# Juniper Networks Junos OS. Every CVE that names Juniper Networks Junos OS among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Junos OS: QFX5k: l2 loop in the overlay impacts the stability in a EVPN/VXLAN environment](https://agentprime.io/advisories/CVE-2023-44181.md) `CVE-2023-44181` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 12 Oct 2023 - [Junos OS : Stack overflow vulnerability in CLI command processing](https://agentprime.io/advisories/CVE-2023-44178.md) `CVE-2023-44178` · CVE record: Juniper Networks Junos OS · CVSS 5.5 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: Memory corruption - [Junos OS : Stack overflow vulnerability in CLI command processing](https://agentprime.io/advisories/CVE-2023-44176.md) `CVE-2023-44176` · CVE record: Juniper Networks Junos OS · CVSS 5.5 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: Stack overflow vulnerability in CLI command processing](https://agentprime.io/advisories/CVE-2023-44177.md) `CVE-2023-44177` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: Receipt of a specific genuine PIM packet causes RPD crash](https://agentprime.io/advisories/CVE-2023-44175.md) `CVE-2023-44175` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: Denial of service - [Junos OS: SRX Series: The PFE will crash on receiving malformed SSL traffic when Sky ATP is enabled](https://agentprime.io/advisories/CVE-2023-36843.md) `CVE-2023-36843` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 12 Oct 2023 · Tags: CWE-168 - [Junos OS: MX Series: Receipt of malformed TCP traffic will cause a Denial of Service](https://agentprime.io/advisories/CVE-2023-36841.md) `CVE-2023-36841` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 12 Oct 2023 · Tags: Denial of service - [Junos OS and Junos OS Evolved: An l2cpd crash will occur when specific LLDP packets are received](https://agentprime.io/advisories/CVE-2023-36839.md) `CVE-2023-36839` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: CWE-1284 - [Junos OS: PTX Series and QFX10000 Series: Received flow-routes which aren't installed as the hardware doesn't support them, lead to an FPC heap memory leak](https://agentprime.io/advisories/CVE-2023-22392.md) `CVE-2023-22392` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 12 Oct 2023 · Tags: Denial of service - [Junos OS: jkdsd crash due to multiple telemetry requests](https://agentprime.io/advisories/CVE-2023-44188.md) `CVE-2023-44188` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2023 · Tags: Race condition - [Junos OS and Junos OS Evolved: RPD crash when attempting to send a very long AS PATH to a non-4-byte-AS capable BGP neighbor](https://agentprime.io/advisories/CVE-2023-44186.md) `CVE-2023-44186` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 11 Oct 2023 · Tags: CWE-755 - [Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files](https://agentprime.io/advisories/CVE-2023-36851.md) `CVE-2023-36851` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Critical (KEV) · In CISA KEV · Not analysed yet · Published 26 Sept 2023 · Tags: Authentication bypass - [Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files](https://agentprime.io/advisories/CVE-2023-36846.md) `CVE-2023-36846` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Critical (KEV) · In CISA KEV · EPSS 0.93 · Not analysed yet · Published 17 Aug 2023 · Tags: Authentication bypass - [Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable](https://agentprime.io/advisories/CVE-2023-36845.md) `CVE-2023-36845` · CVE record: Juniper Networks Junos OS · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.95 · Not analysed yet · Published 17 Aug 2023 · Tags: CWE-473 - [Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables](https://agentprime.io/advisories/CVE-2023-36844.md) `CVE-2023-36844` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Critical (KEV) · In CISA KEV · EPSS 0.90 · Not analysed yet · Published 17 Aug 2023 · Tags: CWE-473 - [Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files](https://agentprime.io/advisories/CVE-2023-36847.md) `CVE-2023-36847` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Critical (KEV) · In CISA KEV · EPSS 0.83 · Not analysed yet · Published 17 Aug 2023 · Tags: Authentication bypass - [Junos OS: MX Series: An MPC will crash upon receipt of a malformed CFM packet.](https://agentprime.io/advisories/CVE-2023-36850.md) `CVE-2023-36850` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 14 Jul 2023 · Tags: CWE-1285 - [Junos OS and Junos OS Evolved: The l2cpd will crash when a malformed LLDP packet is received](https://agentprime.io/advisories/CVE-2023-36849.md) `CVE-2023-36849` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jul 2023 · Tags: CWE-703 - [Junos OS: MX Series: The FPC will crash on receiving a malformed CFM packet](https://agentprime.io/advisories/CVE-2023-36848.md) `CVE-2023-36848` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 14 Jul 2023 · Tags: CWE-232 - [Junos OS and Junos OS Evolved: An rpd crash occurs when a specific L2VPN command is run](https://agentprime.io/advisories/CVE-2023-36840.md) `CVE-2023-36840` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Jul 2023 · Tags: Denial of service - [Junos OS and Junos OS Evolved: In a MoFRR scenario an rpd core may be observed when a low privileged CLI command is executed](https://agentprime.io/advisories/CVE-2023-36836.md) `CVE-2023-36836` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 4.7 Medium · Not analysed yet · Published 14 Jul 2023 · Tags: Memory corruption - [Junos OS: QFX10000 Series: All traffic will be dropped after a specific valid IP packet has been received which needs to be routed over a VXLAN tunnel](https://agentprime.io/advisories/CVE-2023-36835.md) `CVE-2023-36835` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2023 · Tags: CWE-754 - [Junos OS: SRX 4600 and SRX 5000 Series: The receipt of specific genuine packets by SRXes configured for L2 transparency will cause a DoS](https://agentprime.io/advisories/CVE-2023-36834.md) `CVE-2023-36834` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 14 Jul 2023 · Tags: CWE-372 - [SRX Series and MX Series: An FPC core is observed when IDP is enabled on the device and a specific malformed SSL packet is received](https://agentprime.io/advisories/CVE-2023-28985.md) `CVE-2023-28985` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2023 · Tags: CWE-1286 - [Junos OS: SRX Series: A flowd core occurs when running a low privileged CLI command](https://agentprime.io/advisories/CVE-2023-36838.md) `CVE-2023-36838` · CVE record: Juniper Networks Junos OS · CVSS 5.5 Medium · Not analysed yet · Published 14 Jul 2023 · Tags: Memory corruption - [Junos OS: MX Series: PFE crash upon receipt of specific packet destined to an AMS interface](https://agentprime.io/advisories/CVE-2023-36832.md) `CVE-2023-36832` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2023 · Tags: CWE-755 - [Junos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is applied](https://agentprime.io/advisories/CVE-2023-36831.md) `CVE-2023-36831` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 14 Jul 2023 · Tags: CWE-703 - [2023-06: Out-of-Cycle Security Bulletin: Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute](https://agentprime.io/advisories/CVE-2023-0026.md) `CVE-2023-0026` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 21 Jun 2023 · Tags: CWE-20 - [Junos OS: QFX Series: The PFE may crash when a lot of MAC addresses are being learned and aged](https://agentprime.io/advisories/CVE-2023-28984.md) `CVE-2023-28984` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 17 Apr 2023 · Tags: Race condition, Memory corruption - [Junos OS and Junos OS Evolved: In a BGP rib sharding scenario when a route is frequently updated an rpd memory leak will occur](https://agentprime.io/advisories/CVE-2023-28982.md) `CVE-2023-28982` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 17 Apr 2023 · Tags: Denial of service - [Junos OS and Junos OS Evolved: If malformed IPv6 router advertisements are received, memory corruption will occur which causes an rpd