Advisories · Technology
Juniper Networks Junos OS.
Every CVE that names Juniper Networks Junos OS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
Junos OS: SRX and MX Series: When TCP packets occur in a specific sequence flowd crashes
- Juniper Networks Junos OS
- Memory corruption
- CVSS 8.7 High
Junos OS: SRX Series: Specifically malformed SSL packet causes FPC crash
- Juniper Networks Junos OS
- CWE-1286
- CVSS 8.7 High
Junos OS: SRX Series: A specifically malformed GTP message will cause an FPC crash
- Juniper Networks Junos OS
- CWE-667
- CVSS 8.7 High
Junos OS: EX4000: A high volume of traffic destined to the device leads to a crash and restart
- Juniper Networks Junos OS
- CWE-1419
- CVSS 6.8 Medium
Junos OS: MX10k Series: 'show system firmware' CLI command may lead to LC480 or LC2101 line card reset
- Juniper Networks Junos OS
- Race condition
- CVSS 7.1 High
Junos OS: EX4k Series, QFX5k Series: In an EVPN-VXLAN configuration link flaps cause Inter-VNI traffic drop
- Juniper Networks Junos OS
- CWE-754
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Receipt of specific IS-IS update packet causes memory leak leading to RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.5 High
Junos OS and Junos OS Evolved: Use after free vulnerability In 802.1X authentication daemon can cause crash of the dot1xd process
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS: SRX Series: With GRE performance acceleration enabled, receipt of a specific ICMP packet causes the PFE to crash
- Juniper Networks Junos OS
- CWE-755
- CVSS 8.7 High
Junos OS: SRX Series, MX Series with MX-SPC3 or MS-MPC: Receipt of multiple specific SIP messages results in flow management process crash
- Juniper Networks Junos OS
- Denial of service
- CVSS 7.1 High
Junos OS: Subscribing to telemetry sensors at scale causes all FPCs to crash
- Juniper Networks Junos OS
- Memory corruption
- CVSS 7.1 High
Junos OS: Receipt of a specifically malformed ICMP packet causes an FPC restart
- Juniper Networks Junos OS
- CWE-755
- CVSS 6.9 Medium
Junos OS and Junos OS Evolved: Optional transitive BGP attribute is modified before propagation to peers causing sessions to flap
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 6.8 Medium
Junos OS: A specifically crafted 'show chassis' command causes chassisd to crash
- Juniper Networks Junos OS
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: BGP update with a set of specific attributes causes rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-126
- CVSS 6.8 Medium
Junos OS and Junos OS Evolved: Unix socket used to control the jdhcpd process is world-writable
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Broken access control
- CVSS 6.3 Medium
Junos OS and Junos OS Evolved: DHCP Option 82 messages from clients being passed unmodified to the DHCP server
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 6.8 Medium
Junos OS and Junos OS Evolved: Executing a specific show command leads to an rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 5.3 Medium
Junos OS and Junos OS Evolved: Device allows login for user with expired password
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-262
- CVSS 8.7 High
Junos OS and Junos OS Evolved: Specific BGP EVPN update message causes rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 6.9 Medium
Junos OS: When a user with the name ftp or anonymous is configured unauthenticated filesystem access is allowed
- Juniper Networks Junos OS
- CWE-305
- CVSS 7.7 High
Junos Space Security Director: Insufficient authorization for sensitive resources in web interface
- Juniper Networks Junos Space Security Director
- Juniper Networks Junos OS
- CVSS 8.7 High
Junos OS: SRX4700: When forwarding-options sampling is enabled any traffic destined to the RE will cause the forwarding line card to crash and restart
- Juniper Networks Junos OS
- Memory corruption
- CVSS 6.0 Medium
Junos OS and Junos OS Evolved: With BGP sharding enabled, change in indirect next-hop can cause RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.0 High
Junos OS: EX4600 Series and QFX5000 Series: An attacker with physical access can open a persistent backdoor
- Juniper Networks Junos OS
- CWE-346
- CVSS 8.2 High
Junos OS: SRX Series and MX Series: Receipt of specific SIP packets in a high utilization situation causes a flowd/mspmand crash
- Juniper Networks Junos OS
- Memory corruption
- CVSS 8.4 High
Junos OS and Junos OS Evolved: Privilege escalation to root via CLI command 'request system logout'
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Command injection
- CVSS 6.9 Medium
Junos OS: SRX Series: J-Web can be exposed on additional interfaces
- Juniper Networks Junos OS
- Broken access control
- CVSS 6.8 Medium
Junos OS and Junos OS Evolved: Annotate configuration command can be used to change the configuration
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-140
- CVSS 6.8 Medium
