Junos OS: Multiple vulnerabilities in libxml2 (JSA10916)

According to its self-reported version number, the remote Juniper Junos device is affected by a Multiple vulnerabilities in libxml2: - Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.CVE-2016-4448 - Th...

PT-2019-1361

Name of the Vulnerable Software and Affected Versions Junos OS on EX2300 and EX3400 series versions 15.1X53 prior to 15.1X53-D590 Junos OS on EX2300 and EX3400 series versions 18.1 prior to 18.1R2-S2, 18.1R3 Junos OS on EX2300 and EX3400 series versions 18.2 prior to 18.2R2 Description The issue ...

PT-2019-1182

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 14.1X53-D47 on EX and QFX Virtual Chassis Platforms Juniper Networks Junos OS versions prior to 15.1R7-S3 on all Virtual Chassis Platforms Juniper Networks Junos OS versions prior to 15.1X53-D50 on E...

PT-2019-1177

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 17.2R1-S7, 17.2R3 Juniper Networks Junos OS versions prior to 17.3R3-S3 Juniper Networks Junos OS versions prior to 17.4R1-S4, 17.4R2 Juniper Networks Junos OS versions prior to 17.2X75-D110 Juniper...

PT-2019-1360

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 14.1X53-D47 Junos OS versions prior to 15.1R7 Junos OS versions prior to 15.1X53-D234 on QFX5200/QFX5110 series Junos OS versions prior to 15.1X53-D591 on EX2300/EX3400 series Junos OS versions prior to 16.1R7 Junos ...

PT-2019-1145

Name of the Vulnerable Software and Affected Versions: Junos OS on SRX Series versions prior to 12.1X46-D81 Junos OS on SRX Series versions prior to 12.3X48-D77 Junos OS on SRX Series versions prior to 15.1X49-D101 Junos OS on SRX Series versions prior to 15.1X49-D110 Description: The issue is...

PT-2019-1178

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.1X46-D77 Junos OS versions prior to 12.3X48-D77 Junos OS versions prior to 15.1F6-S10 Junos OS versions prior to 15.1R6-S6 Junos OS versions prior to 15.1R7 Junos OS versions prior to 15.1X49-D150 Junos OS version...

PT-2019-1183

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1F5 on vMX Series Description The issue is related to the predictability of sequential IP ID in the Junos operating system. This predictability can be exploited by a remote attacker to perform attacks that rely on...

PT-2019-1144

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 12.1X46-D77 Junos OS versions prior to 12.3R12-S10 Junos OS versions prior to 12.3X48-D70 Junos OS versions prior to 14.1X53-D47 Junos OS versions prior to 15.1R3 Junos OS versions prior to 15.1F3 Junos OS versions...

PT-2019-1359

Name of the Vulnerable Software and Affected Versions Junos OS on EX2300 and EX3400 series versions prior to 15.1X53-D590 Junos OS on EX2300 and EX3400 series versions 18.1 prior to 18.1R3 Junos OS on EX2300 and EX3400 series versions 18.2 prior to 18.2R2 Description The issue is related to a...

PT-2019-1143

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 16.1R7-S1 Juniper Networks Junos OS versions prior to 16.2R2-S7 Juniper Networks Junos OS versions prior to 17.1R2-S10 Juniper Networks Junos OS versions prior to 17.1R3 Juniper Networks Junos OS...

Juniper Junos OS Denial of Service Vulnerability (CNVD-2018-21801)

Juniper Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. A denial of service vulnerability exists in Juniper Junos OS, which arises from the program's failure to restrict the IP...

CVE-2018-0063

A vulnerability in the IP next-hop index database in Junos OS 17.3R3 may allow a flood of ARP requests, sent to the management interface, to exhaust the private Internal routing interfaces IRIs next-hop limit. Once the IRI next-hop database is full, no further next hops can be learned and existin...

CVE-2018-0058

Receipt of a specially crafted IPv6 exception packet may be able to trigger a kernel crash vmcore, causing the device to reboot. The issue is specific to the processing of Broadband Edge BBE client route processing on MX Series subscriber management platforms, introduced by the Tomcat Next...

CVE-2018-0060

An improper input validation weakness in the device control daemon process dcd of Juniper Networks Junos OS allows an attacker to cause a Denial of Service to the dcd process and interfaces and connected clients when the Junos device is requesting an IP address for itself. Junos devices are not...

CVE-2018-0062

A Denial of Service vulnerability in J-Web service may allow a remote unauthenticated user to cause Denial of Service which may prevent other users to authenticate or to perform J-Web operations. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D77 on SRX Series;...

CVE-2018-0061

A denial of service vulnerability in the telnetd service on Junos OS allows remote unauthenticated users to cause high CPU usage which may affect system performance. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D81 on SRX Series; 12.3 versions prior to...

CVE-2018-0063

A vulnerability in the IP next-hop index database in Junos OS 17.3R3 may allow a flood of ARP requests, sent to the management interface, to exhaust the private Internal routing interfaces IRIs next-hop limit. Once the IRI next-hop database is full, no further next hops can be learned and existin...

CVE-2018-0050

An error handling vulnerability in Routing Protocols Daemon RPD of Juniper Networks Junos OS allows an attacker to cause RPD to crash. Continued receipt of this malformed MPLS RSVP packet will cause a sustained Denial of Service condition. Affected releases are Juniper Networks Junos OS: 14.1...

CVE-2018-0056

If a duplicate MAC address is learned by two different interfaces on an MX Series device, the MAC address learning function correctly flaps between the interfaces. However, the Layer 2 Address Learning Daemon L2ALD daemon might crash when attempting to delete the duplicate MAC address when the...