138 matches found
CVE-2020-1670
CVE-2020-1670 affects Juniper Junos OS on EX4300 Series. A stream of specific IPv4 packets entering the IRB interface can cause Routing Engine high CPU load, potentially leading to network protocol operation issues and traffic interruption. The trigger is limited to IPv4 (IPv6 is not affected) an...
CVE-2020-1628
Juniper Networks Junos OS uses the 128.0.0.0/2 subnet for internal communications between the RE and PFEs. It was discovered that packets utilizing these IP addresses may egress an EX4300 switch, leaking configuration information such as heartbeats, kernel versions, etc. out to the Internet,...
CVE-2020-1628
Juniper Networks Junos OS uses the 128.0.0.0/2 subnet for internal communications between the RE and PFEs. It was discovered that packets utilizing these IP addresses may egress an EX4300 switch, leaking configuration information such as heartbeats, kernel versions, etc. out to the Internet,...
Information disclosure
Juniper Networks Junos OS uses the 128.0.0.0/2 subnet for internal communications between the RE and PFEs. It was discovered that packets utilizing these IP addresses may egress an EX4300 switch, leaking configuration information such as heartbeats, kernel versions, etc. out to the Internet,...
CVE-2020-1628
Juniper Junos OS on EX4300 is affected by an information exposure vulnerability (CVE-2020-1628) due to use of the 128.0.0.0/2 internal subnet for RE–PFE communications, which may cause packets to leak configuration details (e.g., heartbeats, kernel versions) to the Internet. Affected are multiple...
CVE-2020-1628 Junos OS: EX4300: Traffic from the network internal to the device (128.0.0.0) may be forwarded to egress interfaces
Juniper Networks Junos OS uses the 128.0.0.0/2 subnet for internal communications between the RE and PFEs. It was discovered that packets utilizing these IP addresses may egress an EX4300 switch, leaking configuration information such as heartbeats, kernel versions, etc. out to the Internet,...
CVE-2020-1604
On EX4300, EX4600, QFX3500, and QFX5100 Series, a vulnerability in the IP firewall filter component may cause the firewall filter evaluation of certain packets to fail. This issue only affects firewall filter evaluation of certain packets destined to the device Routing Engine RE. This issue does...
CVE-2020-1604
On EX4300, EX4600, QFX3500, and QFX5100 Series, a vulnerability in the IP firewall filter component may cause the firewall filter evaluation of certain packets to fail. This issue only affects firewall filter evaluation of certain packets destined to the device Routing Engine RE. This issue does...
CVE-2020-1604
CVE-2020-1604 affects Junos OS on EX4300/EX4600/QFX3500/QFX5100 series. The IP firewall filter component may fail to evaluate certain IPv4/IPv6 packets destined to the Routing Engine, but L2/L3 filter paths to hosts are unaffected. Affected releases include 14.1X53 before certain D revisions (QFX...
Juniper Junos CVE-2020-1604 Security Bypass Vulnerability
Description Juniper Junos is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. The following products are affected: Juniper Junos 14.1X53 versions prior to...
Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2019-22785)
Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS EX4300 Series. An attacker could exploit the vulnerability to...
Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2019-23261)
Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in the pfe-chassisd Chassis Manager CMLC daemon in Juniper Networks Junos OS EX4300 Series...
CVE-2019-0048
On EX4300 Series switches with TCAM optimization enabled, incoming multicast traffic matches an implicit loopback filter rule first, since it has high priority. This rule is meant for reserved multicast addresses 224.0.0.x, but incorrectly matches on 224.x.x.x. Due to this bug, when a firewall...
CVE-2019-0046
A vulnerability in the pfe-chassisd Chassis Manager CMLC daemon of Juniper Networks Junos OS allows an attacker to cause a Denial of Service DoS to the EX4300 when specific valid broadcast packets create a broadcast storm condition when received on the me0 interface of the EX4300 Series device. A...
CVE-2019-0048
On EX4300 Series switches with TCAM optimization enabled, incoming multicast traffic matches an implicit loopback filter rule first, since it has high priority. This rule is meant for reserved multicast addresses 224.0.0.x, but incorrectly matches on 224.x.x.x. Due to this bug, when a firewall...
Design/Logic Flaw
On EX4300 Series switches with TCAM optimization enabled, incoming multicast traffic matches an implicit loopback filter rule first, since it has high priority. This rule is meant for reserved multicast addresses 224.0.0.x, but incorrectly matches on 224.x.x.x. Due to this bug, when a firewall...
Design/Logic Flaw
A vulnerability in the pfe-chassisd Chassis Manager CMLC daemon of Juniper Networks Junos OS allows an attacker to cause a Denial of Service DoS to the EX4300 when specific valid broadcast packets create a broadcast storm condition when received on the me0 interface of the EX4300 Series device. A...
CVE-2019-0046 Junos OS: EX4300 Series: Denial of Service upon receipt of large number of specific valid packets on management interface.
A vulnerability in the pfe-chassisd Chassis Manager CMLC daemon of Juniper Networks Junos OS allows an attacker to cause a Denial of Service DoS to the EX4300 when specific valid broadcast packets create a broadcast storm condition when received on the me0 interface of the EX4300 Series device. A...
CVE-2019-0048 EX4300 Series: When a firewall filter is applied to a loopback interface, other firewall filters for multicast traffic may fail
On EX4300 Series switches with TCAM optimization enabled, incoming multicast traffic matches an implicit loopback filter rule first, since it has high priority. This rule is meant for reserved multicast addresses 224.0.0.x, but incorrectly matches on 224.x.x.x. Due to this bug, when a firewall...
CVE-2019-0046
Summary: CVE-2019-0046 affects Juniper Networks Junos OS on EX4300 Series, via the pfe-chassisd Chassis Manager (CMLC) daemon. The vulnerability allows an attacker to cause a Denial of Service by sending specific valid broadcast packets that trigger a broadcast storm on the me0 interface, requiri...