Advisories · Technology

Juniper Networks Junos OS.

Every CVE that names Juniper Networks Junos OS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2018-0016 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Junos OS: Kernel crash upon receipt of crafted CLNP datagrams
- Juniper Networks Junos OS
Not analysed yet 11 Apr 2018
CVE-2018-0009 CVE record

CVSS 5.4 Medium

SRX Series: Firewall bypass vulnerability when UUID with leading zeros is configured.
- Juniper Networks Junos OS
Not analysed yet 10 Jan 2018
CVE-2018-0008 CVE record

CVSS 6.2 Medium

Junos OS: commit script may allow unauthenticated root login upon reboot
- Juniper Networks Junos OS
Not analysed yet 10 Jan 2018
CVE-2018-0006 CVE record

CVSS 6.5 Medium

Junos OS: bbe-smgd process denial of service while processing VLAN authentication requests/rejects
- Juniper Networks Junos OS
Not analysed yet 10 Jan 2018
CVE-2018-0005 CVE record

CVSS 7.4 High

Security Bulletin: Junos OS: MAC move limit configured to drop traffic may forward traffic.
- Juniper Networks Junos OS
Not analysed yet 10 Jan 2018
CVE-2018-0004 CVE record

CVSS 6.5 Medium

Junos OS: Kernel Denial of Service Vulnerability
- Juniper Networks Junos OS
Not analysed yet 10 Jan 2018
CVE-2018-0003 CVE record

CVSS 6.5 Medium

Junos OS: A crafted MPLS packet may lead to a kernel crash
- Juniper Networks Junos OS
Not analysed yet 10 Jan 2018
CVE-2018-0002 CVE record

CVSS 8.2 High

MX series, SRX series: Junos OS: Denial of service vulnerability in Flowd on devices with ALG enabled.
- Juniper Networks Junos OS
Not analysed yet 10 Jan 2018
CVE-2018-0001 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Junos: Unauthenticated Remote Code Execution through J-Web interface
- Juniper Networks Junos OS
Not analysed yet 10 Jan 2018
CVE-2017-10621 CVE record

CVSS 5.3 Medium

Junos OS: Denial of service vulnerability in telnetd
- Juniper Networks Junos OS
Not analysed yet 13 Oct 2017
CVE-2017-10620 CVE record

CVSS 7.4 High

SRX Series: Antivirus updates are downloaded without verification
- Juniper Networks Junos OS
Not analysed yet 13 Oct 2017
CVE-2017-10619 CVE record

CVSS 7.5 High

Junos: SRX cluster denial of service vulnerability in flowd due to multicast packets
- Juniper Networks Junos OS
Not analysed yet 13 Oct 2017
CVE-2017-10618 CVE record

CVSS 5.9 Medium

Junos: RPD core due to BGP UPDATE with malformed optional transitive attributes
- Juniper Networks Junos OS
Not analysed yet 13 Oct 2017
CVE-2017-10615 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Junos: Potential remote code execution vulnerability in PAM
- Juniper Networks Junos OS
Not analysed yet 13 Oct 2017
CVE-2017-10614 CVE record

CVSS 5.3 Medium

Junos OS: A remote unauthenticated attacker can consume large amounts of CPU and/or memory through telnetd
- Juniper Networks Junos OS
Not analysed yet 13 Oct 2017
CVE-2017-10613 CVE record

CVSS 5.5 Medium

Junos OS: A kernel hang may occur due to a specific loopback filter action command
- Juniper Networks Junos OS
Not analysed yet 13 Oct 2017
CVE-2017-10611 CVE record

CVSS 6.5 Medium

Junos: EX Series PFE and MX MPC7E/8E/9E PFE crash when fetching interface stats with 'extended-statistics' enabled
- Juniper Networks Junos OS
Not analysed yet 13 Oct 2017
CVE-2017-10610 CVE record

CVSS 7.5 High

SRX Series: Embedded ICMP may cause the flowd process to crash
- Juniper Networks Junos OS
Not analysed yet 13 Oct 2017
CVE-2017-10608 CVE record

CVSS 7.5 High

SRX series: Junos OS: SRX series using IPv6 Sun/MS-RPC ALGs may experience flowd crash on processing packets.
- Juniper Networks Junos OS
Not analysed yet 13 Oct 2017
CVE-2017-10607 CVE record

CVSS 7.5 High

Junos: rpd core due to receipt of specially crafted BGP packet
- Juniper Networks Junos OS
Not analysed yet 13 Oct 2017
CVE-2017-10606 CVE record

