS .bin and .iso images](https://agentprime.io/advisories/CVE-2018-0035.md)
  `CVE-2018-0035` · CVE record: Juniper Networks Junos OS · CVSS 4.4 Medium · Not analysed yet · Published 11 Jul 2018
- [Junos OS: A malicious crafted IPv6 DHCP packet may cause the JDHCPD daemon to core](https://agentprime.io/advisories/CVE-2018-0034.md)
  `CVE-2018-0034` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 11 Jul 2018
- [Junos OS: RPD crash when receiving a crafted BGP UPDATE](https://agentprime.io/advisories/CVE-2018-0032.md)
  `CVE-2018-0032` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 11 Jul 2018
- [Junos OS: Receipt of specially crafted UDP packets over MPLS may bypass stateless IP firewall rules](https://agentprime.io/advisories/CVE-2018-0031.md)
  `CVE-2018-0031` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 11 Jul 2018
- [Junos OS: MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) and PTX1K: Line card may crash upon receipt of specific MPLS packet.](https://agentprime.io/advisories/CVE-2018-0030.md)
  `CVE-2018-0030` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 11 Jul 2018
- [Junos OS: Kernel crash (vmcore) during broadcast storm after enabling 'monitor traffic interface fxp0'](https://agentprime.io/advisories/CVE-2018-0029.md)
  `CVE-2018-0029` · CVE record: Juniper Networks Junos OS · CVSS 5.7 Medium · Not analysed yet · Published 11 Jul 2018
- [Junos OS: Receipt of malformed RSVP packet may lead to RPD denial of service](https://agentprime.io/advisories/CVE-2018-0027.md)
  `CVE-2018-0027` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 11 Jul 2018
- [Junos OS: Stateless IP firewall filter rules stop working as expected after reboot or upgrade](https://agentprime.io/advisories/CVE-2018-0026.md)
  `CVE-2018-0026` · CVE record: Juniper Networks Junos OS · CVSS 4.7 Medium · Not analysed yet · Published 11 Jul 2018
- [Junos OS: SRX Series: Credentials exposed when using HTTP and HTTPS Firewall Pass-through User Authentication](https://agentprime.io/advisories/CVE-2018-0025.md)
  `CVE-2018-0025` · CVE record: Juniper Networks Junos OS · CVSS 6.1 Medium · Not analysed yet · Published 11 Jul 2018 · Tags: Weak cryptography or TLS, CWE-300
- [Junos OS: A privilege escalation vulnerability exists where authenticated users with shell access can become root](https://agentprime.io/advisories/CVE-2018-0024.md)
  `CVE-2018-0024` · CVE record: Juniper Networks Junos OS · CVSS 7.8 High · Not analysed yet · Published 11 Jul 2018
- [Junos OS: Mbuf leak due to processing MPLS packets in VPLS network.](https://agentprime.io/advisories/CVE-2018-0022.md)
  `CVE-2018-0022` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 11 Apr 2018
- [Junos OS: Short MacSec keys may allow man-in-the-middle attacks.](https://agentprime.io/advisories/CVE-2018-0021.md)
  `CVE-2018-0021` · CVE record: Juniper Networks Junos OS · CVSS 8.8 High · Not analysed yet · Published 11 Apr 2018
- [Junos OS: rpd daemon cores due to malformed BGP UPDATE packet](https://agentprime.io/advisories/CVE-2018-0020.md)
  `CVE-2018-0020` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 11 Apr 2018
- [Junos: Denial of service vulnerability in SNMP MIB-II subagent daemon (mib2d).](https://agentprime.io/advisories/CVE-2018-0019.md)
  `CVE-2018-0019` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 11 Apr 2018
- [SRX Series: A crafted packet may lead to information disclosure and firewall rule bypass during compilation of IDP policies.](https://agentprime.io/advisories/CVE-2018-0018.md)
  `CVE-2018-0018` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 11 Apr 2018
- [SRX Series: Denial of service vulnerability in flowd daemon on devices configured with NAT-PT](https://agentprime.io/advisories/CVE-2018-0017.md)
  `CVE-2018-0017` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 11 Apr 2018

Newest: <https://agentprime.io/advisories/technology/juniper-networks-junos-os.md>
Older: <https://agentprime.io/advisories/technology/juniper-networks-junos-os.md?cursor=WyIyMDE4LTA0LTExVDE5OjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAxOC0wMDE3Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=juniper-networks-junos-os&cursor=WyIyMDE5LTA0LTEwVDIwOjEzOjUxLjY2NDAwMFoiLCJDVkUtMjAxOS0wMDQ0Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/juniper-networks-junos-os/?cursor=WyIyMDE5LTA0LTEwVDIwOjEzOjUxLjY2NDAwMFoiLCJDVkUtMjAxOS0wMDQ0Il0>. Everything for agents: <https://agentprime.io/llms.txt>.