# Juniper Networks Junos OS. Every CVE that names Juniper Networks Junos OS among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Junos OS and Junos OS Evolved: l2cpd crash upon receipt of a specific TLV](https://agentprime.io/advisories/CVE-2024-30380.md) `CVE-2024-30380` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 16 Apr 2024 · Tags: CWE-755 - [Junos OS: MX Series: bbe-smgd process crash upon execution of specific CLI commands](https://agentprime.io/advisories/CVE-2024-30378.md) `CVE-2024-30378` · CVE record: Juniper Networks Junos OS · CVSS 6.9 Medium · Not analysed yet · Published 16 Apr 2024 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: The l2ald crashes on receiving telemetry messages from a specific subscription](https://agentprime.io/advisories/CVE-2024-30402.md) `CVE-2024-30402` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.2 High · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-754 - [Junos OS: MX Series and EX9200-15C: Stack-based buffer overflow in aftman](https://agentprime.io/advisories/CVE-2024-30401.md) `CVE-2024-30401` · CVE record: Juniper Networks Junos OS · CVSS 8.2 High · Not analysed yet · Published 12 Apr 2024 · Tags: Memory corruption - [Junos OS: SRX4600 Series - A high amount of specific traffic causes packet drops and an eventual PFE crash](https://agentprime.io/advisories/CVE-2024-30398.md) `CVE-2024-30398` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 12 Apr 2024 · Tags: Memory corruption - [Junos OS: An invalid certificate causes a Denial of Service in the Internet Key Exchange (IKE) process](https://agentprime.io/advisories/CVE-2024-30397.md) `CVE-2024-30397` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-754 - [Junos OS: MX Series with SPC3, and SRX Series: When IPsec authentication is configured with "hmac-sha-384" and "hmac-sha-512" no authentication of traffic is performed](https://agentprime.io/advisories/CVE-2024-30391.md) `CVE-2024-30391` · CVE record: Juniper Networks Junos OS · CVSS 6.3 Medium · Not analysed yet · Published 12 Apr 2024 · Tags: Authentication bypass - [Junos OS: EX4300 Series: Firewall filter not blocking egress traffic](https://agentprime.io/advisories/CVE-2024-30389.md) `CVE-2024-30389` · CVE record: Juniper Networks Junos OS · CVSS 6.9 Medium · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-696 - [Junos OS and Junos OS Evolved: In a EVPN-VXLAN scenario state changes on adjacent systems can cause an l2ald process crash](https://agentprime.io/advisories/CVE-2024-30386.md) `CVE-2024-30386` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 12 Apr 2024 · Tags: Memory corruption - [Junos OS: EX4300 Series: If a specific CLI command is issued PFE crashes will occur](https://agentprime.io/advisories/CVE-2024-30384.md) `CVE-2024-30384` · CVE record: Juniper Networks Junos OS · CVSS 6.8 Medium · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-754 - [Junos OS and Junos OS Evolved: RPD crash when CoS-based forwarding (CBF) policy is configured](https://agentprime.io/advisories/CVE-2024-30382.md) `CVE-2024-30382` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-755 - [Junos OS: ACX5448 & ACX710: Due to interface flaps the PFE process can crash](https://agentprime.io/advisories/CVE-2024-30387.md) `CVE-2024-30387` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-820 - [Junos OS: QFX5000 Series and EX Series: Specific malformed LACP packets will cause flaps](https://agentprime.io/advisories/CVE-2024-30388.md) `CVE-2024-30388` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-653 - [Junos OS: MX Series with SPC3 and MS-MPC/-MIC: When URL filtering is enabled and a specific URL request is received a flowd crash occurs](https://agentprime.io/advisories/CVE-2024-30392.md) `CVE-2024-30392` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 12 Apr 2024 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: A specific EVPN type-5 route causes rpd crash](https://agentprime.io/advisories/CVE-2024-30394.md) `CVE-2024-30394` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 