Design/Logic Flaw

On Junos devices with the BGP graceful restart helper mode enabled or the BGP graceful restart mechanism enabled, a certain sequence of BGP session restart on a remote peer that has the graceful restart mechanism enabled may cause the local routing protocol daemon RPD process to crash and restart...

CVE-2019-0046

Summary: CVE-2019-0046 affects Juniper Networks Junos OS on EX4300 Series, via the pfe-chassisd Chassis Manager (CMLC) daemon. The vulnerability allows an attacker to cause a Denial of Service by sending specific valid broadcast packets that trigger a broadcast storm on the me0 interface, requiri...

CVE-2019-0048

CVE-2019-0048 affects Juniper Networks Junos OS on the EX4300 Series. Root cause: with TCAM optimization enabled, an implicit loopback filter rule (high priority) meant for 224.0.0.x incorrectly matches 224.x.x.x, causing multicast firewall behavior to break when a filter is applied on the loopba...

CVE-2019-0052 SRX Series: srxpfe process crash while JSF/UTM module parses specific HTTP packets

The srxpfe process may crash on SRX Series services gateways when the UTM module processes a specific fragmented HTTP packet. The packet is misinterpreted as a regular TCP packet which causes the processor to crash. This issue affects all SRX Series platforms that support URL-Filtering and have...

CVE-2019-0053

Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based buffer overflows, which can be exploited to bypass veriexec restrictions on Junos OS. A stack-based overflow is present in the handling of environment variables when connecting via t...

CVE-2019-0053

The CVE-2019-0053 entry concerns the inetutils Telnet client in Junos OS, where environment-variable handling is insufficiently validated, causing a stack-based buffer overflow. This vulnerability is local to the Telnet client used from the CLI or shell, with inbound Telnet services unaffected. A...

CVE-2019-0053 Junos OS: Insufficient validation of environment variables in telnet client may lead to stack-based buffer overflow

Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based buffer overflows, which can be exploited to bypass veriexec restrictions on Junos OS. A stack-based overflow is present in the handling of environment variables when connecting via t...

CVE-2019-0049 Junos OS: RPD process crashes when BGP peer restarts

On Junos devices with the BGP graceful restart helper mode enabled or the BGP graceful restart mechanism enabled, a certain sequence of BGP session restart on a remote peer that has the graceful restart mechanism enabled may cause the local routing protocol daemon RPD process to crash and restart...

CVE-2019-0053

Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based buffer overflows, which can be exploited to bypass veriexec restrictions on Junos OS. A stack-based overflow is present in the handling of environment variables when connecting via t...

CVE-2019-0048 EX4300 Series: When a firewall filter is applied to a loopback interface, other firewall filters for multicast traffic may fail

On EX4300 Series switches with TCAM optimization enabled, incoming multicast traffic matches an implicit loopback filter rule first, since it has high priority. This rule is meant for reserved multicast addresses 224.0.0.x, but incorrectly matches on 224.x.x.x. Due to this bug, when a firewall...

CVE-2019-0052

The CVE-2019-0052 issue affects Juniper Networks Junos OS on SRX Series gateways, where the srxpfe process crashes when the UTM/JSF module processes a specific fragmented HTTP packet. The packet is misinterpreted as a normal TCP packet, causing a processor crash. Affected releases cover multiple ...

CVE-2019-0046: Uncontrolled Resource Consumption

A vulnerability in the pfe-chassisd Chassis Manager CMLC daemon of Juniper Networks Junos OS allows an attacker to cause a Denial of Service DoS to the EX4300 when specific valid broadcast packets create a broadcast storm condition when received on the me0 interface of the EX4300 Series device. A...

CVE-2019-0053: Stack-based Buffer Overflow

Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based buffer overflows, which can be exploited to bypass veriexec restrictions on Junos OS. A stack-based overflow is present in the handling of environment variables when connecting via t...

CVE-2019-0048: Exposure of Sensitive Information to an Unauthorized Actor

On EX4300 Series switches with TCAM optimization enabled, incoming multicast traffic matches an implicit loopback filter rule first, since it has high priority. This rule is meant for reserved multicast addresses 224.0.0.x, but incorrectly matches on 224.x.x.x. Due to this bug, when a firewall...

CVE-2019-0049: Improper Resource Shutdown or Release

On Junos devices with the BGP graceful restart helper mode enabled or the BGP graceful restart mechanism enabled, a certain sequence of BGP session restart on a remote peer that has the graceful restart mechanism enabled may cause the local routing protocol daemon RPD process to crash and restart...

CVE-2019-0052: Improper Resource Shutdown or Release

The srxpfe process may crash on SRX Series services gateways when the UTM module processes a specific fragmented HTTP packet. The packet is misinterpreted as a regular TCP packet which causes the processor to crash. This issue affects all SRX Series platforms that support URL-Filtering and have...

PT-2019-2801

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 16.1R7-S3 Junos OS versions prior to 16.2R2-S9 Junos OS versions prior to 17.1R3 Junos OS versions prior to 17.2R3 Junos OS versions prior to 17.2X75-D105 Junos OS versions prior to 17.3R3-S2 Junos OS versions prior ...

PT-2019-2812

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 14.1X53-D51 Juniper Networks Junos OS versions prior to 17.1R3 Juniper Networks Junos OS versions prior to 17.2R3-S2 Juniper Networks Junos OS versions prior to 17.3R3-S3 Juniper Networks Junos OS...

PT-2019-2800

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.3X48-D85 Junos OS versions prior to 15.1X49-D181 Junos OS versions prior to 15.1X49-D190 Junos OS 17.3 versions Junos OS versions prior to 17.4R1-S8 Junos OS versions prior to 17.4R2-S5 Junos OS versions prior to...

PT-2019-2810

Name of the Vulnerable Software and Affected Versions Junos OS versions 16.1R1 through 16.1R7-S5 Junos OS versions prior to 17.1R3 Junos OS versions prior to 17.2R3 Junos OS versions prior to 17.3R3-S2 Junos OS versions prior to 17.4R2 Junos OS versions prior to 18.1R3 Junos OS versions prior to...