Junos OS and Junos OS Evolved: When RIB sharding is configured each time a show command is executed RPD memory leaks
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 8.2 High
Junos OS and Junos OS Evolved: When a static route points to a reject next-hop and a gNMI query for this route is processed, RPD crashes
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.6 High
Junos OS: After removing ssh public key authentication root can still log in
- Juniper Networks Junos OS
- CWE-446
- CVSS 8.2 High
Junos OS: MX Series: When specific SIP packets are processed the MS-MPC will crash
- Juniper Networks Junos OS
- Denial of service
- CVSS 8.7 High
Junos OS: SRX Series: Sequence of specific PIM packets causes a flowd crash
- Juniper Networks Junos OS
- CWE-754
- CVSS 8.7 High
Junos OS: SRX300 Series: rpd will crash upon receiving a specific, valid BGP UPDATE message
- Juniper Networks Junos OS
- CWE-198
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Receipt of a specific BGP UPDATE causes an rpd crash on devices with BGP multipath configured
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 6.8 Medium
Junos OS: A low-privileged user can disable an interface
- Juniper Networks Junos OS
- Broken access control
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session reset
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-440
- CVSS 7.1 High
Junos OS: MX Series with MPC-BUILTIN, MPC 1 through MPC 9: Receipt and processing of a malformed packet causes one or more FPCs to crash
- Juniper Networks Junos OS
- Memory corruption
- CVSS 6.0 Medium
Junos OS and Junos OS Evolved: When route validation is enabled, BGP connection establishment failure causes RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: When jflow/sflow is configured continuous logical interface flaps causes rpd crash and restart
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 6.9 Medium
Junos OS: IPv6 firewall filter fails to match payload-protocol
- Juniper Networks Junos OS
- CWE-693
- CVSS 7.1 High
Junos OS and Junos OS Evolved: In an EVPN environment, receipt of specifically malformed BGP update causes RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-130
- CVSS 8.2 High
Junos OS: Specific unknown traffic pattern causes FPC and system to crash when packet capturing is enabled
- Juniper Networks Junos OS
- CWE-755
- CVSS 7.1 High
Junos OS: ACX Series: When 'hot-standby' mode is configured for an L2 circuit, interface flap causes the FEB to crash
- Juniper Networks Junos OS
- CWE-755
- CVSS 8.7 High
Junos OS and Junos OS Evolved: With traceoptions enabled, receipt of malformed AS PATH causes RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.5 High
Junos OS: Low-privileged user can cause script to run as root, leading to privilege escalation
- Juniper Networks Junos OS
- Broken access control
- CVSS 8.7 High
Junos OS: MX Series: Decapsulation of specific GRE packets leads to PFE reset
- Juniper Networks Junos OS
- CWE-754
- CVSS 8.7 High
Junos OS: SRX Series: A device configured for vector routing crashes when receiving malformed traffic
- Juniper Networks Junos OS
- CWE-130
- CVSS 8.7 High
Junos OS: SRX Series: On devices with Anti-Virus enabled, malicious server responses will cause memory to leak ultimately causing forwarding to stop
- Juniper Networks Junos OS
- Denial of service
- CVSS 6.9 Medium
Junos OS: Processing of a specific BGP update causes the SRRD process to crash
- Juniper Networks Junos OS
- CWE-116
- CVSS 8.7 High
Junos OS: MX Series, SRX Series: Processing of specific SIP INVITE messages by the SIP ALG will lead to an FPC crash
- Juniper Networks Junos OS
- CWE-167
- CVSS 6.8 Medium
Junos OS and Junos OS Evolved: A specific CLI command will cause an RPD crash when rib-sharding and update-threading is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 6.8 Medium
Junos OS and Junos OS Evolved: A local, low privileged user can access sensitive information
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Information disclosure
- CVSS 6.0 Medium
Junos OS and Junos OS Evolved: LSP flap in a specific MPLS scenario leads to rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 6.8 Medium
Junos OS and Junos OS Evolved: Executing a specific CLI command when asregex-optimized is configured causes an rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 8.7 High
Junos OS and Junos OS Evolved: Receipt of a specific ICMPv6 packet causes a memory overrun leading to an rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS: MX240, MX480, MX960 with SPC3: An attacker sending specific packets will cause a CPU utilization DoS.
- Juniper Networks Junos OS
- CWE-20
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Receipt of a specifically malformed DHCP packet causes jdhcpd process to crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-20
- CVSS 7.1 High
Junos OS: MX Series: Subscriber login/logout activity will lead to a memory leak
- Juniper Networks Junos OS
- Denial of service