# Juniper Networks Junos OS. Every CVE that names Juniper Networks Junos OS among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Junos OS and Junos OS Evolved: Receipt of a malformed LLDP TLV results in l2cpd crash](https://agentprime.io/advisories/CVE-2025-30646.md) `CVE-2025-30646` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-195 - [Junos OS: SRX Series: Transmission of specific control traffic sent out of a DS-Lite tunnel results in flowd crash](https://agentprime.io/advisories/CVE-2025-30645.md) `CVE-2025-30645` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 9 Apr 2025 · Tags: Memory corruption - [Junos OS: EX2300, EX3400, EX4000 Series, QFX5k Series: Receipt of a specific DHCP packet causes FPC crash when DHCP Option 82 is enabled](https://agentprime.io/advisories/CVE-2025-30644.md) `CVE-2025-30644` · CVE record: Juniper Networks Junos OS · CVSS 7.7 High · Not analysed yet · Published 9 Apr 2025 · Tags: Memory corruption - [Junos OS: SRX and EX Series, MX240, MX480, MX960, QFX5120 Series: When web management is enabled for specific services an attacker may cause a CPU spike by sending genuine packets to the device](https://agentprime.io/advisories/CVE-2025-21601.md) `CVE-2025-21601` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-573 - [Junos OS and Junos OS Evolved: When BGP rib-sharding and update-threading are configured and a peer flaps, an rpd core is observed](https://agentprime.io/advisories/CVE-2025-21597.md) `CVE-2025-21597` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.0 Medium · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-754 - [Junos OS and Junos OS Evolved: In an EVPN-VXLAN scenario specific ARP or NDP packets cause FPC to crash](https://agentprime.io/advisories/CVE-2025-21595.md) `CVE-2025-21595` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 9 Apr 2025 · Tags: Denial of service - [Junos OS: MX Series: In DS-lite and NAT scenario receipt of crafted IPv6 traffic causes port block](https://agentprime.io/advisories/CVE-2025-21594.md) `CVE-2025-21594` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-754 - [Junos OS: An unauthenticated adjacent attacker sending a malformed DHCP packet causes jdhcpd to crash](https://agentprime.io/advisories/CVE-2025-21591.md) `CVE-2025-21591` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 9 Apr 2025 · Tags: Memory corruption - [Junos OS: An local attacker with shell access can execute arbitrary code](https://agentprime.io/advisories/CVE-2025-21590.md) `CVE-2025-21590` · CVE record: Juniper Networks Junos OS · CVSS 6.7 Medium · Critical (KEV) · In CISA KEV · Not analysed yet · Published 12 Mar 2025 · Tags: CWE-653 - [Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to RPD crash](https://agentprime.io/advisories/CVE-2024-39564.md) `CVE-2024-39564` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 5 Feb 2025 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: When BGP traceoptions are configured, receipt of malformed BGP packets causes RPD to crash](https://agentprime.io/advisories/CVE-2025-21598.md) `CVE-2025-21598` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.2 High · Not analysed yet · Published 9 Jan 2025 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash](https://agentprime.io/advisories/CVE-2025-21600.md) `CVE-2025-21600` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 9 Jan 2025 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: Receipt of specially crafted BGP update packet causes RPD crash](https://agentprime.io/advisories/CVE-2025-21602.md) `CVE-2025-21602` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 9 Jan 2025 · Tags: CWE-755 - [Junos OS: SRX1500,SRX4100,SRX4200: Execution of low-privileged CLI command results in chassisd crash](https://agentprime.io/advisories/CVE-2025-21596.md) `CVE-2025-21596` · CVE record: Juniper Networks Junos OS · CVSS 6.8 Medium · Not analysed yet · Published 9 Jan 2025 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to crash](https://agentprime.io/advisories/CVE-2025-21593.md) `CVE-2025-21593` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 9 Jan 2025 · Tags: CWE-664 - [Junos OS: SRX Series: Low privileged user able to access highly sensitive information on file system](https://agentprime.io/advisories/CVE-2025-21592.md) `CVE-2025-21592` · CVE record: Juniper Networks Junos OS · CVSS 6.8 Medium · Not analysed yet · Published 9 Jan 2025 · Tags: Information disclosure - [Junos OS and Junos OS Evolved: BGP update message containing aggregator attribute with an ASN value of zero (0) is accepted](https://agentprime.io/advisories/CVE-2024-47507.md) `CVE-2024-47507` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-754 - [Junos OS: SRX Series: A large amount of traffic being processed by ATP Cloud can lead to a PFE crash](https://agentprime.io/advisories/CVE-2024-47506.md) `CVE-2024-47506` · CVE record: Juniper Networks Junos OS · CVSS 8.2 High · Not analysed yet · Published 11 Oct 2024 · Tags: Denial of service - [Junos OS: SRX5000 Series: Receipt of a specific malformed packet will cause a flowd crash](https://agentprime.io/advisories/CVE-2024-47504.md) `CVE-2024-47504` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-1287 - [Junos OS: SRX4600 and SRX5000 Series: Sequence of specific PIM packets causes a flowd crash](https://agentprime.io/advisories/CVE-2024-47503.md) `CVE-2024-47503` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-754 - [Junos OS: MX304, MX with MPC10/11/LC9600, and EX9200 with EX9200-15C: In a VPLS or Junos Fusion scenario specific show commands cause FPCs to crash](https://agentprime.io/advisories/CVE-2024-47501.md) `CVE-2024-47501` · CVE record: Juniper Networks Junos OS · CVSS 6.8 Medium · Not analysed yet · Published 11 Oct 2024 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: In a BMP scenario receipt of a malformed AS PATH attribute can cause an RPD crash](https://agentprime.io/advisories/CVE-2024-47499.md) `CVE-2024-47499` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-754 - [Junos OS: SRX Series, QFX Series, MX Series and EX Series: Receiving specific HTTPS traffic causes resource exhaustion](https://agentprime.io/advisories/CVE-2024-47497.md) `CVE-2024-47497` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 11 Oct 2024 · Tags: Denial of service - [Junos OS: MX Series: The PFE will crash on running specific command](https://agentprime.io/advisories/CVE-2024-47496.md) `CVE-2024-47496` · CVE record: Juniper Networks Junos OS · CVSS 6.8 Medium · Not analysed yet · Published 11 Oct 2024 · Tags: Memory corruption - [Junos OS: Due to a race condition AgentD process causes a memory corruption and FPC reset](https://agentprime.io/advisories/CVE-2024-47494.md) `CVE-2024-47494` · CVE record: Juniper Networks Junos OS · CVSS 8.2 High · Not analysed yet · Published 11 Oct 2024 · Tags: Race condition - [Junos OS: MX Series: Trio-based FPCs: Continuous physical Interface flaps causes local FPC to crash](https://agentprime.io/advisories/CVE-2024-47493.md) `CVE-2024-47493` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 11 Oct 2024 · Tags: Denial of service - [Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP path attribute leads to an RPD crash](https://agentprime.io/advisories/CVE-2024-47491.md) `CVE-2024-47491` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.2 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: cRPD: Receipt of crafted TCP traffic can trigger high CPU utilization](https://agentprime.io/advisories/CVE-2024-39547.md) `CVE-2024-39547` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-755 - [Junos OS: SRX Series: Low privileged user able to access sensitive information on file system](https://agentprime.io/advisories/CVE-2024-39527.md) `CVE-2024-39527` · CVE record: Juniper Networks Junos OS · CVSS 6.8 Medium · Not analysed yet · Published 11 Oct 2024 · Tags: Information disclosure - [Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11/LC9600, MX304, EX9200, PTX Series: Receipt of malformed DHCP packets causes interfaces to stop processing packets](https://agentprime.io/advisories/CVE-2024-39526.md) `CVE-2024-39526` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 11 Oct 2024 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: When BGP traceoptions is enabled, receipt of specially crafted BGP packet causes RPD crash](https://agentprime.io/advisories/CVE-2024-39525.md) `CVE-2024-39525` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 9 Oct 2024 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash](https://agentprime.io/advisories/CVE-2024-39516.md) `CVE-2024-39516` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 9 Oct 2024 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: With BGP traceoptions enabled, receipt of specifically malformed BGP update causes RPD crash](https://agentprime.io/advisories/CVE-2024-39515.md) `CVE-2024-39515` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 9 Oct 2024 · Tags: CWE-1288 - [Junos OS and Junos OS Evolved: Malformed BGP UPDATE causes RPD crash](https://agentprime.io/advisories/CVE-2024-39552.md) `CVE-2024-39552` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 11 Jul 2024 · Tags: CWE-755 - [Junos OS: SRX Series and MX Series with SPC3 and MS-MPC/MIC: Receipt of specific packets in H.323 ALG causes traffic drop](https://agentprime.io/advisories/CVE-2024-39551.md) `CVE-2024-39551` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 11 Jul 2024 · Tags: Denial of service - [Junos OS: MX Series with SPC3 line card: Port flaps causes rtlogd memory leak leading to Denial of Service](https://agentprime.io/advisories/CVE-2024-39550.md) `CVE-2024-39550` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 11 Jul 2024 · Tags: Denial of service - [Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to a memory leak](https://agentprime.io/advisories/CVE-2024-39549.md) `CVE-2024-39549` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 11 Jul 2024 · Tags: Denial of service - [Junos OS: SRX Series, MX Series with SPC3 and NFX350: When VPN tunnels parameters are not configured in specific way the iked process will crash](https://agentprime.io/advisories/CVE-2024-39545.md) `CVE-2024-39545` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 11 Jul 2024 · Tags: CWE-754 - [Junos OS and Junos OS Evolved: Receipt of a large RPKI-RTR PDU packet can cause rpd to crash](https://agentprime.io/advisories/CVE-2024-39543.md) `CVE-2024-39543` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 11 Jul 2024 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: A malformed CFM packet or specific transit traffic leads to FPC crash](https://agentprime.io/advisories/CVE-2024-39542.md) `CVE-2024-39542` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 11 Jul 2024 · Tags: CWE-1286 - [Junos OS and Junos OS Evolved: Inconsistent information in the TE database can lead to an rpd crash](https://agentprime.io/advisories/CVE-2024-39541.md) `CVE-2024-39541` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 11 Jul 2024 · Tags: CWE-755 - [Junos OS: SRX Series, and MX Series with SPC3: Specific valid TCP traffic can cause a pfe crash](https://agentprime.io/advisories/CVE-2024-39540.md) `CVE-2024-39540` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 11 Jul 2024 · Tags: CWE-754 - [Junos OS: MX Series: Continuous subscriber logins will lead to a memory leak and eventually an FPC crash](https://agentprime.io/advisories/CVE-2024-39539.md) `CVE-2024-39539` · CVE record: Juniper Networks Junos OS · CVSS 6.0 Medium · Not analysed yet · Published 11 Jul 2024 · Tags: Denial of service - [Junos OS and Junos OS Evolved: Flaps of BFD sessions with authentication cause a ppmd memory leak](https://agentprime.io/advisories/CVE-2024-39536.md) `CVE-2024-39536` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.0 Medium · Not analysed yet · Published 11 Jul 2024 · Tags: Denial of service - [Junos OS: QFX5000 Series and EX4600 Series: Output firewall filter is not applied if certain match criteria are used](https://agentprime.io/advisories/CVE-2024-39533.md) `CVE-2024-39533` · CVE record: Juniper Networks Junos OS · CVSS 6.9 Medium · Not analysed yet · Published 11 Jul 2024 · Tags: CWE-447 - [Junos OS and Junos OS Evolved: Confidential information in logs can be accessed by another