crash](https://agentprime.io/advisories/CVE-2023-28981.md) `CVE-2023-28981` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 17 Apr 2023 · Tags: CWE-20 - [Junos OS and Junos OS Evolved: In a BGP rib sharding scenario an rpd crash will happen shortly after a specific CLI command is issued](https://agentprime.io/advisories/CVE-2023-28980.md) `CVE-2023-28980` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 17 Apr 2023 · Tags: Memory corruption - [Junos OS: In a 6PE scenario upon receipt of a specific IPv6 packet an integrity check fails](https://agentprime.io/advisories/CVE-2023-28979.md) `CVE-2023-28979` · CVE record: Juniper Networks Junos OS · CVSS 4.7 Medium · Not analysed yet · Published 17 Apr 2023 · Tags: CWE-754 - [Junos OS: MX Series: If a specific traffic rate goes above the DDoS threshold it will lead to an FPC crash](https://agentprime.io/advisories/CVE-2023-28976.md) `CVE-2023-28976` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 17 Apr 2023 · Tags: CWE-754 - [Junos OS: The kernel will crash when certain USB devices are inserted](https://agentprime.io/advisories/CVE-2023-28975.md) `CVE-2023-28975` · CVE record: Juniper Networks Junos OS · CVSS 4.6 Medium · Not analysed yet · Published 17 Apr 2023 · Tags: CWE-394 - [Junos OS: MX Series: In a BBE scenario upon receipt of specific malformed packets from subscribers the process bbe-smgd will crash](https://agentprime.io/advisories/CVE-2023-28974.md) `CVE-2023-28974` · CVE record: Juniper Networks Junos OS · CVSS 7.4 High · Not analysed yet · Published 17 Apr 2023 · Tags: CWE-754 - [Junos OS: NFX Series: 'set system ports console insecure' allows root password recovery](https://agentprime.io/advisories/CVE-2023-28972.md) `CVE-2023-28972` · CVE record: Juniper Networks Junos OS · CVSS 6.8 Medium · Not analysed yet · Published 17 Apr 2023 · Tags: Path traversal - [Junos OS: JRR200: Kernel crash upon receipt of a specific packet](https://agentprime.io/advisories/CVE-2023-28970.md) `CVE-2023-28970` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 17 Apr 2023 · Tags: CWE-703 - [Junos OS: SRX Series: Policies that rely on JDPI-Decoder actions may fail open](https://agentprime.io/advisories/CVE-2023-28968.md) `CVE-2023-28968` · CVE record: Juniper Networks Junos OS and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 17 Apr 2023 · Tags: CWE-1325 - [Junos OS and Junos OS Evolved: An attacker sending genuine BGP packets causes an RPD crash](https://agentprime.io/advisories/CVE-2023-28967.md) `CVE-2023-28967` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 17 Apr 2023 · Tags: Memory corruption - [Junos OS: QFX10002: Failure of storm control feature may lead to Denial of Service](https://agentprime.io/advisories/CVE-2023-28965.md) `CVE-2023-28965` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 17 Apr 2023 · Tags: CWE-703 - [Junos OS and Junos OS Evolved: Malformed BGP flowspec update causes RPD crash](https://agentprime.io/advisories/CVE-2023-28964.md) `CVE-2023-28964` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 17 Apr 2023 · Tags: CWE-130 - [Junos OS: User-controlled input vulnerability in J-Web](https://agentprime.io/advisories/CVE-2023-28963.md) `CVE-2023-28963` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 17 Apr 2023 · Tags: Authentication bypass - [Junos OS: Unauthenticated access vulnerability in J-Web](https://agentprime.io/advisories/CVE-2023-28962.md) `CVE-2023-28962` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 17 Apr 2023 · Tags: Authentication bypass - [Junos OS: ACX Series: IPv6 firewall filter is not installed in PFE when "from next-header ah" is used](https://agentprime.io/advisories/CVE-2023-28961.md) `CVE-2023-28961` · CVE record: Juniper Networks Junos OS · CVSS 5.8 Medium · Not analysed yet · Published 17 Apr 2023 · Tags: CWE-241 - [Junos OS: QFX10002: PFE wedges and restarts upon receipt of specific malformed packets](https://agentprime.io/advisories/CVE-2023-28959.md) `CVE-2023-28959` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 17 Apr 2023 · Tags: CWE-703 - [Junos OS: QFX10000 