CVE-2021-0224: Allocation of Resources Without Limits or Throttling

A vulnerability in the handling of internal resources necessary to bring up a large number of Layer 2 broadband remote access subscriber BRAS nodes in Juniper Networks Junos OS can cause the Access Node Control Protocol daemon ANCPD to crash and restart, leading to a Denial of Service DoS...

PT-2021-12977

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 17.4R3-S3 Juniper Networks Junos OS 18.1 versions prior to 18.1R3-S12 Juniper Networks Junos OS 18.2 versions prior to 18.2R3-S6 Juniper Networks Junos OS 18.3 versions prior to 18.3R3-S4 Juniper...

CVE-2021-0246: Incorrect Default Permissions

On SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, devices using tenant services on Juniper Networks Junos OS, due to incorrect default permissions assigned to tenant system administrators a tenant system administrator may inadvertently send their network traffic to one or more...

CVE-2021-0270: Concurrent Execution using Shared Resource with Improper Synchronization

On PTX Series and QFX10k Series devices with the "inline-jflow" feature enabled, a use after free weakness in the Packet Forwarding Engine PFE microkernel architecture of Juniper Networks Junos OS may allow an attacker to cause a Denial of Service DoS condition whereby one or more Flexible PIC...

PT-2021-12943 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on SRX Series versions 17.1R3 through 17.3R3-S10 Juniper Networks Junos OS on SRX Series versions 17.4 through 17.4R3-S4 Juniper Networks Junos OS on SRX Series versions 18.2 through 18.2R3-S6 Juniper Networks Junos ...

PT-2021-12979

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 12.3R12-S17 Juniper Networks Junos OS versions prior to 15.1R7-S8 Description: A Double Free issue in the software forwarding interface daemon sfid process allows an adjacently-connected attacker to...

PT-2021-12959

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.1R1 on NFX Series Description: The issue allows an attacker to take over any instance of an NFX deployment through the use of hard-coded credentials in Juniper Networks Junos OS. This issue is on...

PT-2021-12941

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 17.3R3-S9 Junos OS versions prior to 17.4R2-S11 Junos OS versions prior to 17.4R3-S2 Junos OS versions prior to 18.2R3-S5 Junos OS versions prior to 18.3R2-S4 Junos OS versions prior to 18.3R3-S3 Junos OS versions...

PT-2021-12935

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 17.3 through 17.3R3-S10 Juniper Networks Junos OS versions 17.4 through 17.4R2-S11 Juniper Networks Junos OS versions 17.4R3 through 17.4R3-S3 Juniper Networks Junos OS versions 18.1 through 18.1R3-S11 Junip...

PT-2021-12942

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 16.1R1 through 17.3R3-S10 Juniper Networks Junos OS versions 17.4 through 17.4R2-S12 Juniper Networks Junos OS versions 18.1 through 18.1R3-S11 Juniper Networks Junos OS versions 18.2 through 18.2R2-S7 Junip...

PT-2021-12952

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 17.3R3-S11 Juniper Networks Junos OS versions prior to 17.4R3-S4 Juniper Networks Junos OS versions prior to 18.1R3-S12 Juniper Networks Junos OS versions prior to 18.2R3-S7 Juniper Networks Junos O...

PT-2021-12950

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 20.4R1-EVO Description: The issue is caused by the receipt of a specific stream of genuine Layer 2 frames, which may crash the Advanced Forwarding Toolkit AFT manager process, leading to a...

PT-2021-12963

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 17.2R1 through 18.3R3-S4 Juniper Networks Junos OS versions 18.4 through 18.4R2-S5 Juniper Networks Junos OS versions 18.4R3 through 18.4R3-S5 Juniper Networks Junos OS versions 19.1 through 19.1R1-S3 Junipe...

PT-2021-12968

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on QFX5K Series versions 17.3 through 17.3R3-S11 Juniper Networks Junos OS on QFX5K Series versions 17.4 through 17.4R3-S5 Juniper Networks Junos OS on QFX5K Series versions 18.1 through 18.1R3-S13 Juniper Networks...

CVE-2021-0231: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability in the Juniper Networks SRX and vSRX Series may allow an authenticated J-web user to read sensitive system files. This issue affects Juniper Networks Junos OS on SRX and vSRX Series: 19.3 versions prior to 19.3R2-S6, 19.3R3-S1; 19.4 versions prior to 19.4R2-S4,...

CVE-2021-0263: Undefined Security Weakness

A Data Processing vulnerability in the Multi-Service process multi-svcs on the FPC of Juniper Networks Junos OS on the PTX Series routers may lead to the process becoming unresponsive, ultimately affecting traffic forwarding, allowing an attacker to cause a Denial of Service DoS condition . The...

CVE-2021-0243: Improper Handling of Unexpected Data Type

Improper Handling of Unexpected Data in the firewall policer of Juniper Networks Junos OS on EX4300 switches allows matching traffic to exceed set policer limits, possibly leading to a limited Denial of Service DoS condition. When the firewall policer discard action fails on a Layer 2 port, it wi...

CVE-2021-0272: Missing Release of Memory after Effective Lifetime

A kernel memory leak in QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016 devices Flexible PIC Concentrators FPCs on Juniper Networks Junos OS allows an attacker to send genuine packets destined to the device to cause a Denial of Service DoS to the device. On QFX10002-32Q, QFX10002-60C...

CVE-2021-0260: Improper Authorization

An improper authorization vulnerability in the Simple Network Management Protocol daemon snmpd service of Juniper Networks Junos OS leads an unauthenticated attacker being able to perform SNMP read actions, an Exposure of System Data to an Unauthorized Control Sphere, or write actions to OIDs tha...

CVE-2021-0254: Incorrect Calculation of Buffer Size

A buffer size validation vulnerability in the overlayd service of Juniper Networks Junos OS may allow an unauthenticated remote attacker to send specially crafted packets to the device, triggering a partial Denial of Service DoS condition, or leading to remote code execution RCE. Continued receip...