Advisories · Technology
Juniper Networks Junos OS.
Every CVE that names Juniper Networks Junos OS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
Junos OS and Junos OS Evolved: l2cpd crash upon receipt of a specific TLV
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 6.9 Medium
Junos OS: MX Series: bbe-smgd process crash upon execution of specific CLI commands
- Juniper Networks Junos OS
- Memory corruption
- CVSS 8.2 High
Junos OS and Junos OS Evolved: The l2ald crashes on receiving telemetry messages from a specific subscription
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 8.2 High
Junos OS: MX Series and EX9200-15C: Stack-based buffer overflow in aftman
- Juniper Networks Junos OS
- Memory corruption
- CVSS 8.7 High
Junos OS: SRX4600 Series - A high amount of specific traffic causes packet drops and an eventual PFE crash
- Juniper Networks Junos OS
- Memory corruption
- CVSS 8.7 High
Junos OS: An invalid certificate causes a Denial of Service in the Internet Key Exchange (IKE) process
- Juniper Networks Junos OS
- CWE-754
- CVSS 6.3 Medium
Junos OS: MX Series with SPC3, and SRX Series: When IPsec authentication is configured with "hmac-sha-384" and "hmac-sha-512" no authentication of traffic is performed
- Juniper Networks Junos OS
- Authentication bypass
- CVSS 6.9 Medium
Junos OS: EX4300 Series: Firewall filter not blocking egress traffic
- Juniper Networks Junos OS
- CWE-696
- CVSS 7.1 High
Junos OS and Junos OS Evolved: In a EVPN-VXLAN scenario state changes on adjacent systems can cause an l2ald process crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 6.8 Medium
Junos OS: EX4300 Series: If a specific CLI command is issued PFE crashes will occur
- Juniper Networks Junos OS
- CWE-754
- CVSS 8.7 High
Junos OS and Junos OS Evolved: RPD crash when CoS-based forwarding (CBF) policy is configured
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 7.1 High
Junos OS: ACX5448 & ACX710: Due to interface flaps the PFE process can crash
- Juniper Networks Junos OS
- CWE-820
- CVSS 7.1 High
Junos OS: QFX5000 Series and EX Series: Specific malformed LACP packets will cause flaps
- Juniper Networks Junos OS
- CWE-653
- CVSS 8.7 High
Junos OS: MX Series with SPC3 and MS-MPC/-MIC: When URL filtering is enabled and a specific URL request is received a flowd crash occurs
- Juniper Networks Junos OS
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: A specific EVPN type-5 route causes rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1287
- CVSS 8.7 High
Junos OS: SRX 5000 Series with SPC2: Processing of specific crafted packets when ALG is enabled causes a transit traffic Denial of Service
- Juniper Networks Junos OS
- Memory corruption
- CVSS 6.9 Medium
Junos OS and Junos OS Evolved: Higher CPU consumption on routing engine leads to Denial of Service (DoS).
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 7.1 High
Junos OS and Junos OS Evolved: When LLDP is enabled and a malformed LLDP packet is received, l2cpd crashes
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 5.1 Medium
Junos OS and Junos OS Evolved: A low-privileged user can access confidential information
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Broken access control
- CVSS 5.3 Medium
Junos OS: If in a scaled CoS scenario information on CoS state is gathered mgd processes get stuck
- Juniper Networks Junos OS
- CWE-755
- CVSS 7.1 High
Junos OS: MX Series with SPC3, and SRX Series: If specific IPsec parameters are negotiated iked will crash due to a memory leak
- Juniper Networks Junos OS
- Denial of service
- CVSS 7.1 High
Junos OS: SRX 300 Series: Specific link local traffic causes a control plane overload
- Juniper Networks Junos OS
- Information disclosure
- CVSS 8.7 High
Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1286
- CVSS 7.1 High
Junos OS: MX Series with MPC10, MPC11, LC9600, and MX304: A specific MPLS packet will cause a PFE crash
- Juniper Networks Junos OS
- CWE-703
- CVSS 8.8 High
Junos OS: SRX Series and EX Series: J-Web doesn't sufficiently sanitize input to prevent XSS
- Juniper Networks Junos OS
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Junos OS: SRX Series and EX Series: J-Web - unauthenticated access to temporary files containing sensitive information
- Juniper Networks Junos OS
- Information disclosure
- Authentication bypass
- CVSS 6.5 Medium
Junos OS: BGP flap on NSR-enabled devices causes memory leak
- Juniper Networks Junos OS
- CWE-459
- CVSS 7.5 High
Junos OS: MX Series and SRX Series: Processing of a specific SIP packet causes NAT IP allocation to fail
- Juniper Networks Junos OS
- CWE-1286
- CVSS 7.5 High
Junos OS and Junos OS Evolved: A specific query via DREND causes rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 6.5 Medium
Junos OS and Junos OS Evolved: A link flap causes patroot memory leak which leads to rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.5 High
