Advisories · Technology
Juniper Networks Junos OS.
Every CVE that names Juniper Networks Junos OS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Junos OS and Junos OS Evolved: RPD core upon receipt of specific BGP update
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 7.5 High
Junos OS: MX Series: Receipt of specific packet on MS-MPC/MS-MIC causes line card reset
- Juniper Networks Junos OS
- CWE-754
- CVSS 7.5 High
Junos OS and Junos OS Evolved: Privilege escalation vulnerability in Juniper Extension Toolkit (JET)
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Privilege escalation
- CVSS 7.5 High
Junos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet
- Juniper Networks Junos OS
- CWE-755
- CVSS 7.5 High
Junos OS: Upon receipt of specific sequences of genuine packets destined to the device the kernel will crash and restart (vmcore)
- Juniper Networks Junos OS
- Memory corruption
- CVSS 6.1 Medium
Junos OS: QFX10K Series: Denial of Service (DoS) upon receipt of DVMRP packets received on multi-homing ESI in VXLAN.
- Juniper Networks Junos OS
- CWE-697
- CVSS 5.3 Medium
Junos OS: QFX5000 Series and EX4600 Series: Enhanced storm control might not work leading to partial Denial of Service
- Juniper Networks Junos OS
- CWE-474
- CVSS 5.5 Medium
Junos OS: Out-of-memory condition and crashes can occur after executing a certain CLI command repeatedly
- Juniper Networks Junos OS
- Denial of service
- CVSS 6.5 Medium
Junos OS and Junos OS Evolved: A vulnerability allows a network based unauthenticated attacker which sends a high rate of specific traffic to cause a partial Denial of Service
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Information disclosure
- CVSS 6.5 Medium
Junos OS: MX Series, EX9200 Series, SRX4600: Ethernet interface vulnerable to specially crafted frames
- Juniper Networks Junos OS
- CWE-755
- CVSS 6.5 Medium
Junos OS: User-defined ARP Policer isn't applied on Aggregated Ethernet (AE) interface until firewall process is restarted
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Race condition
- CVSS 6.5 Medium
Junos OS: MX Series, EX9200 Series: FPC may crash upon receipt of specific MPLS packet affecting Trio-based MPCs
- Juniper Networks Junos OS
- CWE-754
- CVSS 6.5 Medium
Junos OS and Junos OS Evolved: RPD could crash in SR-ISIS/MPLS environment due to a flap of an ISIS link in the network
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 7.5 High
Junos OS: QFX5000 Series and EX4600 Series: Continuous traffic destined to a device configured with MC-LAG leading to nodes losing their control connection which can impact traffic
- Juniper Networks Junos OS
- Denial of service
- CVSS 7.5 High
Junos OS: Upon receipt of specific sequences of genuine packets destined to the device the kernel will crash and restart (vmcore)
- Juniper Networks Junos OS
- Memory corruption
- CVSS 7.5 High
Junos OS: RPD crash while processing a specific BGP UPDATE when Multipath or add-path features are enabled
- Juniper Networks Junos OS
- CWE-754
- CVSS 5.9 Medium
Junos OS and Junos OS Evolved: Specific packets can trigger rpd crash when BGP Origin Validation is configured with RPKI
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 7.5 High
Junos OS: PTX Series, QFX10K Series: Upon receipt of specific packets BFD sessions might flap due to DDoS policer implementation in Packet Forwarding Engine
- Juniper Networks Junos OS
- CWE-665
- CVSS 8.8 High
Junos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.
- Juniper Networks Junos OS
- CWE-20
- CVSS 8.8 High
Junos OS and Junos OS Evolved: LLDP Out-of-Bounds Read vulnerability in l2cpd
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 8.8 High
Junos OS: J-Web: Cross-site scripting attack allows an attacker to gain control of another users session.
- Juniper Networks Junos OS
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Junos OS and Junos OS Evolved: Trio Chipset: Denial of Service due to packet destined to device's interfaces.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CWE-670
- CVSS 6.5 Medium
Junos OS: QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016: In EVPN-VXLAN scenarios receipt of specific genuine packets by an adjacent attacker will cause a kernel memory leak in FPC.
- Juniper Networks Junos OS
- Denial of service
- CVSS 6.5 Medium
Junos OS: EX2200-C Series, EX3200 Series, EX3300 Series, EX4200 Series, EX4500 Series, EX4550 Series, EX6210 Series, EX8208 Series, EX8216 Series: Receipt of a crafted ARP packet by an adjacent attac…
- Juniper Networks Junos OS
- Memory corruption
- CVSS 7.5 High
Junos OS: PTX Series, QFX10K Series: A PTX/QFX FPC may restart unexpectedly with the "inline-Jflow" feature enabled on a large-scale deployment
- Juniper Networks Junos OS
- Race condition
- Memory corruption
- CVSS 8.8 High
Junos OS: J-Web can be compromised through reflected client-side HTTP parameter pollution attacks.
- Juniper Networks Junos OS
- CWE-233
- CVSS 8.8 High
Junos OS: J-Web has an Improper Neutralization of CRLF Sequences in its HTTP Headers which allows an attacker to carry out multiple types of attacks.
- Juniper Networks Junos OS
- Cross-site scripting (XSS)
- Other injection
- CVSS 7.4 High
Junos OS: Receipt of a crafted DHCP packet will cause the jdhcpd DHCP service to core.
- Juniper Networks Junos OS
- CWE-20
- CVSS 8.1 High
cSRX: Use of Hard-coded Cryptographic Keys allows an attacker to take control of the device through device management services.
