Advisories · Technology
Juniper Networks Junos OS.
Every CVE that names Juniper Networks Junos OS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · CVSS 9+
Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Authentication bypass
- CVSS 8.7 High
Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1284
- CVSS 8.7 High
Junos OS and Junos OS Evolved: In a scenario with VPN-flowspec and BMP monitoring a specific BGP update causes an rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An attacker can cause an rpd crash via a crafted LDP message
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 8.7 High
Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an rpd crash when SRv6 multihoming is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-682
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker sending a malformed update causes an rpd crash when BGP EVPN signaling is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-130
- CVSS 8.7 High
Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when an ECMP qualifier is used in an import policy
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-688
- CVSS 9.3 CriticalCritical · CVSS 9+
Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 9.3 CriticalCritical · CVSS 9+
Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An adjacent LDP peer causes routing-engine compromise when LDP is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: A network attacker causes root-level code execution or denial of service when SNMP and AAA are enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: In a non-4byte-AS scenario a specific BGP update causes an rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Improper OSPF LSA validation causes an rpd crash when prefix-SID best-route installation is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Malformed OSPF packets causes routing disruption when OSPF is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS: MX Series with SPC3: In a source NAT scenario malformed packets will lead to resource leaks and eventually traffic stops
- Juniper Networks Junos OS
- CWE-754
- CVSS 8.7 High
Junos OS and Junos OS Evolved: SRX Series: An attacker causes remote code execution when SRX chassis-cluster is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 9.3 CriticalCritical · CVSS 9+
Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP Prefix-SID routes are re-advertised
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-197
- CVSS 9.3 CriticalCritical · CVSS 9+
Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured
- Juniper Networks Junos OS
- Memory corruption
- CVSS 9.2 CriticalCritical · CVSS 9+
Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when EVPN multihoming preference-based DF election is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 8.7 High
Junos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1284
- CVSS 8.7 High
Junos OS and Junos OS Evolved: If in a BGP EVPN scenario a malformed NLRI is received rpd crashes
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1284
- CVSS 9.3 CriticalCritical · CVSS 9+
Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution
- Juniper Networks Junos OS
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes an rpd crash when BGP RIB streaming telemetry is in use
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP EVPN RIB telemetry is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 9.3 CriticalCritical · CVSS 9+
Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.2 High
Junos OS and Junos OS Evolved: An out-of-bounds write causes an rpd crash when IS-IS backup selection is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS: Specific packets cause SDK service crash or Routing Engine compromise when the SDK service and JDAF is enabled
- Juniper Networks Junos OS
- Memory corruption
- CVSS 9.3 CriticalCritical · CVSS 9+
Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS: SRX Series: An authenticated remote-access VPN client causes iked denial of service or root-level code execution when JIMS identity publishing is enabled
- Juniper Networks Junos OS
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes root code execution when SZTP DHCP provisioning is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: MX Series, ACX Series: An attacker causes a routing daemon crash when multicast lawful intercept is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server causes root-level command execution when the phone-home client processes specific information
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Command injection
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An attacker causes a bfdd denial of service when BFD is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 8.7 High
Junos OS: An attacker causes DHCP service disruption during DHCP client operation
- Juniper Networks Junos OS
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An attacker causes denial of service and information disclosure when Ethernet CFM is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: MX Series, PTX Series: An attacker causes remote code execution and denial of service when enhanced CFM is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 5.3 Medium
Junos OS and Junos OS Evolved: Insufficient validation of VXLAN overlay ping causes information disclosure when EVPN-VXLAN is configured
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-130
- CVSS 6.9 Medium
Junos OS and Junos OS Evolved: An EVPN-VXLAN memory leak causes denial of service when active-active multihoming is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes jdhcpd to crash when the DHCPv4 local-client feature is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An attacker causes l2cpd memory exhaustion when LLDP fast receive processing is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An adjacent attacker causes Layer 2 control-plane denial of service when LLDP is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes l2cpd crash or root code execution when Unified Access Policy is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS: An attacker causes l2cpd crash when FNP is used with VLAN-VPLS encapsulation enabled
- Juniper Networks Junos OS
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An attacker causes l2cpd denial of service when MVRP is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1288
- CVSS 8.7 High
Junos OS: MX Series: An attacker causes a Routing Engine denial of service when SCTP service is used
- Juniper Networks Junos OS
- Denial of service
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes a routing control-plane denial of service when BGP-LS traffic engineering is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when MPLS-TE fast reroute is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-197
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An attacker causes rpd to crash when RSVP associated-bidirectional LSP is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when RSVP is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An attacker crashes the routing daemon when co-routed bidirectional RSVP LSPs are used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An attacker causes routing-process denial of service when GMPLS EVPL dynamic transport is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 9.2 CriticalCritical · CVSS 9+
Junos OS: SRX Series: An attacker causes arbitrary configuration commit when the custom URL-feed feature is used
- Juniper Networks Junos OS
- Other injection
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An EVPN default-gateway route burst causes l2ald denial of service
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An attacker causes a denial of service when MC-LAG IRB MAC synchronization is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An attacker causes l2ald to restart when MC-LAG ICCP MAC synchronization is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An attacker causes denial of service when MC-LAG MAC synchronization is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1284
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Unintended l2ald memory allocation causes a denial of service when static MAC IP configurations are present
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service