Juniper Networks Junos OS.

Junos OS: SRX Series: Multiple DNS queries processed by SecIntel and DGA in the same session cause a flowd crash

• Juniper Networks Junos OS
• Memory corruption

Junos OS and Junos OS Evolved: If in a traffic engineering scenario a specific valid BGP-LS attribute is received rpd crashes

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-184

Junos OS and Junos OS Evolved: If a specific set of BGP communities is present and graceful-shutdown sender is added while attempting to advertise rpd crashes

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Memory corruption

Junos OS and Junos OS Evolved: A BGP-LS peer causes heap data disclosure when traffic-engineering routing is enabled

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-130

Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Authentication bypass

Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash if a malformed MCAST-TREE NLRI is received and readvertised

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-1288

Junos OS and Junos OS Evolved: A remote BGP peer causes an rpd crash when long-lived graceful restart (LLGR) is used

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-665

Junos OS and Junos OS Evolved: A malformed SRv6 service route causes an rpd crash when dynamic tunnels are enabled

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-1284

Junos OS and Junos OS Evolved: Malformed OSPF packets cause rpd memory disclosure or service disruption when link-local TE processing is used

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-1284

Junos OS and Junos OS Evolved: A specific RSVP packet causes an rpd crash when L2 LSP support is used

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-1284

Junos OS and Junos OS Evolved: Malformed ICCP packets cause l2ald memory disclosure and disruption

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-1284

Junos OS and Junos OS Evolved: A specific BGP FlowSpec update causes an rpd crash when BGP FlowSpec import policy is used

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Memory corruption

Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when ephemeral configuration is used

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Memory corruption

Junos OS: Unauthorized root command execution when J-Web is enabled

• Juniper Networks Junos OS
• Authentication bypass

Junos OS: Malformed Extended Echo requests cause a Routing Engine reboot when Extended Echo is enabled

• Juniper Networks Junos OS
• Memory corruption

Junos OS: An ICCP peer causes dot1xd to crash when dot1x synchronization is enabled

• Juniper Networks Junos OS
• Memory corruption

Junos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is used

• Juniper Networks Junos OS
• Denial of service

Junos OS: Malformed packet causes pkid denial of service when certificate re-enrollment is used

• Juniper Networks Junos OS
• Memory corruption

Junos OS: An authenticated attacker causes a denial of service when the gRPC extension-service is enabled

• Juniper Networks Junos OS
• CWE-409

Junos OS: A crafted OVSDB message crashes vgd and allows remote code execution

• Juniper Networks Junos OS
• Memory corruption

Junos OS: MX Series: An unauthenticated network attacker causes an rpd crash when HFRR link protection is used

• Juniper Networks Junos OS
• Denial of service

Junos OS: MX Series: Web filtering doesn't block specifically formatted URLs

• Juniper Networks Junos OS
• CWE-706

Junos OS: EX Series: Subscribing to an unsupported telemetry sensor path causes fxpc process crash

• Juniper Networks Junos OS
• CWE-236

Junos OS: MX Series: For subscribers configured on static interfaces, input filters are not in effect

• Juniper Networks Junos OS
• CWE-754

Junos OS: SRX Series: Flow sessions are not getting cleared leading to a DoS

• Juniper Networks Junos OS
• Race condition

Junos OS: EX4100 Series, EX4400: With sFlow configured in a VC scenario multicast traffic leads to an FPC crash

• Juniper Networks Junos OS
• Denial of service

Junos OS: MX Series with SPC3, SRX Series: Processing of a specifically malformed SIP invite causes a flowd crash

• Juniper Networks Junos OS
• CWE-1286

Junos OS and Junos OS Evolved: EX Series, QFX Series, MX Series: A specific 'show l2-learning/ethernet-switching' command causes l2ald crash

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-466

Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuously

• Juniper Networks Junos OS
• CWE-694

Junos OS: MX with SPC3, SRX Series: A specifically malformed TCP packet causes a flowd crash

• Juniper Networks Junos OS
• CWE-1284

Junos OS: MX Series with SPC3, SRX Series: Specific packet in response to a TCP connection establishment by the affected device can crash the PFE

