Advisories · Technology

Juniper Networks Junos OS.

Every CVE that names Juniper Networks Junos OS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-22191 CVE record

CVSS 6.5 Medium

Junos OS: EX4300: PFE Denial of Service (DoS) upon receipt of a flood of specific ARP traffic
- Juniper Networks Junos OS
- CWE-410
Not analysed yet 14 Apr 2022
CVE-2022-22188 CVE record

CVSS 7.5 High

Junos OS: QFX5100/QFX5110/QFX5120/QFX5200/QFX5210/EX4600/EX4650 Series: When storm control profiling is enabled and a device is under an active storm, a Heap-based Buffer Overflow in the PFE will cau…
- Juniper Networks Junos OS
- Memory corruption
- Denial of service
Not analysed yet 14 Apr 2022
CVE-2022-22186 CVE record

CVSS 7.2 High

Junos OS: EX4650 Series: Certain traffic received by the Junos OS device on the management interface may be forwarded to egress interfaces instead of discarded
- Juniper Networks Junos OS
- CWE-665
Not analysed yet 14 Apr 2022
CVE-2022-22185 CVE record

CVSS 7.5 High

Junos OS: SRX Series: Denial of service vulnerability in flowd daemon upon receipt of a specific fragmented packet
- Juniper Networks Junos OS
- CWE-754
Not analysed yet 14 Apr 2022
CVE-2022-22183 CVE record

CVSS 7.5 High

Junos OS Evolved: A remote attacker may cause a CPU Denial of Service by sending genuine traffic to a device on a specific IPv4 port.
- Juniper Networks Junos OS Evolved
- Juniper Networks Junos OS
- Information disclosure
- Broken access control
Not analysed yet 14 Apr 2022
CVE-2022-22182 CVE record

CVSS 8.8 High

Junos OS: A XSS vulnerability allows an attacker to execute commands on a target J-Web session
- Juniper Networks Junos OS
- Cross-site scripting (XSS)
Not analysed yet 14 Apr 2022
CVE-2022-22181 CVE record

CVSS 8.0 High

Junos OS: J-Web can be compromised through reflected XSS attacks
- Juniper Networks Junos OS
- Cross-site scripting (XSS)
Not analysed yet 14 Apr 2022
CVE-2022-22180 CVE record

CVSS 7.5 High

Junos OS: EX2300 Series, EX2300-MP Series, EX3400 Series: A slow memory leak due to processing of specific IPv6 packets
- Juniper Networks Junos OS
- CWE-754
Not analysed yet 19 Jan 2022
CVE-2022-22179 CVE record

CVSS 6.5 Medium

Junos OS: jdhcpd crashes upon receiving a specific DHCP packet
- Juniper Networks Junos OS
Not analysed yet 19 Jan 2022
CVE-2022-22178 CVE record

CVSS 7.5 High

Junos OS: MX and SRX series: Flowd core observed if the SIP ALG is enabled and a specific Session Initiation Protocol (SIP) packet is received
- Juniper Networks Junos OS
- Memory corruption
Not analysed yet 19 Jan 2022
CVE-2022-22177 CVE record

CVSS 5.3 Medium

Junos OS and Junos OS Evolved: After receiving a specific number of crafted packets snmpd will segmentation fault (SIGSEGV) requiring a manual restart.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
Not analysed yet 19 Jan 2022
CVE-2022-22176 CVE record

CVSS 7.4 High

Junos OS: In a scenario with dhcp-security and option-82 configured jdhcpd crashes upon receipt of a malformed DHCP packet
- Juniper Networks Junos OS
- CWE-1286
Not analysed yet 19 Jan 2022
CVE-2022-22175 CVE record

CVSS 7.5 High

Junos OS: MX Series and SRX Series: The flowd daemon will crash if the SIP ALG is enabled and specific SIP messages are processed
- Juniper Networks Junos OS
- CWE-667
Not analysed yet 19 Jan 2022
CVE-2022-22174 CVE record

CVSS 7.5 High

Junos OS: QFX5000 Series, EX4600: Device may run out of memory, causing traffic loss, upon receipt of specific IPv6 packets
- Juniper Networks Junos OS
- Denial of service
- CWE-755
Not analysed yet 19 Jan 2022
CVE-2022-22173 CVE record

CVSS 7.5 High

Junos OS: CRL failing to download causes a memory leak and ultimately a DoS
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 19 Jan 2022
CVE-2022-22172 CVE record

CVSS 6.5 Medium

Junos OS and Junos OS Evolved: An l2cpd memory leak can occur when specific LLDP packets are received leading to a DoS
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
Not analysed yet 19 Jan 2022
CVE-2022-22171 CVE record

CVSS 7.5 High

Junos OS: Specific packets over VXLAN cause FPC reset
- Juniper Networks Junos OS
- CWE-754
Not analysed yet 19 Jan 2022
CVE-2022-22170 CVE record

CVSS 7.5 High

Junos OS: Specific packets over VXLAN cause FPC memory leak and ultimately reset
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 19 Jan 2022
CVE-2022-22169 CVE record

CVSS 5.9 Medium

Junos OS and Junos OS Evolved: OSPFv3 session might go into INIT state upon receipt of multiple crafted packets from a trusted neighbor device.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-665
Not analysed yet 19 Jan 2022
CVE-2022-22168 CVE record

CVSS 6.5 Medium

Junos OS: vMX and MX150: Specific packets might cause a memory leak and eventually an FPC reboot
- Juniper Networks Junos OS
- Denial of service
- CWE-1287
Not analysed yet 19 Jan 2022
CVE-2022-22167 CVE record

CVSS 7.2 High

Junos OS: SRX Series: If no-syn-check is enabled, traffic classified as UNKNOWN gets permitted by pre-id-default-policy
- Juniper Networks Junos OS
- Broken access control
Not analysed yet 19 Jan 2022
CVE-2022-22166 CVE record

CVSS 6.5 Medium

Junos OS: An rpd core will occur if BGP update tracing is configured and an update containing a malformed BGP SR-TE policy tunnel attribute is received
- Juniper Networks Junos OS
- CWE-1284
Not analysed yet 19 Jan 2022
CVE-2022-22163 CVE record

CVSS 7.4 High

Junos OS: jdhcpd crashes upon receipt of a specific DHCPv6 packet
- Juniper Networks Junos OS
- CWE-20
Not analysed yet 19 Jan 2022
CVE-2022-22162 CVE record

CVSS 7.3 High

Junos OS: A low privileged user can elevate their privileges to the ones of the highest privileged j-web user logged in
- Juniper Networks Junos OS
- Information disclosure
Not analysed yet 19 Jan 2022
CVE-2022-22161 CVE record

CVSS 7.5 High

Junos OS: MX104 might become unresponsive if the out-of-band management port receives a flood of traffic
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 19 Jan 2022
CVE-2022-22160 CVE record

CVSS 6.5 Medium

Junos OS: MX Series: The bbe-smgd process crashes if an unsupported configuration exists and a PPPoE client sends a specific message
- Juniper Networks Junos OS
- CWE-391
Not analysed yet 19 Jan 2022
CVE-2022-22159 CVE record

CVSS 7.5 High

Junos OS: An attacker sending crafted packets can cause a traffic and CPU Denial of Service (DoS).
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
Not analysed yet 19 Jan 2022
CVE-2022-22157 CVE record

CVSS 7.2 High

Junos OS: SRX Series: Traffic classification vulnerability when 'no-syn-check' is enabled
- Juniper Networks Junos OS
- Broken access control
Not analysed yet 19 Jan 2022
CVE-2022-22156 CVE record

CVSS 6.5 Medium

Junos OS: Certificate validation is skipped when fetching system scripts from a HTTPS URL
- Juniper Networks Junos OS
- Weak cryptography or TLS
- CWE-300
Not analysed yet 19 Jan 2022
CVE-2022-22155 CVE record

CVSS 6.5 Medium

Junos OS: ACX5448: FPC memory leak due to IPv6 neighbor flaps
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 19 Jan 2022
CVE-2022-22154 CVE record

CVSS 6.8 Medium

Junos Fusion: A Satellite Device can be controlled by rewiring it to a foreign AD causing a DoS
- Juniper Networks Junos OS
- CWE-642
Not analysed yet 19 Jan 2022
CVE-2022-22153 CVE record

CVSS 7.5 High

SRX Series and MX Series with SPC3: A high percentage of fragments might lead to high latency or packet drops
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 19 Jan 2022
CVE-2021-31386 CVE record

CVSS 5.3 Medium

Junos OS: When using J-Web with HTTP an attacker may retrieve encryption keys via Person-in-the-Middle attacks.
- Juniper Networks Junos OS
- Weak cryptography or TLS
- CWE-300
Not analysed yet 19 Oct 2021
CVE-2021-31385 CVE record

CVSS 8.8 High

Junos OS: J-Web: A path traversal vulnerability allows an authenticated attacker to elevate their privileges to root
- Juniper Networks Junos OS
- Path traversal
Not analysed yet 19 Oct 2021
CVE-2021-31384 CVE record

CVSS 7.2 High

Junos OS: SRX Series: Under a specific device configuration an attacker can access the devices J-Web management services from any interface, regardless of security settings protecting the service
- Juniper Networks Junos OS
- Broken access control
- CWE-551
Not analysed yet 19 Oct 2021
CVE-2021-31383 CVE record

CVSS 7.5 High

Junos OS and Junos OS Evolved: In Point to MultiPoint (P2MP) scenarios receipt of various crafted packets causes RPD to core.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
Not analysed yet 19 Oct 2021
CVE-2021-31382 CVE record

CVSS 6.5 Medium

Junos OS: PTX1000 System, PTX10002-60C System: After upgrading, configured firewall filters may be applied on incorrect interfaces
- Juniper Networks Junos OS
- Race condition
Not analysed yet 19 Oct 2021
CVE-2021-31379 CVE record

CVSS 7.5 High

Junos OS: MX Series: MPC 7/8/9/10/11 cards with MAP-E: PFE halts when an attacker sends malformed IPv4 or IPv6 traffic inside the MAP-E tunnel.
- Juniper Networks Junos OS
- CWE-696
Not analysed yet 19 Oct 2021
CVE-2021-31378 CVE record

CVSS 6.8 Medium

Junos OS: An attacker sending spoofed RADIUS messages to a Junos OS device configured for broadband services may cause broadband subscribers to remain stuck in a "Terminating" state.
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 19 Oct 2021
CVE-2021-31377 CVE record

CVSS 5.5 Medium

Junos OS: A local authenticated attacker can cause RPD to core
- Juniper Networks Junos OS
- Broken access control
Not analysed yet 19 Oct 2021
CVE-2021-31376 CVE record

CVSS 7.5 High

Junos OS: ACX Series: Packet Forwarding Engine manager (FXPC) process crashes when processing DHCPv6 packets
- Juniper Networks Junos OS
- CWE-20
Not analysed yet 19 Oct 2021
CVE-2021-31375 CVE record

CVSS 7.2 High

Junos OS: Receipt of a specific BGP update may cause RPKI policy-checks to be bypassed
- Juniper Networks Junos OS
- CWE-20
- CWE-358
Not analysed yet 19 Oct 2021
CVE-2021-31374 CVE record

CVSS 7.5 High

Junos OS and Junos OS Evolved: RPD crash while processing a specially crafted BGP UPDATE or KEEPALIVE message.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
Not analysed yet 19 Oct 2021
CVE-2021-31373 CVE record

CVSS 8.0 High

Junos OS: SRX Series: Persistent XSS vulnerability in J-Web
- Juniper Networks Junos OS
- Cross-site scripting (XSS)
- CWE-20
Not analysed yet 19 Oct 2021
CVE-2021-31372 CVE record

CVSS 8.8 High

Junos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.
- Juniper Networks Junos OS
- CWE-20
Not analysed yet 19 Oct 2021
CVE-2021-31371 CVE record

CVSS 5.3 Medium

Junos OS: QFX5000 Series: Traffic from the network internal to the device (128.0.0.0) may be forwarded to egress interfaces.
- Juniper Networks Junos OS
- Information disclosure
Not analysed yet 19 Oct 2021
CVE-2021-31370 CVE record

CVSS 6.5 Medium

Junos OS: QFX5000 Series and EX4600 Series: Control traffic might be dropped if a high rate of specific multicast traffic is received
- Juniper Networks Junos OS
- CWE-184
Not analysed yet 19 Oct 2021
CVE-2021-31369 CVE record

CVSS 5.3 Medium

Junos OS: MX Series: Traffic drops will be observed if MS-MPC/MS-PIC resources are consumed by certain traffic causing a partial DoS
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 19 Oct 2021
CVE-2021-31368 CVE record

CVSS 7.5 High

Junos OS: EX2300 Series, EX3400 Series, and ACX710 might become unresponsive if the out-of-band management port receives a flood of traffic
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 19 Oct 2021
CVE-2021-31367 CVE record

CVSS 6.5 Medium

Junos OS: PTX Series: An FPC heap memory leak will be triggered by certain Flowspec route operations which can lead to an FPC crash
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 19 Oct 2021
CVE-2021-31366 CVE record

CVSS 6.5 Medium

Junos OS: MX Series: In subscriber management / BBE configuration authd can crash if a subscriber with a specific username tries to login leading to a DoS
- Juniper Networks Junos OS
- CWE-252
Not analysed yet 19 Oct 2021
CVE-2021-31365 CVE record

CVSS 6.5 Medium

Junos OS: EX2300, EX3400 and EX4300 Series: An Aggregated Ethernet (AE) interface will go down due to a stream of specific layer 2 frames
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 19 Oct 2021
CVE-2021-31364 CVE record

CVSS 5.9 Medium

Junos OS: SRX Series: The flowd process will crash if log session-close is configured and specific traffic is received
- Juniper Networks Junos OS
- Race condition
- CWE-754
Not analysed yet 19 Oct 2021
CVE-2021-31363 CVE record

CVSS 6.5 Medium

Junos OS and Junos OS Evolved: Receipt of a specific LDP message will cause a Denial of Service
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
Not analysed yet 19 Oct 2021
CVE-2021-31362 CVE record

CVSS 6.5 Medium

Junos OS and Junos OS Evolved: An IS-IS adjacency might be taken down if a bad hello PDU is received for an existing adjacency causing a DoS
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-693
Not analysed yet 19 Oct 2021
CVE-2021-31361 CVE record

CVSS 5.3 Medium

Junos OS: QFX Series and PTX Series: FPC resource usage increases when certain packets are processed which are being VXLAN encapsulated
- Juniper Networks Junos OS
- CWE-754
- CWE-755
Not analysed yet 19 Oct 2021
CVE-2021-31360 CVE record

CVSS 7.1 High

Junos OS and Junos OS Evolved: Denial of Service vulnerability in local file processing
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Privilege escalation
- CWE-20
Not analysed yet 19 Oct 2021
CVE-2021-31359 CVE record

CVSS 7.8 High

Junos OS and Junos OS Evolved: Local Privilege Escalation vulnerability
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- Privilege escalation
Not analysed yet 19 Oct 2021
CVE-2021-31355 CVE record

CVSS 8.0 High

Junos OS: Stored Cross-Site Scripting (XSS) vulnerability in captive portal
- Juniper Networks Junos OS
- Cross-site scripting (XSS)
Not analysed yet 19 Oct 2021
CVE-2021-31354 CVE record

CVSS 7.1 High

Junos OS and Junos OS Evolved: A vulnerability in the Juniper Agile License Client may allow an attacker to perform Remote Code Execution (RCE)
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
Not analysed yet 19 Oct 2021