Advisories · Technology

Juniper Networks Junos OS.

Every CVE that names Juniper Networks Junos OS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-0231 CVE record

CVSS 6.5 Medium

Junos OS: SRX, vSRX Series: J-Web Path traversal vulnerability in SRX and vSRX Series leads to information disclosure.
- Juniper Networks Junos OS
- Path traversal
Not analysed yet 22 Apr 2021
CVE-2021-0230 CVE record

CVSS 7.5 High

Junos OS: SRX Series: Memory leak when querying Aggregated Ethernet (AE) interface statistics
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 22 Apr 2021
CVE-2021-0229 CVE record

CVSS 5.3 Medium

Junos OS: Receipt of specific packets could lead to Denial of Service in MQTT Server
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 22 Apr 2021
CVE-2021-0228 CVE record

CVSS 6.5 Medium

Junos OS: MX Series: DDoS LACP violation upon receipt of specific layer 2 frames in EVPN-VXLAN deployment
- Juniper Networks Junos OS
- CWE-754
Not analysed yet 22 Apr 2021
CVE-2021-0227 CVE record

CVSS 7.5 High

Junos OS: SRX Series: Denial of Service in J-Web upon receipt of crafted HTTP packets
- Juniper Networks Junos OS
- Memory corruption
Not analysed yet 22 Apr 2021
CVE-2021-0224 CVE record

CVSS 6.5 Medium

Junos OS: ANCPD core when hitting maximum-discovery-table-entries limit
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 22 Apr 2021
CVE-2021-0216 CVE record

CVSS 6.5 Medium

Junos OS: ACX5448, ACX710: BFD sessions might flap due to high rate of transit ARP packets
- Juniper Networks Junos OS
Not analysed yet 22 Apr 2021
CVE-2021-0214 CVE record

CVSS 6.5 Medium

Junos OS: Denial of Service in ppmd upon receipt of malformed packet
- Juniper Networks Junos OS
- CWE-20
Not analysed yet 22 Apr 2021
CVE-2021-0223 CVE record

CVSS 7.8 High

Junos OS: telnetd.real Local Privilege Escalation vulnerabilities in SUID binaries
- Juniper Networks Junos OS
- Privilege escalation
Not analysed yet 15 Jan 2021
CVE-2021-0222 CVE record

CVSS 7.4 High

Junos OS: Upon receipt of certain protocol packets with invalid payloads a self-propagating Denial of Service may occur.
- Juniper Networks Junos OS
- CWE-16
Not analysed yet 15 Jan 2021
CVE-2021-0221 CVE record

CVSS 6.5 Medium

Junos OS: QFX Series: Traffic loop Denial of Service (DoS) upon receipt of specific IP multicast traffic
- Juniper Networks Junos OS
- CWE-703
Not analysed yet 15 Jan 2021
CVE-2021-0219 CVE record

CVSS 6.7 Medium

Junos OS: Command injection vulnerability in 'request system software' CLI command
- Juniper Networks Junos OS
- Command injection
Not analysed yet 15 Jan 2021
CVE-2021-0218 CVE record

CVSS 7.8 High

Junos OS: Command injection vulnerability in license-check daemon
- Juniper Networks Junos OS
- Command injection
Not analysed yet 15 Jan 2021
CVE-2021-0217 CVE record

CVSS 7.4 High

Junos OS: EX Series and QFX Series: Memory leak issue processing specific DHCP packets
- Juniper Networks Junos OS
- Memory corruption
Not analysed yet 15 Jan 2021
CVE-2021-0215 CVE record

CVSS 6.5 Medium

Junos OS: EX Series, QFX Series, SRX Branch Series, MX Series: Memory leak in packet forwarding engine due to 802.1X authenticator port interface flaps
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 15 Jan 2021
CVE-2021-0211 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Junos OS and Junos OS Evolved: Upon receipt of a specific BGP FlowSpec message network traffic may be disrupted.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
Not analysed yet 15 Jan 2021
CVE-2021-0210 CVE record

CVSS 6.8 Medium

Junos OS: Privilege escalation in J-Web due to arbitrary command and code execution via information disclosure from another users active session
- Juniper Networks Junos OS
- Information disclosure
Not analysed yet 15 Jan 2021
CVE-2021-0208 CVE record

CVSS 8.8 High

Junos OS and Junos OS Evolved: In bidirectional LSP configurations, on MPLS egress router RPD may core upon receipt of specific malformed RSVP packet.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-20
Not analysed yet 15 Jan 2021
CVE-2021-0207 CVE record

CVSS 7.5 High

NFX250, NFX350, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series: Certain genuine traffic received by the Junos OS device will be discarded instead of forwarded.
- Juniper Networks Junos OS
- CWE-115
- CWE-436
Not analysed yet 15 Jan 2021
CVE-2021-0206 CVE record