Junos OS and Junos OS Evolved: In a jflow scenario continuous route churn will cause a memory leak and eventually an rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 5.3 Medium
Junos OS: MX Series and EX9200 Series: If the "tcp-reset" option used in an IPv6 filter, matched packets are accepted instead of rejected
- Juniper Networks Junos OS
- CWE-447
- CVSS 7.5 High
Junos OS: SRX Series: When "tcp-encap" is configured and specific packets are received flowd will crash
- Juniper Networks Junos OS
- Memory corruption
- CVSS 6.5 Medium
Junos OS: MX Series: Gathering statistics in a scaled SCU/DCU configuration will lead to a device crash
- Juniper Networks Junos OS
- CWE-754
- CVSS 5.9 Medium
Junos OS: SRX Series: Due to an error in processing TCP events flowd will crash
- Juniper Networks Junos OS
- Race condition
- CVSS 6.5 Medium
Junos OS: PTX Series: In an FTI scenario MPLS packets hitting reject next-hop will cause a host path wedge condition
- Juniper Networks Junos OS
- CWE-76
- CVSS 6.5 Medium
Junos OS: MX Series: MPC3E memory leak with PTP configuration
- Juniper Networks Junos OS
- Denial of service
- CVSS 5.3 Medium
Junos OS: MX Series: In an AF scenario traffic can bypass configured lo0 firewall filters
- Juniper Networks Junos OS
- Information disclosure
- CVSS 5.3 Medium
Junos OS and Junos OS Evolved: A specific BGP UPDATE message will cause a crash in the backup Routing Engine in NSR-enabled devices
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.5 High
Junos OS: EX4100, EX4400, EX4600, QFX5000 Series: A high rate of specific ICMP traffic will cause the PFE to hang
- Juniper Networks Junos OS
- CWE-1286
- CVSS 5.5 Medium
Junos OS: SRX 5000 Series: Repeated execution of a specific CLI command causes a flowd crash
- Juniper Networks Junos OS
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Junos OS: SRX Series and EX Series: Security Vulnerability in J-web allows a preAuth Remote Code Execution
- Juniper Networks Junos OS
- Memory corruption
- CVSS 6.5 Medium
Junos OS: MX Series: Memory leak in bbe-smgd process if BFD liveness detection for DHCP subscribers is enabled
- Juniper Networks Junos OS
- CWE-755
- CVSS 5.9 Medium
Junos OS and Junos OS Evolved: BGP session flaps on NSR-enabled devices can cause rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 6.5 Medium
Junos OS: jdhcpd will hang on receiving a specific DHCP packet
- Juniper Networks Junos OS
- CWE-703
- CVSS 6.5 Medium
Junos OS and Junos OS Evolved: The rpd will crash upon receiving a malformed BGP UPDATE message
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1286
- CVSS 6.5 Medium
Junos OS: QFX5000 Series, EX2300, EX3400, EX4100, EX4400 and EX4600: Packet flooding will occur when IGMP traffic is sent to an isolated VLAN
- Juniper Networks Junos OS
- CWE-703
- CVSS 5.0 Medium
Junos OS and Junos OS Evolved: A local attacker can retrieve sensitive information and elevate privileges on the device to an authorized user.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Broken access control
- CVSS 7.5 High
Junos OS: MX Series: In a PTP scenario a prolonged routing protocol churn can trigger an FPC reboot
- Juniper Networks Junos OS
- CWE-754
- CVSS 5.8 Medium
Junos OS: SRX Series and MX Series: SIP ALG doesn't drop specifically malformed retransmitted SIP packets
- Juniper Networks Junos OS
- CWE-754
- CVSS 7.5 High
Junos OS and Junos OS Evolved: An rpd crash may occur when BGP is processing newly learned routes
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.4 High
Junos OS: An unauthenticated attacker with local access to the device can create a backdoor with root privileges
- Juniper Networks Junos OS
- Broken access control
- CVSS 5.5 Medium
Junos OS: MX Series: An FPC crash is observed when CFM is enabled in a VPLS scenario and a specific LDP related command is run
- Juniper Networks Junos OS
- Denial of service
- CVSS 7.5 High
Junos OS: QFX5000 Series: DMA memory leak is observed when specific DHCP packets are transmitted over pseudo-VTEP
- Juniper Networks Junos OS
- CWE-20
- CVSS 7.5 High
Junos OS: QFX5000 Series and EX4000 Series: Denial of Service (DoS) on a large scale VLAN due to PFE hogging
- Juniper Networks Junos OS
- Denial of service
- CVSS 7.5 High
Junos OS and Junos OS Evolved: In an BGP scenario RPD crashes upon receiving and processing a specific malformed ISO VPN BGP UPDATE packet
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-20
- CVSS 6.5 Medium
Junos OS and Junos OS Evolved: High CPU load due to specific NETCONF command
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 6.5 Medium
Junos OS: QFX5000 Series, EX4600 Series: In a VxLAN scenario an adjacent attacker within the VxLAN sending genuine packets may cause a DMA memory leak to occur.
- Juniper Networks Junos OS
- CWE-20
- CVSS 7.3 High
Junos OS and Junos OS Evolved: An Unchecked Return Value in multiple users interfaces affects confidentiality and integrity of device operations
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-252