12 Apr 2024 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash](https://agentprime.io/advisories/CVE-2024-30395.md) `CVE-2024-30395` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-1287 - [Junos OS: SRX 5000 Series with SPC2: Processing of specific crafted packets when ALG is enabled causes a transit traffic Denial of Service](https://agentprime.io/advisories/CVE-2024-30405.md) `CVE-2024-30405` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 12 Apr 2024 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: Higher CPU consumption on routing engine leads to Denial of Service (DoS).](https://agentprime.io/advisories/CVE-2024-30409.md) `CVE-2024-30409` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-754 - [Junos OS and Junos OS Evolved: When LLDP is enabled and a malformed LLDP packet is received, l2cpd crashes](https://agentprime.io/advisories/CVE-2024-21618.md) `CVE-2024-21618` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 12 Apr 2024 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: A low-privileged user can access confidential information](https://agentprime.io/advisories/CVE-2024-21615.md) `CVE-2024-21615` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 12 Apr 2024 · Tags: Broken access control - [Junos OS: If in a scaled CoS scenario information on CoS state is gathered mgd processes get stuck](https://agentprime.io/advisories/CVE-2024-21610.md) `CVE-2024-21610` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-755 - [Junos OS: MX Series with SPC3, and SRX Series: If specific IPsec parameters are negotiated iked will crash due to a memory leak](https://agentprime.io/advisories/CVE-2024-21609.md) `CVE-2024-21609` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 12 Apr 2024 · Tags: Denial of service - [Junos OS: SRX 300 Series: Specific link local traffic causes a control plane overload](https://agentprime.io/advisories/CVE-2024-21605.md) `CVE-2024-21605` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 12 Apr 2024 · Tags: Information disclosure - [Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash](https://agentprime.io/advisories/CVE-2024-21598.md) `CVE-2024-21598` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-1286 - [Junos OS: MX Series with MPC10, MPC11, LC9600, and MX304: A specific MPLS packet will cause a PFE crash](https://agentprime.io/advisories/CVE-2024-21593.md) `CVE-2024-21593` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 12 Apr 2024 · Tags: CWE-703 - [Junos OS: SRX Series and EX Series: J-Web doesn't sufficiently sanitize input to prevent XSS](https://agentprime.io/advisories/CVE-2024-21620.md) `CVE-2024-21620` · CVE record: Juniper Networks Junos OS · CVSS 8.8 High · Not analysed yet · Published 25 Jan 2024 · Tags: Cross-site scripting (XSS) - [Junos OS: SRX Series and EX Series: J-Web - unauthenticated access to temporary files containing sensitive information](https://agentprime.io/advisories/CVE-2024-21619.md) `CVE-2024-21619` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 25 Jan 2024 · Tags: Information disclosure, Authentication bypass - [Junos OS: BGP flap on NSR-enabled devices causes memory leak](https://agentprime.io/advisories/CVE-2024-21617.md) `CVE-2024-21617` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 12 Jan 2024 · Tags: CWE-459 - [Junos OS: MX Series and SRX Series: Processing of a specific SIP packet causes NAT IP allocation to fail](https://agentprime.io/advisories/CVE-2024-21616.md) `CVE-2024-21616` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2024 · Tags: CWE-1286 - [Junos OS and Junos OS Evolved: A specific query via DREND causes rpd crash](https://agentprime.io/advisories/CVE-2024-21614.md) `CVE-2024-21614` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2024 · Tags: CWE-754 - [Junos OS and Junos OS Evolved: A link flap causes patroot memory leak which leads to rpd crash](https://agentprime.io/advisories/CVE-2024-21613.md) `CVE-2024-21613` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Jan 2024 · Tags: Denial of service - [Junos