CVE-2021-0253: Improper Neutralization of Special Elements used in a Command

NFX Series devices using Juniper Networks Junos OS are susceptible to a local command execution vulnerability thereby allowing an attacker to elevate their privileges via the Junos Device Management Daemon JDMD process. This issue affects Juniper Networks Junos OS on NFX Series 17.2 version 17.2R...

CVE-2021-0237: Undefined Security Weakness

On Juniper Networks EX4300-MP Series, EX4600 Series, EX4650 Series, QFX5K Series deployed as a Virtual Chassis with a specific Layer 2 circuit configuration, Packet Forwarding Engine manager FXPC process may crash and restart upon receipt of specific layer 2 frames. Continued receipt and processi...

CVE-2021-0268: Improper Neutralization of CRLF Sequences in HTTP Headers

An Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Response Splitting' weakness in J-web of Juniper Networks Junos OS leads to buffer overflows, segment faults, or other impacts, which allows an attacker to modify the integrity of the device and exfiltration information from the...

PT-2021-12954

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on EX4300 versions prior to 17.3R3-S10 Juniper Networks Junos OS on EX4300 versions 17.4 prior to 17.4R3-S3 Juniper Networks Junos OS on EX4300 versions 18.1 prior to 18.1R3-S11 Juniper Networks Junos OS on EX4300...

CVE-2021-0235: Incorrect Default Permissions

On SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series devices using tenant services on Juniper Networks Junos OS, due to incorrect permission scheme assigned to tenant system administrators, a tenant system administrator may inadvertently send their network traffic to...

PT-2021-12967

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 17.2 through 17.2R3-S4 Juniper Networks Junos OS versions 17.3 through 17.3R3-S9 Juniper Networks Junos OS versions 17.4 through 17.4R2-S11, 17.4R3-S2 Juniper Networks Junos OS versions 18.1 through 18.1R3-S...

PT-2021-12960

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on SRX Series versions 15.1X49 through 15.1X49-D189 Juniper Networks Junos OS on SRX Series versions 17.4 through 17.4R2-S8 Juniper Networks Junos OS on SRX Series versions 17.4R3 through 18.1R3-S8 Juniper Networks...

PT-2021-12944

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on SRX and vSRX Series versions 19.3 prior to 19.3R2-S6, 19.3R3-S1 Juniper Networks Junos OS on SRX and vSRX Series versions 19.4 prior to 19.4R2-S4, 19.4R3 Juniper Networks Junos OS on SRX and vSRX Series versions...

CVE-2021-0255: Execution with Unnecessary Privileges

A local privilege escalation vulnerability in ethtraceroute of Juniper Networks Junos OS may allow a locally authenticated user with shell access to escalate privileges and write to the local filesystem as root. ethtraceroute is shipped with setuid permissions enabled and is owned by the root use...

CVE-2021-0264: Improper Check or Handling of Exceptional Conditions

A vulnerability in the processing of traffic matching a firewall filter containing a syslog action in Juniper Networks Junos OS on MX Series with MPC10/MPC11 cards installed, PTX10003 and PTX10008 Series devices, will cause the line card to crash and restart, creating a Denial of Service DoS...

CVE-2021-0238: Uncontrolled Resource Consumption

When a MX Series is configured as a Broadband Network Gateway BNG based on Layer 2 Tunneling Protocol L2TP, executing certain CLI command may cause the system to run out of disk space, excessive disk usage may cause other complications. An administrator can use the following CLI command to monito...

CVE-2021-0225: Improper Check for Unusual or Exceptional Conditions

An Improper Check for Unusual or Exceptional Conditions in Juniper Networks Junos OS Evolved may cause the stateless firewall filter configuration which uses the action 'policer' in certain combinations with other options to not take effect. An administrator can use the following CLI command to s...

CVE-2021-0236: Improper Check for Unusual or Exceptional Conditions

Due to an improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved the Routing Protocol Daemon RPD service, upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, crashes and restarts causing a Denial of...

CVE-2021-0234: Improper Initialization

Due to an improper Initialization vulnerability on Juniper Networks Junos OS QFX5100-96S devices with QFX 5e Series image installed, ddos-protection configuration changes will not take effect beyond the default DDoS Distributed Denial of Service settings when configured from the CLI. The DDoS...

CVE-2021-0257: Uncontrolled Resource Consumption

On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPCs Modular Port Concentrators where Integrated Routing and Bridging IRB interfaces are configured and mapped to a VPLS instance or a Bridge-Domain, certain Layer 2 network events at Customer Edge CE devices may cause memo...

CVE-2021-0227: Improper Restriction of Operations within the Bounds of a Memory Buffer

An improper restriction of operations within the bounds of a memory buffer vulnerability in Juniper Networks Junos OS J-Web on SRX Series devices allows an attacker to cause Denial of Service DoS by sending certain crafted HTTP packets. Continued receipt and processing of these packets will creat...

CVE-2021-0226: Improper Initialization

On Juniper Networks Junos OS Evolved devices, receipt of a specific IPv6 packet may cause an established IPv6 BGP session to terminate, creating a Denial of Service DoS condition. Continued receipt and processing of this packet will create a sustained Denial of Service DoS condition. This issue...

PT-2021-12957

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 18.3R1 through 18.3R2 on SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2 Juniper Networks Junos OS versions 18.4R1 through 18.4R1 on SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with...

PT-2021-12939

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions 19.1R1-EVO through 20.3R1-S1-EVO Juniper Networks Junos OS Evolved version 20.3R2-EVO Description: The issue is caused by an improper check for unusual or exceptional conditions, which may prevent th...

CVE-2021-0239: Improper Check for Unusual or Exceptional Conditions

In Juniper Networks Junos OS Evolved, receipt of a stream of specific genuine Layer 2 frames may cause the Advanced Forwarding Toolkit AFT manager process Evo-aftmand, responsible for handling Route, Class-of-Service CoS, Firewall operations within the packet forwarding engine PFE to crash and...