Advisories · Technology

Juniper Networks Junos OS.

Every CVE that names Juniper Networks Junos OS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-44181 CVE record

CVSS 7.5 High

Junos OS: QFX5k: l2 loop in the overlay impacts the stability in a EVPN/VXLAN environment
- Juniper Networks Junos OS
Not analysed yet 12 Oct 2023
CVE-2023-44178 CVE record

CVSS 5.5 Medium

Junos OS : Stack overflow vulnerability in CLI command processing
- Juniper Networks Junos OS
- Memory corruption
Not analysed yet 12 Oct 2023
CVE-2023-44176 CVE record

CVSS 5.5 Medium

Junos OS : Stack overflow vulnerability in CLI command processing
- Juniper Networks Junos OS
- Memory corruption
Not analysed yet 12 Oct 2023
CVE-2023-44177 CVE record

CVSS 5.5 Medium

Junos OS and Junos OS Evolved: Stack overflow vulnerability in CLI command processing
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
Not analysed yet 12 Oct 2023
CVE-2023-44175 CVE record

CVSS 6.5 Medium

Junos OS and Junos OS Evolved: Receipt of a specific genuine PIM packet causes RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
Not analysed yet 12 Oct 2023
CVE-2023-36843 CVE record

CVSS 7.5 High

Junos OS: SRX Series: The PFE will crash on receiving malformed SSL traffic when Sky ATP is enabled
- Juniper Networks Junos OS
- CWE-168
Not analysed yet 12 Oct 2023
CVE-2023-36841 CVE record

CVSS 7.5 High

Junos OS: MX Series: Receipt of malformed TCP traffic will cause a Denial of Service
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 12 Oct 2023
CVE-2023-36839 CVE record

CVSS 6.5 Medium

Junos OS and Junos OS Evolved: An l2cpd crash will occur when specific LLDP packets are received
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-1284
Not analysed yet 12 Oct 2023
CVE-2023-22392 CVE record

CVSS 6.5 Medium

Junos OS: PTX Series and QFX10000 Series: Received flow-routes which aren't installed as the hardware doesn't support them, lead to an FPC heap memory leak
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 12 Oct 2023
CVE-2023-44188 CVE record

CVSS 5.3 Medium

Junos OS: jkdsd crash due to multiple telemetry requests
- Juniper Networks Junos OS
- Race condition
Not analysed yet 11 Oct 2023
CVE-2023-44186 CVE record

CVSS 7.5 High

Junos OS and Junos OS Evolved: RPD crash when attempting to send a very long AS PATH to a non-4-byte-AS capable BGP neighbor
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-755
Not analysed yet 11 Oct 2023
CVE-2023-36851 CVE record

CVSS 5.3 MediumCritical · KEVKEV

Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files
- Juniper Networks Junos OS
- Authentication bypass
Not analysed yet 26 Sept 2023
CVE-2023-36846 CVE record

CVSS 5.3 MediumCritical · KEVKEV

Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files
- Juniper Networks Junos OS
- Authentication bypass
Not analysed yet 17 Aug 2023
CVE-2023-36845 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
- Juniper Networks Junos OS
- CWE-473
Not analysed yet 17 Aug 2023
CVE-2023-36844 CVE record

CVSS 5.3 MediumCritical · KEVKEV

Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables
- Juniper Networks Junos OS
- CWE-473
Not analysed yet 17 Aug 2023
CVE-2023-36847 CVE record

CVSS 5.3 MediumCritical · KEVKEV

Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files
- Juniper Networks Junos OS
- Authentication bypass
Not analysed yet 17 Aug 2023
CVE-2023-36850 CVE record

CVSS 6.5 Medium

Junos OS: MX Series: An MPC will crash upon receipt of a malformed CFM packet.
- Juniper Networks Junos OS
- CWE-1285
Not analysed yet 14 Jul 2023
CVE-2023-36849 CVE record

CVSS 6.5 Medium

Junos OS and Junos OS Evolved: The l2cpd will crash when a malformed LLDP packet is received
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-703
Not analysed yet 14 Jul 2023
CVE-2023-36848 CVE record

CVSS 6.5 Medium

Junos OS: MX Series: The FPC will crash on receiving a malformed CFM packet
- Juniper Networks Junos OS
- CWE-232
Not analysed yet 14 Jul 2023
CVE-2023-36840 CVE record

CVSS 5.5 Medium

Junos OS and Junos OS Evolved: An rpd crash occurs when a specific L2VPN command is run
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
Not analysed yet 14 Jul 2023
CVE-2023-36836 CVE record

CVSS 4.7 Medium

Junos OS and Junos OS Evolved: In a MoFRR scenario an rpd core may be observed when a low privileged CLI command is executed
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
Not analysed yet 14 Jul 2023
CVE-2023-36835 CVE record

