Juniper Networks Junos OS.

Junos OS: RPD process crashes upon receipt of a specific SNMP packet

• Juniper Networks Junos OS
• Denial of service

Junos OS: EX4300-MP Series: IP transit traffic can reach the control plane via loopback interface.

• Juniper Networks Junos OS
• Broken access control

Junos OS: Specially crafted packets sent to port 111 on any interface triggers responses from the management interface

• Juniper Networks Junos OS
• Information disclosure

Junos OS: Login credentials are vulnerable to brute force attacks through the REST API

• Juniper Networks Junos OS
• Authentication bypass

SRX Series: Crafted packets destined to fxp0 management interface on SRX340/SRX345 devices can lead to DoS

• Juniper Networks Junos OS
• Denial of service

Junos OS: jdhcpd crash upon receipt of crafted DHCPv6 solicit message

• Juniper Networks Junos OS

Junos OS: Firewall filter terms named "internal-1" and "internal-2" being ignored

• Juniper Networks Junos OS
• Broken access control

Junos OS: 'set system ports console insecure' allows root password recovery on OAM volumes

• Juniper Networks Junos OS
• CWE-501

SRX Series: A remote attacker may cause a high CPU Denial of Service to the device when proxy ARP is configured.

• Juniper Networks Junos OS
• Denial of service

Junos OS: jdhcpd daemon memory consumption Denial of Service when receiving specific IPv6 DHCP packets.

• Juniper Networks Junos OS
• Denial of service

Junos OS: RPD process crashes due to specific BGP peer restarts condition.

• Juniper Networks Junos OS
• Denial of service

BGP packets can trigger rpd crash when BGP tracing is enabled.

• Juniper Networks Junos OS
• Denial of service

QFX5000 Series, EX4300, EX4600: A stack buffer overflow vulnerability in Packet Forwarding Engine manager (FXPC) process

• Juniper Networks Junos OS
• Memory corruption

Junos OS: SRX Series: Deleted dynamic VPN users are allowed to establish VPN connections until reboot

• Juniper Networks Junos OS

Junos OS: QFX and PTX Series: FPC process crashes after J-Flow processes a malformed packet

• Juniper Networks Junos OS

Junos OS: RPD crash upon receipt of malformed PIM packet

• Juniper Networks Junos OS

Junos OS: rpd crash on VPLS PE upon receipt of specific BGP message

• Juniper Networks Junos OS

Junos OS: Kernel crash after processing specific incoming packet to the out of band management interface (CVE-2019-0011)

• Juniper Networks Junos OS

Junos OS: SRX Series: Crafted HTTP traffic may cause UTM to consume all mbufs, leading to Denial of Service

• Juniper Networks Junos OS

Junos OS: EX2300 and EX3400: High disk I/O operations may disrupt the communication between RE and PFE

• Juniper Networks Junos OS

Junos OS: vMX series: Predictable IP ID sequence numbers vulnerability

• Juniper Networks Junos OS

Junos OS: EX, QFX and MX series: Packet Forwarding Engine manager (FXPC) process crashes due to a crafted HTTP packet in a Virtual Chassis configuration

• Juniper Networks Junos OS
• Memory corruption

Junos OS: A flowspec BGP update with a specific term-order causes routing protocol daemon (rpd) process to crash with a core.

• Juniper Networks Junos OS
• Denial of service

Junos OS: EX2300 and EX3400 series: Certain stateless firewall filter rules might not take effect

• Juniper Networks Junos OS
• CWE-794

Junos OS: MX Series: uncontrolled recursion and crash in Broadband Edge subscriber management daemon (bbe-smgd).