• Juniper Networks Junos OS
• CWE-754

Junos OS: SRX Series: If VPN compliance-check is configured an attacker can cause http-gk process crash

• Juniper Networks Junos OS
• Memory corruption

Junos OS: QFX10000 Series: IPv6 multicast traffic received on non-IRB interfaces causes a multicast flood

• Juniper Networks Junos OS
• CWE-754

Junos OS: MX Series: Specific traffic causes an FPC to reset

• Juniper Networks Junos OS
• CWE-1284

Junos OS: EX Series: Unauthorized users can execute service-impacting CLI command

• Juniper Networks Junos OS
• Broken access control

Junos OS and Junos OS Evolved: When a specifically malformed BGP route update is received RPD crashes

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-754

Junos OS: MX Series: In a VC scenario a high rate of micro-BFD session flaps will cause an FPC crash

• Juniper Networks Junos OS
• CWE-606

Junos OS and Junos OS Evolved: Receipt of a specific SNMPv3 request results in memory leak and eventual snmpd crash

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Memory corruption

Junos OS and Junos OS Evolved: Configuration of a specific SSH option results in mgd crash

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Memory corruption

Junos OS and Junos OS Evolved: Execution of crafted CLI commands allows for arbitrary shell injection as root

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Command injection

Junos OS: SRX Series: In a NAT64 configuration, receipt of a specific, malformed ICMPv6 packet will cause the srxpfe process to crash and restart.

• Juniper Networks Junos OS
• CWE-754

Junos OS: SRX1500, SRX4100, SRX4200, SRX4600: When a specific show command is executed chassisd crashes

• Juniper Networks Junos OS
• CWE-754

Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands in a JDM/CSDS scenario

• Juniper Networks Junos OS
• Broken access control

Junos OS: EX Series, QFX Series: In a VXLAN scenario when specific control protocol packets are received, memory leaks and eventually no traffic is passed

• Juniper Networks Junos OS
• CWE-754

Junos OS: SRX Series, MX Series: When a specifically malformed first ISAKMP packet is received kmd/iked crashes

• Juniper Networks Junos OS
• CWE-1286

Junos OS and Junos OS Evolved: Specific low privileged CLI command exposes sensitive information

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Broken access control

Junos OS: MX Series: Firewall filters on lo0.<non-0> in the default routing instance are not in effect

• Juniper Networks Junos OS
• CWE-754

Junos OS and Junos OS Evolved: An attacker sending a specific genuine BGP packet causes a BGP reset

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-20

Junos OS: SRX Series: Insufficient certificate verification for device to SD cloud communication

• Juniper Networks Junos OS
• CWE-296

Junos OS: MX Series: Mismatch between configured and received packet types causes memory leak in bbe-smgd

• Juniper Networks Junos OS
• Denial of service

Junos OS: MX Series: In specific DHCPv6 scenarios jdhcpd memory increases continuously with subscriber logouts

• Juniper Networks Junos OS
• Denial of service

Junos OS and Junos OS Evolved: In an EVPN-MPLS scenario churn of ESI routes causes a memory leak in l2ald

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Denial of service

Junos OS: EX Series, QFX Series: If the same egress filter is configured on both an IRB and a physical interface one of those is not applied

• Juniper Networks Junos OS
• CWE-1419

Junos OS: SRX1600, SRX2300, SRX4300: When a specific show command is executed chassisd crashes

• Juniper Networks Junos OS
• CWE-754

Junos OS: A low privileged user can escalate their privileges so that they can login as root

• Juniper Networks Junos OS
• CWE-61

Junos OS and Junos OS Evolved: A high frequency of connecting and disconnecting NETCONF sessions causes management unavailability

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-821

Junos OS and Junos OS Evolved: When an unsigned Python op script configuration is present, a local low privileged user can compromise the system

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Privilege escalation

Junos OS: Privileged local user can gain access to a Linux-based FPC as root

• Juniper Networks Junos OS
• Authentication bypass

Junos OS and Junos OS Evolved: When telemetry collectors are frequently subscribing and unsubscribing to sensors chassisd or rpd will crash

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• Memory corruption

Junos OS: SRX Series: If a specific request is processed by the DNS subsystem flowd will crash

• Juniper Networks Junos OS
• CWE-252