CVSS 7.5 High

Junos OS: QFX10000 Series: All traffic will be dropped after a specific valid IP packet has been received which needs to be routed over a VXLAN tunnel
- Juniper Networks Junos OS
- CWE-754
Not analysed yet 14 Jul 2023
CVE-2023-36834 CVE record

CVSS 6.5 Medium

Junos OS: SRX 4600 and SRX 5000 Series: The receipt of specific genuine packets by SRXes configured for L2 transparency will cause a DoS
- Juniper Networks Junos OS
- CWE-372
Not analysed yet 14 Jul 2023
CVE-2023-28985 CVE record

CVSS 7.5 High

SRX Series and MX Series: An FPC core is observed when IDP is enabled on the device and a specific malformed SSL packet is received
- Juniper Networks Junos OS
- CWE-1286
Not analysed yet 14 Jul 2023
CVE-2023-36838 CVE record

CVSS 5.5 Medium

Junos OS: SRX Series: A flowd core occurs when running a low privileged CLI command
- Juniper Networks Junos OS
- Memory corruption
Not analysed yet 14 Jul 2023
CVE-2023-36832 CVE record

CVSS 7.5 High

Junos OS: MX Series: PFE crash upon receipt of specific packet destined to an AMS interface
- Juniper Networks Junos OS
- CWE-755
Not analysed yet 14 Jul 2023
CVE-2023-36831 CVE record

CVSS 7.5 High

Junos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is applied
- Juniper Networks Junos OS
- CWE-703
Not analysed yet 14 Jul 2023
CVE-2023-0026 CVE record

CVSS 7.5 High

2023-06: Out-of-Cycle Security Bulletin: Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-20
Not analysed yet 21 Jun 2023
CVE-2023-28984 CVE record

CVSS 5.3 Medium

Junos OS: QFX Series: The PFE may crash when a lot of MAC addresses are being learned and aged
- Juniper Networks Junos OS
- Race condition
- Memory corruption
Not analysed yet 17 Apr 2023
CVE-2023-28982 CVE record

CVSS 7.5 High

Junos OS and Junos OS Evolved: In a BGP rib sharding scenario when a route is frequently updated an rpd memory leak will occur
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
Not analysed yet 17 Apr 2023
CVE-2023-28981 CVE record

CVSS 6.5 Medium

Junos OS and Junos OS Evolved: If malformed IPv6 router advertisements are received, memory corruption will occur which causes an rpd crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-20
Not analysed yet 17 Apr 2023
CVE-2023-28980 CVE record

CVSS 5.5 Medium

Junos OS and Junos OS Evolved: In a BGP rib sharding scenario an rpd crash will happen shortly after a specific CLI command is issued
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
Not analysed yet 17 Apr 2023
CVE-2023-28979 CVE record

CVSS 4.7 Medium

Junos OS: In a 6PE scenario upon receipt of a specific IPv6 packet an integrity check fails
- Juniper Networks Junos OS
- CWE-754
Not analysed yet 17 Apr 2023
CVE-2023-28976 CVE record

CVSS 7.5 High

Junos OS: MX Series: If a specific traffic rate goes above the DDoS threshold it will lead to an FPC crash
- Juniper Networks Junos OS
- CWE-754
Not analysed yet 17 Apr 2023
CVE-2023-28975 CVE record

CVSS 4.6 Medium

Junos OS: The kernel will crash when certain USB devices are inserted
- Juniper Networks Junos OS
- CWE-394
Not analysed yet 17 Apr 2023
CVE-2023-28974 CVE record

CVSS 7.4 High

Junos OS: MX Series: In a BBE scenario upon receipt of specific malformed packets from subscribers the process bbe-smgd will crash
- Juniper Networks Junos OS
- CWE-754
Not analysed yet 17 Apr 2023
CVE-2023-28972 CVE record

CVSS 6.8 Medium

Junos OS: NFX Series: 'set system ports console insecure' allows root password recovery
- Juniper Networks Junos OS
- Path traversal
Not analysed yet 17 Apr 2023
CVE-2023-28970 CVE record

CVSS 6.5 Medium

Junos OS: JRR200: Kernel crash upon receipt of a specific packet
- Juniper Networks Junos OS
- CWE-703
Not analysed yet 17 Apr 2023
CVE-2023-28968 CVE record

CVSS 5.3 Medium

Junos OS: SRX Series: Policies that rely on JDPI-Decoder actions may fail open
- Juniper Networks Junos OS
- Juniper Networks AppID Service Sigpack
- CWE-1325
Not analysed yet 17 Apr 2023
CVE-2023-28967 CVE record

CVSS 7.5 High

Junos OS and Junos OS Evolved: An attacker sending genuine BGP packets causes an RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Memory corruption
Not analysed yet 17 Apr 2023
CVE-2023-28965 CVE record

CVSS 6.5 Medium

Junos OS: QFX10002: Failure of storm control feature may lead to Denial of Service
- Juniper Networks Junos OS
- CWE-703
Not analysed yet 17 Apr 2023
CVE-2023-28964 CVE record

