Advisories · Technology
Juniper Networks Junos OS.
Every CVE that names Juniper Networks Junos OS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Junos OS: SRX Series and MX Series with SPC3: When IPsec VPN is configured iked will core when a specifically formatted payload is received
- Juniper Networks Junos OS
- Memory corruption
- CVSS 7.5 High
Junos OS: QFX10K Series: An ICCP flap will be observed due to excessive specific traffic
- Juniper Networks Junos OS
- Denial of service
- CVSS 7.5 High
Junos OS and Junos OS Evolved: PTX10008, PTX10016: When a specific SNMP MIB is queried the FPC will crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-129
- CVSS 7.5 High
Junos OS: QFX10K Series: PFE crash upon receipt of specific genuine packets when sFlow is enabled
- Juniper Networks Junos OS
- Memory corruption
- CVSS 5.3 Medium
Junos OS and Junos OS Evolved: RPD might crash when MPLS ping is performed on BGP LSPs
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.5 High
Junos OS: Receipt of crafted TCP packets destined to the device results in MBUF leak leading to a Denial of Service (DoS)
- Juniper Networks Junos OS
- Denial of service
- CVSS 6.5 Medium
Junos OS: In an MPLS scenario the processing of specific packets to the device causes a buffer leak and ultimately a loss of connectivity
- Juniper Networks Junos OS
- Denial of service
- CVSS 7.5 High
Junos OS: SRX Series and MX Series: Memory leak due to receipt of specially crafted SIP calls
- Juniper Networks Junos OS
- CWE-911
- CVSS 7.5 High
Junos OS and Junos OS Evolved: RPD crash upon receipt of BGP route with invalid next-hop
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-358
- CWE-754
- CVSS 7.5 High
Junos OS: ACX2K Series: Receipt of a high rate of specific traffic will lead to a Denial of Service (DoS)
- Juniper Networks Junos OS
- CWE-755
- CVSS 7.5 High
Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute in version 22.3R1
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-20
- CVSS 7.8 High
cSRX Series: Storing Passwords in a Recoverable Format and software permissions issues allows a local attacker to elevate privileges
- Juniper Networks Junos OS
- CWE-257
- CWE-275
- CVSS 6.5 Medium
Junos OS and Junos OS Evolved: An FPC crash might be seen due to an EVPN MAC entry moving from local to remote
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-664
- CVSS 6.5 Medium
Junos OS: MX Series: An FPC crash might be seen due to mac-moves within the same bridge domain
- Juniper Networks Junos OS
- CWE-664
- CVSS 7.5 High
Junos OS: PHP file inclusion vulnerability in J-Web
- Juniper Networks Junos OS
- CWE-829
- CVSS 4.3 Medium
Junos OS: Path traversal vulnerability in J-Web
- Juniper Networks Junos OS
- Path traversal
- CVSS 5.3 Medium
Junos OS: Unauthenticated XPath Injection vulnerability in J-Web
- Juniper Networks Junos OS
- Other injection
- CVSS 4.3 Medium
Junos OS: XPath Injection vulnerability in J-Web
- Juniper Networks Junos OS
- CWE-20
- CVSS 6.1 Medium
Junos OS: Cross-site Scripting (XSS) vulnerability in J-Web
- Juniper Networks Junos OS
- Cross-site scripting (XSS)
- CVSS 8.1 High
Junos OS: Vulnerability in J-Web may allow deserialization without authentication
- Juniper Networks Junos OS
- CWE-20
- CVSS 5.5 Medium
Junos OS and Junos OS Evolved: An rpd memory leak might be observed while running a specific cli command in a RIB sharding scenario
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
- CVSS 5.3 Medium
Junos OS and Junos OS Evolved: The rpd process will crash when a malformed incoming RESV message is processed
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 6.5 Medium
Junos OS: Peers not configured for TCP-AO can establish a BGP or LDP session even if authentication is configured locally
- Juniper Networks Junos OS
- Authentication bypass
- CVSS 7.5 High
Junos OS: SRX Series and MX Series: When specific valid SIP packets are received the PFE will crash
- Juniper Networks Junos OS
- Memory corruption
- CVSS 5.9 Medium
Junos OS: SRX Series: A flowd core will be observed when malformed GPRS traffic is processed
- Juniper Networks Junos OS
- CWE-754
- CVSS 5.5 Medium
Junos OS: EX2300 and EX3400 Series: One of more SFPs might become unavailable when the system is very busy
- Juniper Networks Junos OS
- CWE-1250
- CVSS 5.5 Medium
Junos OS and Junos OS Evolved: In an SR to LDP interworking scenario, with SRMS, when a specific low privileged command is issued on an ABR rpd will crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-690
- CVSS 7.5 High
SRX Series: If Unified Threat Management (UTM) Enhanced Content Filtering (CF) is enabled and specific traffic is processed the PFE will crash
- Juniper Networks Junos OS
- Memory corruption
- CVSS 7.5 High
SRX Series: If UTM Enhanced Content Filtering and AntiVirus are enabled, and specific traffic is processed the PFE will crash
- Juniper Networks Junos OS
- CWE-690
- CVSS 6.5 Medium
Junos OS and Junos OS Evolved: RPD crash upon receipt of specific OSPFv3 LSAs
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-20
- CVSS 7.5 High
Junos OS: IPv6 OAM SRv6 network-enabled devices are vulnerable to Denial of Service (DoS) due to RPD memory leak upon receipt of specific a IPv6 packet
- Juniper Networks Junos OS
- CWE-1287
- CVSS 6.5 Medium
Junos OS: EX4300-MP, EX4600, QFX5000 Series: In VxLAN scenarios specific packets processed cause a memory leak leading to a PFE crash
- Juniper Networks Junos OS
- Denial of service
- CVSS 5.9 Medium
Junos OS and Junos OS Evolved: In a BGP multipath scenario, when one of the contributing routes is flapping often and rapidly, rpd may crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Race condition
- CVSS 6.5 Medium
Junos OS and Junos OS Evolved: PPMD goes into infinite loop upon receipt of malformed OSPF TLV
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-703
- CVSS 6.5 Medium
Junos OS: QFX10000 Series: In IP/MPLS PHP node scenarios upon receipt of certain crafted packets multiple interfaces in LAG configurations may detach.