• Juniper Networks Junos OS
• Denial of service

Junos OS: Nexthop index allocation failed: private index space exhausted after incoming ARP requests to management interface

• Juniper Networks Junos OS

Junos OS: Denial of Service in J-Web

• Juniper Networks Junos OS

Junos OS: Denial of service in telnetd

• Juniper Networks Junos OS

Junos OS: Invalid IP/mask learned from DHCP server might cause device control daemon (dcd) process crash

• Juniper Networks Junos OS

MX Series: In BBE configurations, receipt of a crafted IPv6 exception packet causes a Denial of Service

• Juniper Networks Junos OS

Junos OS: authd allows assignment of IP address requested by DHCP subscriber logging in with Option 50 (Requested IP Address)

• Juniper Networks Junos OS

MX Series: L2ALD daemon may crash if a duplicate MAC is learned by two different interfaces

• Juniper Networks Junos OS

Junos OS: jdhcpd process crash during processing of specially crafted DHCPv6 message

• Juniper Networks Junos OS

QFX5000/EX4600 Series: Routing protocol flap upon receipt of high rate of Ethernet frames

• Juniper Networks Junos OS

vSRX Series: A local authentication vulnerability may lead to full control of a vSRX instance while the system is booting.

• Juniper Networks Junos OS

Junos OS: Unauthenticated remote root access possible when RSH service is enabled

• Juniper Networks Junos OS

Junos OS: Denial of Service vulnerability in MS-PIC, MS-MIC, MS-MPC, MS-DPC and SRX flow daemon (flowd) related to SIP ALG

• Juniper Networks Junos OS

Junos OS: Receipt of a malformed MPLS RSVP packet leads to a Routing Protocols Daemon (RPD) crash.

• Juniper Networks Junos OS

Junos OS: Receipt of a specifically crafted malicious MPLS packet leads to a Junos kernel crash.

• Juniper Networks Junos OS

Junos OS: Memory exhaustion denial of service vulnerability in Routing Protocols Daemon (RPD) with Juniper Extension Toolkit (JET) support.

• Juniper Networks Junos OS
• Denial of service

Junos OS: RPD daemon crashes due to receipt of specific Draft-Rosen MVPN control packet in Draft-Rosen MVPN configuration

• Juniper Networks Junos OS

NFX Series: Insecure sshd configuration in Juniper Device Manager (JDM) and host OS

• Juniper Networks Junos OS

Junos OS: RPD daemon crashes upon receipt of specific MPLS packet

• Juniper Networks Junos OS

Junos OS: RPD daemon crashes due to receipt of crafted BGP NOTIFICATION messages

• Juniper Networks Junos OS

Junos OS: QFX5200 and QFX10002: Unintended ONIE partition was shipped with certain Junos OS .bin and .iso images

• Juniper Networks Junos OS

Junos OS: A malicious crafted IPv6 DHCP packet may cause the JDHCPD daemon to core

• Juniper Networks Junos OS

Junos OS: RPD crash when receiving a crafted BGP UPDATE

• Juniper Networks Junos OS

Junos OS: Receipt of specially crafted UDP packets over MPLS may bypass stateless IP firewall rules

• Juniper Networks Junos OS

Junos OS: MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) and PTX1K: Line card may crash upon receipt of specific MPLS packet.

• Juniper Networks Junos OS

Junos OS: Kernel crash (vmcore) during broadcast storm after enabling 'monitor traffic interface fxp0'

• Juniper Networks Junos OS

Junos OS: Receipt of malformed RSVP packet may lead to RPD denial of service

• Juniper Networks Junos OS

Junos OS: Stateless IP firewall filter rules stop working as expected after reboot or upgrade

• Juniper Networks Junos OS

Junos OS: SRX Series: Credentials exposed when using HTTP and HTTPS Firewall Pass-through User Authentication

• Juniper Networks Junos OS
• Weak cryptography or TLS
• CWE-300

Junos OS: A privilege escalation vulnerability exists where authenticated users with shell access can become root

• Juniper Networks Junos OS

Junos OS: Mbuf leak due to processing MPLS packets in VPLS network.

• Juniper Networks Junos OS

Junos OS: Short MacSec keys may allow man-in-the-middle attacks.

• Juniper Networks Junos OS

Junos OS: rpd daemon cores due to malformed BGP UPDATE packet

• Juniper Networks Junos OS

Junos: Denial of service vulnerability in SNMP MIB-II subagent daemon (mib2d).

• Juniper Networks Junos OS

SRX Series: A crafted packet may lead to information disclosure and firewall rule bypass during compilation of IDP policies.

• Juniper Networks Junos OS

SRX Series: Denial of service vulnerability in flowd daemon on devices configured with NAT-PT

• Juniper Networks Junos OS