CVSS 7.5 High

Junos OS and Junos OS Evolved: Malformed BGP flowspec update causes RPD crash
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-130
Not analysed yet 17 Apr 2023
CVE-2023-28963 CVE record

CVSS 5.3 Medium

Junos OS: User-controlled input vulnerability in J-Web
- Juniper Networks Junos OS
- Authentication bypass
Not analysed yet 17 Apr 2023
CVE-2023-28962 CVE record

CVSS 5.3 Medium

Junos OS: Unauthenticated access vulnerability in J-Web
- Juniper Networks Junos OS
- Authentication bypass
Not analysed yet 17 Apr 2023
CVE-2023-28961 CVE record

CVSS 5.8 Medium

Junos OS: ACX Series: IPv6 firewall filter is not installed in PFE when "from next-header ah" is used
- Juniper Networks Junos OS
- CWE-241
Not analysed yet 17 Apr 2023
CVE-2023-28959 CVE record

CVSS 6.5 Medium

Junos OS: QFX10002: PFE wedges and restarts upon receipt of specific malformed packets
- Juniper Networks Junos OS
- CWE-703
Not analysed yet 17 Apr 2023
CVE-2023-1697 CVE record

CVSS 6.5 Medium

Junos OS: QFX10000 Series, PTX1000 Series: The dcpfe process will crash when a malformed ethernet frame is received
- Juniper Networks Junos OS
- CWE-230
Not analysed yet 17 Apr 2023
CVE-2023-22417 CVE record

CVSS 7.5 High

Junos OS: SRX Series: A memory leak might be observed in IPsec VPN scenario leading to an FPC crash
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 12 Jan 2023
CVE-2023-22416 CVE record

CVSS 7.5 High

Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if SIP ALG is enabled and a malformed SIP packet is received
- Juniper Networks Junos OS
- Memory corruption
Not analysed yet 12 Jan 2023
CVE-2023-22415 CVE record

CVSS 7.5 High

Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash when specific H.323 packets are received
- Juniper Networks Junos OS
- Memory corruption
Not analysed yet 12 Jan 2023
CVE-2023-22414 CVE record

CVSS 6.5 Medium

Junos OS: PTX Series and QFX10000 Series: An FPC memory leak is observed when specific EVPN VXLAN Multicast packets are processed
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 12 Jan 2023
CVE-2023-22413 CVE record

CVSS 7.5 High

Junos OS: MX Series: The Multiservices PIC Management Daemon (mspmand) will crash when an IPsec6 tunnel processes specific IPv4 packets
- Juniper Networks Junos OS
- CWE-703
Not analysed yet 12 Jan 2023
CVE-2023-22412 CVE record

CVSS 7.5 High

Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if the SIP ALG is enabled and specific SIP messages are processed
- Juniper Networks Junos OS
- CWE-667
Not analysed yet 12 Jan 2023
CVE-2023-22411 CVE record

CVSS 7.5 High

Junos OS: SRX Series: The flow processing daemon (flowd) will crash when Unified Policies are used with IPv6 and certain dynamic applications are rejected by the device
- Juniper Networks Junos OS
- Memory corruption
Not analysed yet 12 Jan 2023
CVE-2023-22410 CVE record

CVSS 7.5 High

Junos OS: MX Series with MPC10/MPC11: When Suspicious Control Flow Detection (scfd) is enabled and an attacker is sending specific traffic, this causes a memory leak.
- Juniper Networks Junos OS
- Denial of service
Not analysed yet 12 Jan 2023
CVE-2023-22409 CVE record

CVSS 5.5 Medium

Junos OS: SRX Series, MX Series with SPC3: When an inconsistent NAT configuration exists and a specific CLI command is issued the SPC will reboot
- Juniper Networks Junos OS
Not analysed yet 12 Jan 2023
CVE-2023-22408 CVE record

CVSS 7.5 High

Junos OS: SRX 5000 Series: Upon processing of a specific SIP packet an FPC can crash
- Juniper Networks Junos OS
- CWE-129
Not analysed yet 12 Jan 2023
CVE-2023-22407 CVE record

CVSS 6.5 Medium

Junos OS and Junos OS Evolved: An RPD crash can happen due to an MPLS TE tunnel configuration change on a directly connected router
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-459
Not analysed yet 12 Jan 2023
CVE-2023-22406 CVE record

CVSS 6.5 Medium

Junos OS and Junos OS Evolved: A memory leak which will ultimately lead to an rpd crash will be observed when a peer interface flaps continuously in a Segment Routing scenario using OSPF
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- Denial of service
Not analysed yet 12 Jan 2023
CVE-2023-22405 CVE record

CVSS 6.5 Medium

Junos OS: QFX5k Series, EX46xx Series: MAC limiting feature stops working after PFE restart or device reboot
- Juniper Networks Junos OS
- CWE-1250
Not analysed yet 12 Jan 2023