- Juniper Networks Junos OS
- CWE-1285
- CVSS 5.9 Medium
Junos OS and Junos OS Evolved: Due to a race condition the rpd process can crash upon receipt of a BGP update message containing flow spec route
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Race condition
- CVSS 5.9 Medium
Junos OS and Junos OS Evolved: RPD core upon receipt of a specific EVPN route by a BGP route reflector in an EVPN environment
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-241
- CVSS 7.5 High
Junos OS: SRX Series: Upon processing of a genuine packet the pkid process will crash during CMPv2 auto-re-enrollment
- Juniper Networks Junos OS
- CWE-754
- CVSS 5.9 Medium
Junos OS and Junos OS Evolved: An rpd crash can occur due to memory corruption caused by flapping BGP sessions
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
- CVSS 7.5 High
SRX5000 Series with SPC3, SRX4000 Series, and vSRX: When PowerMode IPsec is configured, the PFE will crash upon receipt of a malformed ESP packet
- Juniper Networks Junos OS
- CWE-1285
- CVSS 7.8 High
Junos OS: SRX and EX Series: Local privilege escalation flaw in "download" functionality
- Juniper Networks Junos OS
- CVSS 6.1 Medium
Junos OS: QFX10K Series: Denial of Service (DoS) upon receipt of crafted MLD packets on multi-homing ESI in VXLAN
- Juniper Networks Junos OS
- CWE-754
- CVSS 4.3 Medium
Junos OS: PTX Series and QFX10000 Series: 'Etherleak' memory disclosure in Ethernet padding data
- Juniper Networks Junos OS
- Information disclosure
- CVSS 6.5 Medium
Junos OS and Junos OS Evolved: /var/run/<pid>.env files are potentially not deleted during termination of a gRPC connection causing inode exhaustion
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CVSS 6.5 Medium
Junos OS and Junos OS Evolved: In an MPLS scenario upon receipt of a specific IPv6 packet an FPC will crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-20
- CVSS 5.9 Medium
Junos OS and Junos OS Evolved: Denial of Service (DoS) vulnerability in RPD upon receipt of specific BGP update
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-232
- CVSS 6.5 Medium
Junos OS: QFX5000 Series and MX Series: An l2alm crash leading to an FPC crash can be observed in VxLAN scenario
- Juniper Networks Junos OS
- Memory corruption
- CVSS 7.5 High
Junos OS: RIB and PFEs can get out of sync due to a memory leak caused by interface flaps or route churn
- Juniper Networks Junos OS
- Denial of service
- CVSS 7.5 High
Junos OS: MX Series with MPC11: In a GNF / node slicing scenario gathering AF interface statistics can lead to a kernel crash
- Juniper Networks Junos OS
- Memory corruption
- CVSS 7.5 High
Junos OS: SRX series: The PFE will crash when specific traffic is scanned by Enhanced Web Filtering safe-search
- Juniper Networks Junos OS
- Memory corruption
- CVSS 7.5 High
Junos OS: SRX Series: An FPC memory leak can occur in an APBR scenario
- Juniper Networks Junos OS
- Denial of service
- CVSS 5.3 Medium
Junos OS: MX Series and SRX Series: When receiving a specific SIP packets stale call table entries are created which eventually leads to a DoS for all SIP traffic
- Juniper Networks Junos OS
- Denial of service
- CVSS 6.5 Medium
Junos OS: EX4600 Series and QFX5000 Series: Receipt of specific traffic will lead to an fxpc process crash followed by an FPC reboot
- Juniper Networks Junos OS
- CWE-697
- CVSS 6.5 Medium
Junos OS: PTX Series: FPCs may restart unexpectedly upon receipt of specific MPLS packets with certain multi-unit interface configurations
- Juniper Networks Junos OS
- CWE-755
- CVSS 7.5 High
Junos OS: MX MS-MPC or MS-MIC, or SRX SPC crashes if it receives a SIP message with a specific contact header format
- Juniper Networks Junos OS
- Memory corruption
- CVSS 7.5 High
Junos OS and Junos OS Evolved: An rpd core will be observed with proxy BGP route-target filtering enabled and certain route add and delete event happening
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-672
- CVSS 6.5 Medium
Junos OS and Junos OS Evolved: The rpd CPU spikes to 100% after a malformed ISIS TLV has been received
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-754
- CVSS 7.5 High
Junos OS Evolved: Specific packets reaching the RE lead to a counter overflow and eventually a crash
- Juniper Networks Junos OS Evolved
- Juniper Networks Junos OS
- CWE-911
- CVSS 7.5 High
Junos OS Evolved: PTX series: An attacker sending a crafted GRE packet will cause the PFE to restart
- Juniper Networks Junos OS Evolved
- Juniper Networks Junos OS
- CWE-754
- CVSS 5.5 Medium
Junos OS and Junos OS Evolved: In a BGP rib-sharding scenario when a certain CLI command is executed the rpd process might crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-241