Filters
Juniper JUNOSJunos OS and Junos OS Evolved: Malformed BGP flowspec update causes RPD crash
7.5
First published (updated )
Juniper JUNOSJunos OS and Junos OS Evolved: An RPD crash can happen due to an MPLS TE tunnel configuration change on a directly connected router
6.5
First published (updated )
Juniper JUNOSJunos OS and Junos OS Evolved: An FPC crash might be seen due to an EVPN MAC entry moving from local to remote
6.5
First published (updated )
Juniper JUNOSJunos OS: EX2300 and EX3400 Series: One of more SFPs might become unavailable when the system is very busy
5.5
First published (updated )
Juniper JUNOSJunos OS: QFX10000 Series: In IP/MPLS PHP node scenarios upon receipt of certain crafted packets multiple interfaces in LAG configurations may detach.
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJunos OS and Junos OS Evolved: An rpd crash can occur due to memory corruption caused by flapping BGP sessions
5.9
First published (updated )
Juniper JUNOSJunos OS and Junos OS Evolved: Due to a race condition the rpd process can crash upon receipt of a BGP update message containing flow spec route
5.9
First published (updated )
Juniper JUNOSJunos OS: EX4300-MP, EX4600, QFX5000 Series: In VxLAN scenarios specific packets processed cause a memory leak leading to a PFE crash
6.5
First published (updated )
Juniper JUNOSJunos OS: PTX Series and QFX10000 Series: 'Etherleak' memory disclosure in Ethernet padding data
4.3
First published (updated )
Juniper JUNOSJunos OS and Junos OS Evolved: In an MPLS scenario upon receipt of a specific IPv6 packet an FPC will crash
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJunos OS: EX4300: PFE Denial of Service (DoS) upon receipt of a flood of specific ARP traffic
6.5
First published (updated )
Juniper JUNOSJunos OS: SRX Series: Denial of service vulnerability in flowd daemon upon receipt of a specific fragmented packet
7.5
First published (updated )
Juniper JUNOSJunos OS: A XSS vulnerability allows an attacker to execute commands on a target J-Web session
8.8
First published (updated )
Juniper JUNOSJunos OS: J-Web can be compromised through reflected XSS attacks
8
First published (updated )
Juniper JUNOSJunos OS: EX2300 Series, EX2300-MP Series, EX3400 Series: A slow memory leak due to processing of specific IPv6 packets
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJunos OS: jdhcpd crashes upon receiving a specific DHCP packet
6.5
First published (updated )
Juniper JUNOSJunos OS: QFX5000 Series, EX4600: Device may run out of memory, causing traffic loss, upon receipt of specific IPv6 packets
7.5
First published (updated )
Juniper JUNOSJunos OS: CRL failing to download causes a memory leak and ultimately a DoS
7.5
First published (updated )
Juniper JUNOSJunos OS and Junos OS Evolved: OSPFv3 session might go into INIT state upon receipt of multiple crafted packets from a trusted neighbor device.
5.9
First published (updated )
Juniper JUNOSJunos OS: MX104 might become unresponsive if the out-of-band management port receives a flood of traffic
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJunos OS: MX Series: The bbe-smgd process crashes if an unsupported configuration exists and a PPPoE client sends a specific message
6.5
First published (updated )
Juniper JUNOSJunos OS: SRX Series: Traffic classification vulnerability when 'no-syn-check' is enabled
9.3
First published (updated )
Juniper JUNOSJunos OS: Certificate validation is skipped when fetching system scripts from a HTTPS URL
7.4
First published (updated )
Juniper JUNOSJunos OS: ACX5448: FPC memory leak due to IPv6 neighbor flaps
6.5
First published (updated )
Juniper JUNOSJunos Fusion: A Satellite Device can be controlled by rewiring it to a foreign AD causing a DoS
6.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSSRX Series and MX Series with SPC3: A high percentage of fragments might lead to high latency or packet drops
7.5
First published (updated )
Juniper JUNOSJunos OS and Junos OS Evolved: After receiving a specific number of crafted packets snmpd will segmentation fault (SIGSEGV) requiring a manual restart.
7.5
First published (updated )
Juniper JUNOSJunos OS: SRX Series: If no-syn-check is enabled, traffic classified as UNKNOWN gets permitted by pre-id-default-policy
9.8
First published (updated )
Juniper JUNOSJunos OS: In a scenario with dhcp-security and option-82 configured jdhcpd crashes upon receipt of a malformed DHCP packet
7.4
First published (updated )
Juniper JUNOSJunos OS: jdhcpd crashes upon receipt of a specific DHCPv6 packet
7.4
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJunos OS: A low privileged user can elevate their privileges to the ones of the highest privileged j-web user logged in
7.8
First published (updated )
Juniper JUNOSJunos OS: When using J-Web with HTTP an attacker may retrieve encryption keys via Person-in-the-Middle attacks.
5.9
First published (updated )
Juniper JUNOSJunos OS: J-Web: A path traversal vulnerability allows an authenticated attacker to elevate their privileges to root
8.8
First published (updated )
Juniper JUNOSJunos OS: MX Series: MPC 7/8/9/10/11 cards with MAP-E: PFE halts when an attacker sends malformed IPv4 or IPv6 traffic inside the MAP-E tunnel.
7.5
First published (updated )
Juniper JUNOSJunos OS: An attacker sending spoofed RADIUS messages to a Junos OS device configured for broadband services may cause broadband subscribers to remain stuck in a "Terminating" state.
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJunos OS and Junos OS Evolved: RPD crash while processing a specially crafted BGP UPDATE or KEEPALIVE message.
7.5
First published (updated )
Juniper JUNOSJunos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.
First published (updated )
Juniper JUNOSJunos OS: QFX5000 Series and EX4600 Series: Control traffic might be dropped if a high rate of specific multicast traffic is received
6.5
First published (updated )
Juniper JUNOSJunos OS: EX2300, EX3400 and EX4300 Series: An Aggregated Ethernet (AE) interface will go down due to a stream of specific layer 2 frames
6.5
First published (updated )
Juniper JUNOSJunos OS: SRX Series: The flowd process will crash if log session-close is configured and specific traffic is received
5.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJunos OS: QFX Series and PTX Series: FPC resource usage increases when certain packets are processed which are being VXLAN encapsulated
5.3
First published (updated )
Juniper JUNOSJunos OS and Junos OS Evolved: Denial of Service vulnerability in local file processing
7.1
First published (updated )
Juniper JUNOSJunos OS: Stored Cross-Site Scripting (XSS) vulnerability in captive portal
8
First published (updated )
Juniper JUNOSJunos OS: EX2300 Series, EX3400 Series, and ACX710 might become unresponsive if the out-of-band management port receives a flood of traffic
7.8
First published (updated )
Juniper JUNOSJunos OS and Junos OS Evolved: Privilege escalation vulnerability in Juniper Extension Toolkit (JET)
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Juniper JUNOSJunos OS: Receipt of a specific BGP update may cause RPKI policy-checks to be bypassed
7.2
First published (updated )
Juniper JUNOSJunos OS: PTX1000 System, PTX10002-60C System: After upgrading, configured firewall filters may be applied on incorrect interfaces
First published (updated )
Juniper JUNOSJunos OS: PTX Series: An FPC heap memory leak will be triggered by certain Flowspec route operations which can lead to an FPC crash
6.5
First published (updated )
Juniper JUNOSJunos OS: SRX Series: Persistent XSS vulnerability in J-Web
8
First published (updated )
Juniper JUNOSJunos OS and Junos OS Evolved: An IS-IS adjacency might be taken down if a bad hello PDU is received for an existing adjacency causing a DoS
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.