OS and Junos OS Evolved: In a jflow scenario continuous route churn will cause a memory leak and eventually an rpd crash](https://agentprime.io/advisories/CVE-2024-21611.md) `CVE-2024-21611` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2024 · Tags: Denial of service - [Junos OS: MX Series and EX9200 Series: If the "tcp-reset" option used in an IPv6 filter, matched packets are accepted instead of rejected](https://agentprime.io/advisories/CVE-2024-21607.md) `CVE-2024-21607` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 12 Jan 2024 · Tags: CWE-447 - [Junos OS: SRX Series: When "tcp-encap" is configured and specific packets are received flowd will crash](https://agentprime.io/advisories/CVE-2024-21606.md) `CVE-2024-21606` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2024 · Tags: Memory corruption - [Junos OS: MX Series: Gathering statistics in a scaled SCU/DCU configuration will lead to a device crash](https://agentprime.io/advisories/CVE-2024-21603.md) `CVE-2024-21603` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 12 Jan 2024 · Tags: CWE-754 - [Junos OS: SRX Series: Due to an error in processing TCP events flowd will crash](https://agentprime.io/advisories/CVE-2024-21601.md) `CVE-2024-21601` · CVE record: Juniper Networks Junos OS · CVSS 5.9 Medium · Not analysed yet · Published 12 Jan 2024 · Tags: Race condition - [Junos OS: PTX Series: In an FTI scenario MPLS packets hitting reject next-hop will cause a host path wedge condition](https://agentprime.io/advisories/CVE-2024-21600.md) `CVE-2024-21600` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 12 Jan 2024 · Tags: CWE-76 - [Junos OS: MX Series: MPC3E memory leak with PTP configuration](https://agentprime.io/advisories/CVE-2024-21599.md) `CVE-2024-21599` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 12 Jan 2024 · Tags: Denial of service - [Junos OS: MX Series: In an AF scenario traffic can bypass configured lo0 firewall filters](https://agentprime.io/advisories/CVE-2024-21597.md) `CVE-2024-21597` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 12 Jan 2024 · Tags: Information disclosure - [Junos OS and Junos OS Evolved: A specific BGP UPDATE message will cause a crash in the backup Routing Engine in NSR-enabled devices](https://agentprime.io/advisories/CVE-2024-21596.md) `CVE-2024-21596` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 12 Jan 2024 · Tags: Memory corruption - [Junos OS: EX4100, EX4400, EX4600, QFX5000 Series: A high rate of specific ICMP traffic will cause the PFE to hang](https://agentprime.io/advisories/CVE-2024-21595.md) `CVE-2024-21595` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2024 · Tags: CWE-1286 - [Junos OS: SRX 5000 Series: Repeated execution of a specific CLI command causes a flowd crash](https://agentprime.io/advisories/CVE-2024-21594.md) `CVE-2024-21594` · CVE record: Juniper Networks Junos OS · CVSS 5.5 Medium · Not analysed yet · Published 12 Jan 2024 · Tags: Memory corruption - [Junos OS: SRX Series and EX Series: Security Vulnerability in J-web allows a preAuth Remote Code Execution](https://agentprime.io/advisories/CVE-2024-21591.md) `CVE-2024-21591` · CVE record: Juniper Networks Junos OS · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.18 · Not analysed yet · Published 12 Jan 2024 · Tags: Memory corruption - [Junos OS: MX Series: Memory leak in bbe-smgd process if BFD liveness detection for DHCP subscribers is enabled](https://agentprime.io/advisories/CVE-2024-21587.md) `CVE-2024-21587` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 12 Jan 2024 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: BGP session flaps on NSR-enabled devices can cause rpd crash](https://agentprime.io/advisories/CVE-2024-21585.md) `CVE-2024-21585` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 12 Jan 2024 · Tags: CWE-755 - [Junos OS: jdhcpd will hang on receiving a specific DHCP packet](https://agentprime.io/advisories/CVE-2023-36842.md) `CVE-2023-36842` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 12 Jan 2024 · Tags: CWE-703 - [Junos OS and Junos OS Evolved: The rpd will crash upon receiving a malformed BGP UPDATE message](https://agentprime.io/advisories/CVE-2023-44204.md) `CVE-2023-44204` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: CWE-1286 - [Junos OS: QFX5000 Series, EX2300, EX3400, EX4100, EX4400 and EX4600: Packet flooding will occur when IGMP traffic is sent to an isolated VLAN](https://agentprime.io/advisories/CVE-2023-44203.md) `CVE-2023-44203` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: CWE-703 - [Junos OS and Junos OS Evolved: A local attacker can retrieve sensitive information and elevate privileges on the device to an authorized user.](https://agentprime.io/advisories/CVE-2023-44201.md) `CVE-2023-44201` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.0 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: Broken access control - [Junos OS: MX Series: In a PTP scenario a prolonged routing protocol churn can trigger an FPC reboot](https://agentprime.io/advisories/CVE-2023-44199.md) `CVE-2023-44199` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 12 Oct 2023 · Tags: CWE-754 - [Junos OS: SRX Series and MX Series: SIP ALG doesn't drop specifically malformed retransmitted SIP packets](https://agentprime.io/advisories/CVE-2023-44198.md) `CVE-2023-44198` · CVE record: Juniper Networks Junos OS · CVSS 5.8 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: CWE-754 - [Junos OS and Junos OS Evolved: An rpd crash may occur when BGP is processing newly learned routes](https://agentprime.io/advisories/CVE-2023-44197.md) `CVE-2023-44197` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 12 Oct 2023 · Tags: Memory corruption - [Junos OS: An unauthenticated attacker with local access to the device can create a backdoor with root privileges](https://agentprime.io/advisories/CVE-2023-44194.md) `CVE-2023-44194` · CVE record: Juniper Networks Junos OS · CVSS 8.4 High · Not analysed yet · Published 12 Oct 2023 · Tags: Broken access control - [Junos OS: MX Series: An FPC crash is observed when CFM is enabled in a VPLS scenario and a specific LDP related command is run](https://agentprime.io/advisories/CVE-2023-44193.md) `CVE-2023-44193` · CVE record: Juniper Networks Junos OS · CVSS 5.5 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: Denial of service - [Junos OS: QFX5000 Series: DMA memory leak is observed when specific DHCP packets are transmitted over pseudo-VTEP](https://agentprime.io/advisories/CVE-2023-44192.md) `CVE-2023-44192` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 12 Oct 2023 · Tags: CWE-20 - [Junos OS: QFX5000 Series and EX4000 Series: Denial of Service (DoS) on a large scale VLAN due to PFE hogging](https://agentprime.io/advisories/CVE-2023-44191.md) `CVE-2023-44191` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 12 Oct 2023 · Tags: Denial of service - [Junos OS and Junos OS Evolved: In an BGP scenario RPD crashes upon receiving and processing a specific malformed ISO VPN BGP UPDATE packet](https://agentprime.io/advisories/CVE-2023-44185.md) `CVE-2023-44185` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 12 Oct 2023 · Tags: CWE-20 - [Junos OS and Junos OS Evolved: High CPU load due to specific NETCONF command](https://agentprime.io/advisories/CVE-2023-44184.md) `CVE-2023-44184` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: Memory corruption - [Junos OS: QFX5000 Series, EX4600 Series: In a VxLAN scenario an adjacent attacker within the VxLAN sending genuine packets may cause a DMA memory leak to occur.](https://agentprime.io/advisories/CVE-2023-44183.md) `CVE-2023-44183` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: CWE-20 - [Junos OS and Junos OS Evolved: An Unchecked Return Value in multiple users interfaces affects confidentiality and integrity of device operations](https://agentprime.io/advisories/CVE-2023-44182.md) `CVE-2023-44182` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.3 High · Not analysed yet · Published 12 Oct 2023 · Tags: CWE-252 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .