Advisories · Technology
Juniper Networks Junos OS.
Every CVE that names Juniper Networks Junos OS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Receipt of a malformed LLDP TLV results in l2cpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-195
- CVSS 8.7 High
Junos OS: SRX Series: Transmission of specific control traffic sent out of a DS-Lite tunnel results in flowd crash
- Juniper Networks Junos OS
- Memory corruption
- CVSS 7.7 High
Junos OS: EX2300, EX3400, EX4000 Series, QFX5k Series: Receipt of a specific DHCP packet causes FPC crash when DHCP Option 82 is enabled
- Juniper Networks Junos OS
- Memory corruption
- CVSS 8.7 High
Junos OS: SRX and EX Series, MX240, MX480, MX960, QFX5120 Series: When web management is enabled for specific services an attacker may cause a CPU spike by sending genuine packets to the device
- Juniper Networks Junos OS
- CWE-573
- CVSS 6.0 Medium
Junos OS and Junos OS Evolved: When BGP rib-sharding and update-threading are configured and a peer flaps, an rpd core is observed
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 7.1 High
Junos OS and Junos OS Evolved: In an EVPN-VXLAN scenario specific ARP or NDP packets cause FPC to crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 8.7 High
Junos OS: MX Series: In DS-lite and NAT scenario receipt of crafted IPv6 traffic causes port block
- Juniper Networks Junos OS
- CWE-754
- CVSS 7.1 High
Junos OS: An unauthenticated adjacent attacker sending a malformed DHCP packet causes jdhcpd to crash
- Juniper Networks Junos OS
- Memory corruption
- CVSS 6.7 MediumCritical · KEVKEV
Junos OS: An local attacker with shell access can execute arbitrary code
- Juniper Networks Junos OS
- CWE-653
- CVSS 8.7 High
Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.2 High
Junos OS and Junos OS Evolved: When BGP traceoptions are configured, receipt of malformed BGP packets causes RPD to crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Receipt of specially crafted BGP update packet causes RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 6.8 Medium
Junos OS: SRX1500,SRX4100,SRX4200: Execution of low-privileged CLI command results in chassisd crash
- Juniper Networks Junos OS
- CWE-755
- CVSS 7.1 High
Junos OS and Junos OS Evolved: On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-664
- CVSS 6.8 Medium
Junos OS: SRX Series: Low privileged user able to access highly sensitive information on file system
- Juniper Networks Junos OS
- Information disclosure
- CVSS 6.9 Medium
Junos OS and Junos OS Evolved: BGP update message containing aggregator attribute with an ASN value of zero (0) is accepted
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 8.2 High
Junos OS: SRX Series: A large amount of traffic being processed by ATP Cloud can lead to a PFE crash
- Juniper Networks Junos OS
- Denial of service
- CVSS 8.7 High
Junos OS: SRX5000 Series: Receipt of a specific malformed packet will cause a flowd crash
- Juniper Networks Junos OS
- CWE-1287
- CVSS 7.1 High
Junos OS: SRX4600 and SRX5000 Series: Sequence of specific PIM packets causes a flowd crash
- Juniper Networks Junos OS
- CWE-754
- CVSS 6.8 Medium
Junos OS: MX304, MX with MPC10/11/LC9600, and EX9200 with EX9200-15C: In a VPLS or Junos Fusion scenario specific show commands cause FPCs to crash
- Juniper Networks Junos OS
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: In a BMP scenario receipt of a malformed AS PATH attribute can cause an RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 8.7 High
Junos OS: SRX Series, QFX Series, MX Series and EX Series: Receiving specific HTTPS traffic causes resource exhaustion
- Juniper Networks Junos OS
- Denial of service
- CVSS 6.8 Medium
Junos OS: MX Series: The PFE will crash on running specific command
- Juniper Networks Junos OS
- Memory corruption
- CVSS 8.2 High
Junos OS: Due to a race condition AgentD process causes a memory corruption and FPC reset
- Juniper Networks Junos OS
- Race condition
- CVSS 7.1 High
Junos OS: MX Series: Trio-based FPCs: Continuous physical Interface flaps causes local FPC to crash
- Juniper Networks Junos OS
- Denial of service
- CVSS 8.2 High
Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP path attribute leads to an RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 8.7 High
Junos OS and Junos OS Evolved: cRPD: Receipt of crafted TCP traffic can trigger high CPU utilization
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 6.8 Medium
Junos OS: SRX Series: Low privileged user able to access sensitive information on file system
- Juniper Networks Junos OS
- Information disclosure
- CVSS 7.1 High
Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11/LC9600, MX304, EX9200, PTX Series: Receipt of malformed DHCP packets causes interfaces to stop processing packets
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 8.7 High
Junos OS and Junos OS Evolved: When BGP traceoptions is enabled, receipt of specially crafted BGP packet causes RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 8.7 High
Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: With BGP traceoptions enabled, receipt of specifically malformed BGP update causes RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1288
- CVSS 8.7 High
Junos OS and Junos OS Evolved: Malformed BGP UPDATE causes RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 8.7 High
Junos OS: SRX Series and MX Series with SPC3 and MS-MPC/MIC: Receipt of specific packets in H.323 ALG causes traffic drop
- Juniper Networks Junos OS
- Denial of service
- CVSS 7.1 High
Junos OS: MX Series with SPC3 line card: Port flaps causes rtlogd memory leak leading to Denial of Service
- Juniper Networks Junos OS
- Denial of service
- CVSS 8.7 High
Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to a memory leak
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 8.7 High
Junos OS: SRX Series, MX Series with SPC3 and NFX350: When VPN tunnels parameters are not configured in specific way the iked process will crash
- Juniper Networks Junos OS
- CWE-754
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Receipt of a large RPKI-RTR PDU packet can cause rpd to crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: A malformed CFM packet or specific transit traffic leads to FPC crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1286
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Inconsistent information in the TE database can lead to an rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 8.7 High
Junos OS: SRX Series, and MX Series with SPC3: Specific valid TCP traffic can cause a pfe crash
- Juniper Networks Junos OS
- CWE-754
- CVSS 6.0 Medium
Junos OS: MX Series: Continuous subscriber logins will lead to a memory leak and eventually an FPC crash
- Juniper Networks Junos OS
- Denial of service
- CVSS 6.0 Medium
Junos OS and Junos OS Evolved: Flaps of BFD sessions with authentication cause a ppmd memory leak
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 6.9 Medium
Junos OS: QFX5000 Series and EX4600 Series: Output firewall filter is not applied if certain match criteria are used
- Juniper Networks Junos OS
- CWE-447
- CVSS 6.3 Medium
Junos OS and Junos OS Evolved: Confidential information in logs can be accessed by another user
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Information disclosure
- CVSS 8.7 High
Junos OS: Attempting to access specific sensors on platforms not supporting these will lead to a chassisd crash
- Juniper Networks Junos OS
- CWE-754
- CVSS 8.7 High
Junos OS: SRX Series: If DNS traceoptions are configured in a DGA or tunnel detection scenario specific DNS traffic leads to a PFE crash
- Juniper Networks Junos OS
- Memory corruption
- CVSS 6.0 Medium
Junos OS and Junos OS Evolved: Concurrent deletion of a routing-instance and receipt of an SNMP request cause an RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS: MX240, MX480, MX960 platforms using MPC10E: Memory leak will be observed when subscribed to a specific subscription on Junos Telemetry Interface
- Juniper Networks Junos OS
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Upon processing specific L2 traffic, rpd can hang in devices with EVPN/VXLAN configured
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Receiving specific traffic on devices with EVPN-VPWS with IGMP-snooping enabled will cause the rpd to crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-703
- CVSS 6.8 Medium
Junos OS: The 802.1X Authentication Daemon crashes on running a specific command
- Juniper Networks Junos OS
- CWE-20
- CVSS 6.9 Medium
Junos OS: SRX4600, SRX5000 Series: TCP packets with SYN/FIN or SYN/RST are transferred after enabling no-syn-check with Express Path
- Juniper Networks Junos OS
- CWE-754
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Memory leak due to RSVP neighbor persistent error leading to kernel crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Receipt of specific PIM packet causes rpd crash when PIM is configured along with MoFRR
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-252
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Loading a malicious certificate from the CLI may result in a stack-based overflow
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP update causes the session to reset
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 8.2 High
Junos OS and Junos OS Evolved: BGP multipath incremental calculation is resulting in an rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Race condition
- CVSS 7.5 High
Junos OS: SRX Series and NFX Series: Specific valid traffic leads to a PFE crash
- Juniper Networks Junos OS
- CWE-754