user](https://agentprime.io/advisories/CVE-2024-39532.md) `CVE-2024-39532` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 11 Jul 2024 · Tags: Information disclosure - [Junos OS: Attempting to access specific sensors on platforms not supporting these will lead to a chassisd crash](https://agentprime.io/advisories/CVE-2024-39530.md) `CVE-2024-39530` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 11 Jul 2024 · Tags: CWE-754 - [Junos OS: SRX Series: If DNS traceoptions are configured in a DGA or tunnel detection scenario specific DNS traffic leads to a PFE crash](https://agentprime.io/advisories/CVE-2024-39529.md) `CVE-2024-39529` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 11 Jul 2024 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: Concurrent deletion of a routing-instance and receipt of an SNMP request cause an RPD crash](https://agentprime.io/advisories/CVE-2024-39528.md) `CVE-2024-39528` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.0 Medium · Not analysed yet · Published 11 Jul 2024 · Tags: Memory corruption - [Junos OS: MX240, MX480, MX960 platforms using MPC10E: Memory leak will be observed when subscribed to a specific subscription on Junos Telemetry Interface](https://agentprime.io/advisories/CVE-2024-39518.md) `CVE-2024-39518` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 10 Jul 2024 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: Upon processing specific L2 traffic, rpd can hang in devices with EVPN/VXLAN configured](https://agentprime.io/advisories/CVE-2024-39517.md) `CVE-2024-39517` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 10 Jul 2024 · Tags: CWE-754 - [Junos OS and Junos OS Evolved: Receiving specific traffic on devices with EVPN-VPWS with IGMP-snooping enabled will cause the rpd to crash](https://agentprime.io/advisories/CVE-2024-39514.md) `CVE-2024-39514` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 10 Jul 2024 · Tags: CWE-703 - [Junos OS: The 802.1X Authentication Daemon crashes on running a specific command](https://agentprime.io/advisories/CVE-2024-39511.md) `CVE-2024-39511` · CVE record: Juniper Networks Junos OS · CVSS 6.8 Medium · Not analysed yet · Published 10 Jul 2024 · Tags: CWE-20 - [Junos OS: SRX4600, SRX5000 Series: TCP packets with SYN/FIN or SYN/RST are transferred after enabling no-syn-check with Express Path](https://agentprime.io/advisories/CVE-2024-39561.md) `CVE-2024-39561` · CVE record: Juniper Networks Junos OS · CVSS 6.9 Medium · Not analysed yet · Published 10 Jul 2024 · Tags: CWE-754 - [Junos OS and Junos OS Evolved: Memory leak due to RSVP neighbor persistent error leading to kernel crash](https://agentprime.io/advisories/CVE-2024-39560.md) `CVE-2024-39560` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 10 Jul 2024 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: Receipt of specific PIM packet causes rpd crash when PIM is configured along with MoFRR](https://agentprime.io/advisories/CVE-2024-39558.md) `CVE-2024-39558` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 10 Jul 2024 · Tags: CWE-252 - [Junos OS and Junos OS Evolved: Loading a malicious certificate from the CLI may result in a stack-based overflow](https://agentprime.io/advisories/CVE-2024-39556.md) `CVE-2024-39556` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 10 Jul 2024 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP update causes the session to reset](https://agentprime.io/advisories/CVE-2024-39555.md) `CVE-2024-39555` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 10 Jul 2024 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: BGP multipath incremental calculation is resulting in an rpd crash](https://agentprime.io/advisories/CVE-2024-39554.md) `CVE-2024-39554` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.2 High · Not analysed yet · Published 10 Jul 2024 · Tags: Race condition - [Junos OS: SRX Series and NFX Series: Specific valid traffic leads to a PFE crash](https://agentprime.io/advisories/CVE-2024-21586.md) `CVE-2024-21586` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 1 Jul 2024 · Tags: CWE-754 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .