Advisories · Technology
Juniper Networks Junos OS.
Every CVE that names Juniper Networks Junos OS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes routing-daemon denial of service when BGP MVPN inter-region tunneling is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-459
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes routing-daemon denial of service when an MSDP or PIM policy uses AS-path expansion
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes an rpd crash when VPLS auto-discovery is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: A configured BGP neighbor causes rpd crash when multipath next-hops are processed
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP RIB sharding is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-664
- CVSS 8.7 High
Junos OS and Junos OS Evolved: A BGP route-processing error causes rpd crash when extended next-hop tunneling and SRv6 service processing are used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-762
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP extended-nexthop-tunnel is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when BGP-LS traffic-engineering is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Malformed RSVP packet causes rpd crash when MPLS-TE error processing is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when BGP-LS TED export is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Malformed RIPv2 messages cause routing service disruption when RIP is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1284
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Malformed PIM Bidir DF-Election messages cause routing service disruption when bidirectional PIM is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An attacker causes routing-plane denial of service when Auto-RP mapping is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes a routing outage when BGP MVPN signaling is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1284
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes root code execution when 802.1X authentication is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS: An attacker causes authd to crash when subscriber RADIUS authentication is used
- Juniper Networks Junos OS
- Memory corruption
- CVSS 6.7 Medium
Junos OS and Junos OS Evolved: An attacker causes na-grpcd to crash when the InitialSync service is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP link protection is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An attacker causes routing protocol daemon crash when OSPFv3 is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Specific PIM messages causes rpd crash when multiple-triggered-joins is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An unauthenticated attacker causes rpd denial of service when IPv6 PIM is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-20
- CVSS 5.3 Medium
Junos OS and Junos OS Evolved: EX Series, MX Series, ACX Series: An attacker causes rpd heap memory disclosure when Rosen-MVPN data-MDT is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 5.3 Medium
Junos OS and Junos OS Evolved: An attacker causes rpd process memory disclosure when IPv6 LDP is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes routing daemon denial of service when EVPN BGP is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes a routing protocol daemon denial of service when EVPN is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes rpd crash and denial of service when EVPN is configured
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-20
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes rpd denial of service when EVPN route signaling is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-130
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes an rpd crash when routing-policy resolution-map processing and policy event tracing are enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP ISO-VPN egress protection is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.7 High
Junos OS and Junos OS Evolved: A routing-policy table reference causes routing-daemon denial of service when source-based forwarding is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: SRX Series: An attacker causes a forwarding-plane outage when SVR vector routing is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is used
- Juniper Networks Junos OS
- CWE-195
- CVSS 7.1 High
Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is enabled
- Juniper Networks Junos OS
- Denial of service
- CVSS 6.7 Medium
Junos OS and Junos OS Evolved: An attacker causes Denial of Service in eventd
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.6 High
Junos OS and Junos OS Evolved: An unprivileged local attacker causes denial of service or privilege escalation
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when labeled-unicast aggregate-label is configured
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: A specific IS-IS SRv6 packet causes an rpd crash when flexible algorithm is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1284
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker causes an rpd crash when LDP is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An crafted LDP message causes an rpd crash when LDP is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 9.3 CriticalCritical · CVSS 9+
Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.1 High
Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when automatic VPLS site ID is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-20
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An eBGP peer causes an rpd crash when VPLS automatic site-ID collision resolution is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Malformed MC-LAG ICCP message causes l2ald heap disclosure or crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-130
- CVSS 7.1 High
Junos OS and Junos OS Evolved: An inconsistent ICCP peer message causes an l2ald crash when MC-LAG is configured
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 8.7 High
Junos OS and Junos OS Evolved: An attacker causes an rpd crash when inter-AS MVPN ingress replication is used
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Malformed RSVP packet causes a rpd crash when RSVP is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1284
- CVSS 7.1 High
Junos OS and Junos OS Evolved: Specific RSVP packet causes an rpd crash when associated bidirectional LSP is enabled
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 9.3 CriticalCritical · CVSS 9+
Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing is enabled
- Juniper Networks Junos OS
- Memory corruption
- CVSS 9.2 CriticalCritical · CVSS 9+
Junos OS: SRX Series: Malformed DNS packet causes service disruption when UTM Anti-Spam SBL is used
- Juniper Networks Junos OS
- Memory corruption
- CVSS 9.2 CriticalCritical · CVSS 9+
Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authentication
- Juniper Networks Junos OS
- SQL injection
- CVSS 9.2 CriticalCritical · CVSS 9+
Junos OS: SRX Series: An compromised HTTPS feed server can cause remote code execution when Security Intelligence is used
- Juniper Networks Junos OS
- Memory corruption
- CVSS 8.2 High
Junos OS: SRX Series: A high volume of DNS traffic over TCP can lead to a flowd crash
- Juniper Networks Junos OS
- Memory corruption
- CVSS 8.5 High
Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands allows command injection
- Juniper Networks Junos OS
- Command injection
- CVSS 6.0 Medium
Junos OS: MX Series: Malformed SyncE or PTP clock input causes continuous RE switchover
- Juniper Networks Junos OS
- CWE-413
- CVSS 8.7 High
Junos OS: SRX4000 Series, SRX5000 Series and MX Series with SPC3: With application services configured, high session churn causes memory leak which will ultimately impact traffic
- Juniper Networks Junos OS
- Denial of service
- CVSS 8.2 High
Junos OS: SRX Series: If TLS session resumption is configured and a specific TLS message is received a PFE crash occurs
- Juniper Networks Junos OS
- CWE-166
- CVSS 8.2 High
Junos OS: SRX Series: With WebFiltering enabled prolonged HTTP session load can cause a crash
- Juniper Networks Junos OS
- CWE-413
- CVSS 9.2 CriticalCritical · CVSS 9+
Junos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remote Code Execution
- Juniper Networks Junos OS
- CWE-1286