CVSS 7.5 High

Junos OS: NFX Series, SRX Series: PFE may crash upon receipt of specific packet when SSL Proxy is configured.
- Juniper Networks Junos OS
- Memory corruption
Not analysed yet 15 Jan 2021
CVE-2021-0205 CVE record

CVSS 5.8 Medium

Junos OS: MX Series: Dynamic filter fails to match IPv6 prefix
- Juniper Networks Junos OS
- Broken access control
Not analysed yet 15 Jan 2021
CVE-2021-0204 CVE record

CVSS 7.8 High

Junos OS: dexp Local Privilege Escalation vulnerabilities in SUID binaries
- Juniper Networks Junos OS
- Privilege escalation
Not analysed yet 15 Jan 2021
CVE-2021-0203 CVE record

CVSS 8.6 High

Junos OS: EX and QFX5K Series: Storm Control does not work as expected when Redundant Trunk Group is configured
- Juniper Networks Junos OS
- CWE-794
Not analysed yet 15 Jan 2021
CVE-2021-0202 CVE record

CVSS 7.5 High

Junos OS: MX Series, EX9200 Series: Trio-based MPC memory leak when Integrated Routing and Bridging (IRB) interface is mapped to a VPLS instance or a Bridge-Domain
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 15 Jan 2021
CVE-2020-1689 CVE record

CVSS 6.5 Medium

Junos OS: EX4300-MP/EX4600/QFX5K Series: High CPU load due to receipt of specific layer 2 frames when deployed in a Virtual Chassis configuration
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 16 Oct 2020
CVE-2020-1688 CVE record

CVSS 6.5 Medium

Junos OS: SRX and NFX Series: Insufficient Web API private key protection
- Juniper Networks Junos OS
- Information disclosure
- Hard-coded credentials
Not analysed yet 16 Oct 2020
CVE-2020-1687 CVE record

CVSS 6.5 Medium

Junos OS: EX4300-MP/EX4600/QFX5K Series: High CPU load due to receipt of specific layer 2 frames in EVPN-VXLAN deployment.
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 16 Oct 2020
CVE-2020-1686 CVE record

CVSS 7.5 High

Junos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet.
- Juniper Networks Junos OS
- Memory corruption
Not analysed yet 16 Oct 2020
CVE-2020-1685 CVE record

CVSS 5.8 Medium

Junos OS: EX4600, QFX5K Series: Stateless firewall filter matching 'user-vlan-id' will cause incomplete discard action
- Juniper Networks Junos OS
- Information disclosure
Not analysed yet 16 Oct 2020
CVE-2020-1684 CVE record

CVSS 7.5 High

Junos OS: SRX Series: High CPU load due to processing for HTTP traffic when Application Identification is enabled.
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 16 Oct 2020
CVE-2020-1683 CVE record

CVSS 7.5 High

Junos OS: Memory leak leads to kernel crash (vmcore) due to SNMP polling
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 16 Oct 2020
CVE-2020-1682 CVE record

CVSS 5.5 Medium

Junos OS: SRX1500, vSRX, SRX4K, NFX150, NFX250: Denial of service vulnerability executing local CLI command
- Juniper Networks Junos OS
- CWE-20
Not analysed yet 16 Oct 2020
CVE-2020-1680 CVE record

CVSS 5.3 Medium

Junos OS: MX Series: MS-MPC/MIC might crash when processing malformed IPv6 packet in NAT64 configuration.
- Juniper Networks Junos OS
- Memory corruption
Not analysed yet 16 Oct 2020
CVE-2020-1679 CVE record

CVSS 7.5 High

Junos OS: PTX/QFX Series: Kernel Routing Table (KRT) queue stuck after packet sampling a malformed packet when the tunnel-observation mpls-over-udp configuration is enabled.
- Juniper Networks Junos OS
- CWE-20
Not analysed yet 16 Oct 2020
CVE-2020-1678 CVE record

CVSS 6.5 Medium

Junos OS and Junos OS Evolved: RPD can crash due to a slow memory leak.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
Not analysed yet 16 Oct 2020
CVE-2020-1673 CVE record

CVSS 8.8 High

Junos OS: Reflected Cross-site Scripting vulnerability in J-Web and web based (HTTP/HTTPS) services
- Juniper Networks Junos OS
- Cross-site scripting (XSS)
Not analysed yet 16 Oct 2020
CVE-2020-1672 CVE record

CVSS 7.5 High

Junos OS: jdhcpd process crash when processing a specific DHCPDv6 packet in DHCPv6 relay configuration.
- Juniper Networks Junos OS
- CWE-20
Not analysed yet 16 Oct 2020
CVE-2020-1671 CVE record

CVSS 7.5 High

Junos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash.
- Juniper Networks Junos OS
- Memory corruption
Not analysed yet 16 Oct 2020
CVE-2020-1670 CVE record

CVSS 6.5 Medium

Junos OS: EX4300 Series: High CPU load due to receipt of specific IPv4 packets
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 16 Oct 2020
CVE-2020-1669 CVE record

CVSS 6.3 Medium

Junos OS: NFX350: Password hashes stored in world-readable format
- Juniper Networks Junos OS
- CWE-256
Not analysed yet 16 Oct 2020
CVE-2020-1668 CVE record

CVSS 6.5 Medium

Junos OS: EX2300 Series: High CPU load due to receipt of specific multicast packets on layer 2 interface
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 16 Oct 2020
CVE-2020-1667 CVE record

CVSS 8.3 High

Junos OS: MX Series: Services card might restart due to a race condition when DNS filtering is enabled.
- Juniper Networks Junos OS
- Race condition
Not analysed yet 16 Oct 2020
CVE-2020-1665 CVE record

CVSS 5.3 Medium

Junos OS: MX series/EX9200 Series: IPv6 DDoS protection does not work as expected.
- Juniper Networks Junos OS
- CWE-794
Not analysed yet 16 Oct 2020
CVE-2020-1664 CVE record

CVSS 7.8 High

Junos OS: Buffer overflow vulnerability in device control daemon
- Juniper Networks Junos OS
- Memory corruption
Not analysed yet 16 Oct 2020
CVE-2020-1662 CVE record

CVSS 7.5 High

Junos OS and Junos OS Evolved: RPD crash due to BGP session flapping.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-20
Not analysed yet 16 Oct 2020
CVE-2020-1661 CVE record

CVSS 5.3 Medium

Junos OS: jdhcpd process crash when forwarding a malformed DHCP packet.
- Juniper Networks Junos OS
Not analysed yet 16 Oct 2020
CVE-2020-1660 CVE record

CVSS 8.3 High

Junos OS: MX Series: Receipt of specific packets can cause services card to restart when DNS filtering is configured.
- Juniper Networks Junos OS
- Race condition
Not analysed yet 16 Oct 2020
CVE-2020-1657 CVE record

CVSS 7.5 High

Junos OS: SRX Series: An attacker sending spoofed packets to IPSec peers may cause a Denial of Service.
- Juniper Networks Junos OS
- CWE-408
Not analysed yet 16 Oct 2020
CVE-2020-1656 CVE record

CVSS 8.8 High

Junos OS: When a DHCPv6 Relay-Agent is configured upon receipt of a specific DHCPv6 client message, Remote Code Execution may occur.
- Juniper Networks Junos OS
- Memory corruption
- CWE-20
Not analysed yet 16 Oct 2020
CVE-2020-1655 CVE record

CVSS 5.3 Medium

Junos OS: MX Series: PFE crash on MPC7/8/9 upon receipt of large packets requiring fragmentation
- Juniper Networks Junos OS
Not analysed yet 17 Jul 2020
CVE-2020-1654 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Junos OS: SRX Series: processing a malformed HTTP message when ICAP redirect service is enabled may can lead to flowd process crash or remote code execution
- Juniper Networks Junos OS
- Memory corruption
Not analysed yet 17 Jul 2020
CVE-2020-1653 CVE record

CVSS 7.5 High

Junos OS: Kernel crash (vmcore) or FPC crash due to mbuf leak
- Juniper Networks Junos OS
- CWE-159
Not analysed yet 17 Jul 2020
CVE-2020-1651 CVE record

CVSS 6.5 Medium

Junos OS: MX Series: PFE on the line card may crash due to memory leak.
- Juniper Networks Junos OS
- CWE-19
Not analysed yet 17 Jul 2020
CVE-2020-1650 CVE record

CVSS 7.5 High

Junos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC
- Juniper Networks Junos OS
Not analysed yet 17 Jul 2020
CVE-2020-1649 CVE record

CVSS 7.5 High

Junos OS: MX Series: PFE crash on MPC7/8/9 upon receipt of small fragments requiring reassembly
- Juniper Networks Junos OS
Not analysed yet 17 Jul 2020
CVE-2020-1648 CVE record

CVSS 7.5 High

Junos OS and Junos OS Evolved: RPD crash when processing a specific BGP packet
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-159
- CWE-690
Not analysed yet 17 Jul 2020
CVE-2020-1647 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Junos OS: SRX Series: Double free vulnerability can lead to DoS or remote code execution due to the processing of a specific HTTP message when ICAP redirect service is enabled
- Juniper Networks Junos OS
- Memory corruption
Not analysed yet 17 Jul 2020
CVE-2020-1646 CVE record

CVSS 7.5 High

Junos OS and Junos OS Evolved: RPD crash while processing a specific BGP update information.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-159
Not analysed yet 17 Jul 2020
CVE-2020-1645 CVE record

CVSS 8.3 High

Junos OS: MX Series: Services card might restart when DNS filtering is enabled
- Juniper Networks Junos OS
- Race condition
Not analysed yet 17 Jul 2020
CVE-2020-1644 CVE record

CVSS 7.5 High

Junos OS and Junos OS Evolved: RPD crash due to specific BGP UPDATE packets
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-703
Not analysed yet 17 Jul 2020