- Juniper Networks Junos OS
- Hard-coded credentials
- CVSS 5.9 Medium
Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11, PTX10003, PTX10008: Line card may crash and restart when traffic is hitting a firewall filter having a term with syslog action configured
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-703
- CVSS 5.9 Medium
Junos OS: PTX Series: Denial of Service in packet processing due to heavy route churn when J-Flow sampling is enabled
- Juniper Networks Junos OS
- CWE-19
- CVSS 6.5 Medium
Junos OS: QFX10002-60C: Use after free vulnerability found during static code analysis
- Juniper Networks Junos OS
- Memory corruption
- CVSS 7.5 High
Junos OS: Denial of Service vulnerability in J-Web and web based (HTTP/HTTPS) services caused by a high number of specific requests
- Juniper Networks Junos OS
- Memory corruption
- Denial of service
- CVSS 7.3 High
Junos OS: SNMP fails to properly perform authorization checks on incoming received SNMP requests.
- Juniper Networks Junos OS
- Broken access control
- Information disclosure
- CVSS 7.4 High
Junos OS and Junos OS Evolved: QFX5K Series: Underlay network traffic might not be processed upon receipt of high rate of specific genuine overlay packets in VXLAN scenario
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
- CVSS 5.9 Medium
Junos OS: Kernel panic upon receipt of specific TCPv6 packet on management interface
- Juniper Networks Junos OS
- Race condition
- CVSS 6.5 Medium
Junos OS: MX Series, EX9200 Series: Trio-based MPCs memory leak in VPLS with integrated routing and bridging (IRB) interface
- Juniper Networks Junos OS
- Denial of service
- CVSS 5.5 Medium
Junos OS: mosquitto Local Privilege Escalation vulnerability in SUID binaries
- Juniper Networks Junos OS
- Privilege escalation
- CVSS 5.5 Medium
Junos OS: ethtraceroute Local Privilege Escalation vulnerability in SUID binaries
- Juniper Networks Junos OS
- Privilege escalation
- CVSS 9.8 CriticalCritical · CVSS 9+
Junos OS: Remote code execution vulnerability in overlayd service
- Juniper Networks Junos OS
- Memory corruption
- CVSS 7.8 High
Junos OS: NFX Series: Local Command Execution Vulnerability in JDMD Leads to Privilege Escalation
- Juniper Networks Junos OS
- Command injection
- CVSS 7.8 High
Junos OS: NFX Series: Local Code Execution Vulnerability in JDMD Leads to Privilege Escalation
- Juniper Networks Junos OS
- Command injection
- CVSS 8.6 High
Junos OS: MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC: The BRAS Subscriber Services service activation portal is vulnerable to a Denial of Service (DoS) via malformed HTTP packets
- Juniper Networks Junos OS
- Memory corruption
- CVSS 7.5 High
Junos OS and Junos OS Evolved: An attacker sending a specific crafted BGP update message will crash RPD
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CVSS 8.1 High
Junos OS: SRX Series: A remote attacker may be able to cause a PFE buffer overflow to arbitrarily remotely execute code or commands on the target device with UTM enabled.
- Juniper Networks Junos OS
- Memory corruption
- CVSS 10.0 CriticalCritical · CVSS 9+
NFX Series: Hard-coded credentials allow an attacker to take control of any instance through administrative interfaces.
- Juniper Networks Junos OS
- Hard-coded credentials
- CVSS 5.1 Medium
Junos OS: PTX Series, QFX Series: Due to a race condition input loopback firewall filters applied to interfaces may not operate even when listed in the running configuration.
- Juniper Networks Junos OS
- Race condition
- CVSS 7.3 High
Junos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3: In a multi-tenant environment, a tenant host administrator may be able to jailbreak out of their network impacting other t…
- Juniper Networks Junos OS
- Broken access control
- CVSS 7.8 High
Junos OS: Junos Fusion: Hard-coded credentials on satellite devices allows a locally authenticated attacker to elevate their privileges.
- Juniper Networks Junos OS
- Hard-coded credentials
- CVSS 7.4 High
Junos OS: A race condition in the storm control profile may allow an attacker to cause a Denial of Service condition
- Juniper Networks Junos OS
- CVSS 4.7 Medium
Junos OS: EX4300: Stateless firewall policer fails to discard traffic
- Juniper Networks Junos OS
- CWE-241
- CVSS 6.5 Medium
Junos OS: EX4300: FPC crash upon receipt of specific frames on an interface without L2PT or dot1x configured
- Juniper Networks Junos OS
- Memory corruption
- CWE-241
- CVSS 7.4 High
Junos OS: Receipt of specific DHCPv6 packet may cause jdhcpd to crash and restart
- Juniper Networks Junos OS
- CWE-703
- CVSS 7.4 High
Junos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash and restart.
- Juniper Networks Junos OS
- CWE-703
- CVSS 5.5 Medium
Junos OS: MX Series: Executing CLI command repetitively may cause the system to run out of disk space
- Juniper Networks Junos OS
- Denial of service
- CVSS 6.5 Medium
Junos OS: EX4300-MP/EX4600/EX4650/QFX5K Series: Packet Forwarding Engine manager (FXPC) process crashes when deployed in a Virtual Chassis (VC) configuration
- Juniper Networks Junos OS
- CVSS 6.5 Medium
Junos OS: A specific BGP VPNv6 flowspec message causes routing protocol daemon (rpd) process to crash with a core.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 7.3 High
Junos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series: In a multi-tenant environment, a tenant host administrator may configure logical firewall isolation affecting…
- Juniper Networks Junos OS
- Broken access control
- CVSS 5.8 Medium
Junos OS: QFX5100-96S: DDoS protection does not work as expected.
- Juniper Networks Junos OS
- CWE-665
- CVSS 7.5 High
Junos OS: ACX500 Series, ACX4000 Series: Denial of Service due to FFEB crash while processing high rate of specific packets.
- Juniper Networks Junos OS
- Denial of service
- CWE-794