CVSS 4.4 Medium

SRX Series: Cryptographic weakness in SRX300 Series TPM Firmware
- Juniper Networks Junos OS
Not analysed yet 13 Oct 2017
CVE-2016-4924 CVE record

CVSS 8.4 High

vMX: Information leak vulnerability
- Juniper Networks Junos OS
Not analysed yet 13 Oct 2017
CVE-2016-4923 CVE record

CVSS 8.0 High

Junos J-Web: Cross Site Scripting Vulnerability
- Juniper Networks Junos OS
Not analysed yet 13 Oct 2017
CVE-2016-4922 CVE record

CVSS 8.4 High

Junos: Privilege escalation vulnerabilities in Junos CLI
- Juniper Networks Junos OS
Not analysed yet 13 Oct 2017
CVE-2016-4921 CVE record

CVSS 7.5 High

Junos: IPv6 denial of service vulnerability due to resource exhaustion (CVE-2016-4921)
- Juniper Networks Junos OS
Not analysed yet 13 Oct 2017
CVE-2016-1265 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Junos Space: privilege escalation vulnerabilities in Junos Space
- Juniper Networks Junos OS
Not analysed yet 13 Oct 2017
CVE-2016-1261 CVE record

CVSS 7.1 High

Junos: vulnerabilities in J-Web (CVE-2016-1261)
- Juniper Networks Junos OS
Not analysed yet 13 Oct 2017
CVE-2017-2349 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

SRX Series: Command injection vulnerability in SRX IDP feature.
- Juniper Networks Junos OS
Not analysed yet 14 Jul 2017
CVE-2017-2348 CVE record

CVSS 7.5 High

Junos OS: jdhcpd daemon crash due to invalid IPv6 UDP packets
- Juniper Networks Junos OS
Not analysed yet 14 Jul 2017
CVE-2017-2347 CVE record

CVSS 6.5 Medium

Junos: Denial of Service vulnerability in rpd daemon
- Juniper Networks Junos OS
Not analysed yet 14 Jul 2017
CVE-2017-2346 CVE record

CVSS 5.9 Medium

MS-MPC or MS-MIC crash when passing large fragmented traffic through an ALG
- Juniper Networks Junos OS
Not analysed yet 14 Jul 2017
CVE-2017-2345 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Junos: snmpd denial of service upon receipt of crafted SNMP packet
- Juniper Networks Junos OS
Not analysed yet 14 Jul 2017
CVE-2017-2344 CVE record

CVSS 7.8 High

Junos: Buffer overflow in sockets library
- Juniper Networks Junos OS
Not analysed yet 14 Jul 2017
CVE-2017-2343 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

SRX Series: Hardcoded credentials in Integrated UserFW feature.
- Juniper Networks Junos OS
Not analysed yet 14 Jul 2017
CVE-2017-2342 CVE record

CVSS 8.1 High

SRX Series: MACsec failure to report errors
- Juniper Networks Junos OS
- CWE-392
Not analysed yet 14 Jul 2017
CVE-2017-2341 CVE record

CVSS 8.8 High

Junos OS: VM to host privilege escalation in platforms with Junos OS running in a virtualized environment.
- Juniper Networks Junos OS
Not analysed yet 14 Jul 2017
CVE-2017-2314 CVE record

CVSS 7.5 High

Junos: RPD crash due to malformed BGP OPEN message
- Juniper Networks Junos OS
Not analysed yet 14 Jul 2017
CVE-2017-10605 CVE record

CVSS 8.6 High

Junos: SRX Series denial of service vulnerability in flowd due to crafted DHCP packet
- Juniper Networks Junos OS
Not analysed yet 14 Jul 2017
CVE-2017-10604 CVE record

CVSS 5.3 Medium

Junos OS: SRX Series: Cluster configuration sync failures occur if the root user account is locked out
- Juniper Networks Junos OS
Not analysed yet 14 Jul 2017
CVE-2017-10603 CVE record

CVSS 7.0 High

Junos OS: Local XML Injection through CLI command can lead to privilege escalation
- Juniper Networks Junos OS
Not analysed yet 14 Jul 2017
CVE-2017-10602 CVE record

CVSS 7.0 High

Junos OS: buffer overflow vulnerability in Junos CLI
- Juniper Networks Junos OS
Not analysed yet 14 Jul 2017
CVE-2017-10601 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Junos OS: Insufficient authentication for user login when a specific system configuration error occurs.
- Juniper Networks Junos OS
Not analysed yet 14 Jul 2017