Series, PTX1000 Series: The dcpfe process will crash when a malformed ethernet frame is received](https://agentprime.io/advisories/CVE-2023-1697.md) `CVE-2023-1697` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 17 Apr 2023 · Tags: CWE-230 - [Junos OS: SRX Series: A memory leak might be observed in IPsec VPN scenario leading to an FPC crash](https://agentprime.io/advisories/CVE-2023-22417.md) `CVE-2023-22417` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2023 · Tags: Denial of service - [Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if SIP ALG is enabled and a malformed SIP packet is received](https://agentprime.io/advisories/CVE-2023-22416.md) `CVE-2023-22416` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2023 · Tags: Memory corruption - [Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash when specific H.323 packets are received](https://agentprime.io/advisories/CVE-2023-22415.md) `CVE-2023-22415` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2023 · Tags: Memory corruption - [Junos OS: PTX Series and QFX10000 Series: An FPC memory leak is observed when specific EVPN VXLAN Multicast packets are processed](https://agentprime.io/advisories/CVE-2023-22414.md) `CVE-2023-22414` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 12 Jan 2023 · Tags: Denial of service - [Junos OS: MX Series: The Multiservices PIC Management Daemon (mspmand) will crash when an IPsec6 tunnel processes specific IPv4 packets](https://agentprime.io/advisories/CVE-2023-22413.md) `CVE-2023-22413` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2023 · Tags: CWE-703 - [Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if the SIP ALG is enabled and specific SIP messages are processed](https://agentprime.io/advisories/CVE-2023-22412.md) `CVE-2023-22412` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2023 · Tags: CWE-667 - [Junos OS: SRX Series: The flow processing daemon (flowd) will crash when Unified Policies are used with IPv6 and certain dynamic applications are rejected by the device](https://agentprime.io/advisories/CVE-2023-22411.md) `CVE-2023-22411` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2023 · Tags: Memory corruption - [Junos OS: MX Series with MPC10/MPC11: When Suspicious Control Flow Detection (scfd) is enabled and an attacker is sending specific traffic, this causes a memory leak.](https://agentprime.io/advisories/CVE-2023-22410.md) `CVE-2023-22410` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2023 · Tags: Denial of service - [Junos OS: SRX Series, MX Series with SPC3: When an inconsistent NAT configuration exists and a specific CLI command is issued the SPC will reboot](https://agentprime.io/advisories/CVE-2023-22409.md) `CVE-2023-22409` · CVE record: Juniper Networks Junos OS · CVSS 5.5 Medium · Not analysed yet · Published 12 Jan 2023 - [Junos OS: SRX 5000 Series: Upon processing of a specific SIP packet an FPC can crash](https://agentprime.io/advisories/CVE-2023-22408.md) `CVE-2023-22408` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 12 Jan 2023 · Tags: CWE-129 - [Junos OS and Junos OS Evolved: An RPD crash can happen due to an MPLS TE tunnel configuration change on a directly connected router](https://agentprime.io/advisories/CVE-2023-22407.md) `CVE-2023-22407` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Jan 2023 · Tags: CWE-459 - [Junos OS and Junos OS Evolved: A memory leak which will ultimately lead to an rpd crash will be observed when a peer interface flaps continuously in a Segment Routing scenario using OSPF](https://agentprime.io/advisories/CVE-2023-22406.md) `CVE-2023-22406` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Jan 2023 · Tags: Denial of service - [Junos OS: QFX5k Series, EX46xx Series: MAC limiting feature stops working after PFE restart or device reboot](https://agentprime.io/advisories/CVE-2023-22405.md) `CVE-2023-22405` · CVE record: Juniper Networks Junos OS · CVSS 6.5 Medium · Not analysed yet · Published 12 Jan 2023 · Tags: CWE-1250 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .