CVE-2018-0055: Improper Input Validation

Receipt of a specially crafted DHCPv6 message destined to a Junos OS device configured as a DHCP server in a Broadband Edge BBE environment may result in a jdhcpd daemon crash. The daemon automatically restarts without intervention, but a continuous receipt of crafted DHCPv6 packets could leaded ...

CVE-2018-0045: Improper Input Validation

Receipt of a specific Draft-Rosen MVPN control packet may cause the routing protocol daemon RPD process to crash and restart or may lead to remote code execution. By continuously sending the same specific Draft-Rosen MVPN control packet, an attacker can repeatedly crash the RPD process causing a...

CVE-2018-0056: Improper Input Validation

If a duplicate MAC address is learned by two different interfaces on an MX Series device, the MAC address learning function correctly flaps between the interfaces. However, the Layer 2 Address Learning Daemon L2ALD daemon might crash when attempting to delete the duplicate MAC address when the...

CVE-2018-0058: Improper Input Validation

Receipt of a specially crafted IPv6 exception packet may be able to trigger a kernel crash vmcore, causing the device to reboot. The issue is specific to the processing of Broadband Edge BBE client route processing on MX Series subscriber management platforms, introduced by the Tomcat Next...

CVE-2018-0052: Improper Authentication

If RSH service is enabled on Junos OS and if the PAM authentication is disabled, a remote unauthenticated attacker can obtain root access to the device. RSH service is disabled by default on Junos. There is no documented CLI command to enable this service. However, an undocumented CLI command...

CVE-2018-0050: Improper Input Validation

An error handling vulnerability in Routing Protocols Daemon RPD of Juniper Networks Junos OS allows an attacker to cause RPD to crash. Continued receipt of this malformed MPLS RSVP packet will cause a sustained Denial of Service condition. Affected releases are Juniper Networks Junos OS: 14.1...

CVE-2018-0054: Uncontrolled Resource Consumption

On QFX5000 Series and EX4600 switches, a high rate of Ethernet pause frames or an ARP packet storm received on the management interface fxp0 can cause egress interface congestion, resulting in routing protocol packet drops, such as BGP, leading to peering flaps. The following log message may also...

CVE-2018-0044: Improper Authentication

An insecure SSHD configuration in Juniper Device Manager JDM and host OS on Juniper NFX Series devices may allow remote unauthenticated access if any of the passwords on the system are empty. The affected SSHD configuration has the PermitEmptyPasswords option set to "yes". Affected releases are...

CVE-2018-0048: Uncontrolled Resource Consumption

A vulnerability in the Routing Protocols Daemon RPD with Juniper Extension Toolkit JET support can allow a network based unauthenticated attacker to cause a severe memory exhaustion condition on the device. This can have an adverse impact on the system performance and availability. This issue onl...

CVE-2018-0062: Improper Input Validation

A Denial of Service vulnerability in J-Web service may allow a remote unauthenticated user to cause Denial of Service which may prevent other users to authenticate or to perform J-Web operations. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D77 on SRX Series;...

PT-2018-1751

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 14.1R8-S5 Junos OS versions prior to 14.1R9 Junos OS 14.1X53 versions prior to 14.1X53-D48 on QFX Switching Junos OS 14.1X53 versions prior to 14.1X53-D130 on QFabric System Junos OS 14.2 versions prior to 14.2R4...

PT-2018-8590

Name of the Vulnerable Software and Affected Versions: Junos OS versions 15.1 through 15.1R7-S1 Junos OS versions 15.1R8 on MX Series Junos OS versions 16.1 through 16.1R4-S10 Junos OS versions 16.1R7 through 16.1R7-S1 Junos OS versions 16.1R8 on MX Series Junos OS versions 16.2 through 16.2R2...

Juniper Networks Releases Security Updates

Juniper Networks has released security updates to address vulnerabilities affecting multiple Junos OS versions. An attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC encourages users and administrators to review the Juniper Security Advisories websit...

PT-2018-8589

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 15.1R7-S2, 15.1R8 Junos OS versions prior to 16.1R4-S12, 16.1R7-S2, 16.1R8 Junos OS versions prior to 16.2R2-S7, 16.2R3 Junos OS versions prior to 17.1R2-S9, 17.1R3 Junos OS versions prior to 17.2R1-S7, 17.2R2-S6,...

PT-2018-1753

Name of the Vulnerable Software and Affected Versions Junos OS versions 12.1X46 prior to 12.1X46-D77 Junos OS versions 12.3 prior to 12.3R12-S10 Junos OS versions 12.3X48 prior to 12.3X48-D75 Junos OS versions 14.1X53 prior to 14.1X53-D47 Junos OS versions 15.1 prior to 15.1R4-S9, 15.1R6-S6, 15.1...

PT-2018-1758

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.1X46-D77 on SRX Series Junos OS versions prior to 12.3R12-S10 Junos OS versions prior to 12.3X48-D75 on SRX Series Junos OS versions prior to 14.1X53-D47 on QFX/EX Series Junos OS versions prior to 14.1X53-D130 on...

PT-2018-8588

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 15.1R7-S1 on MX Series Junos OS versions prior to 16.1R4-S12 on MX Series Junos OS versions prior to 16.1R6-S6 on MX Series Junos OS versions prior to 16.2R2-S7 on MX Series Junos OS versions prior to 17.1R2-S9 on M...

PT-2018-8594

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 12.1X46-D77 Junos OS versions prior to 12.3R12-S10 Junos OS versions prior to 12.3X48-D60 Junos OS versions prior to 15.1R7 Junos OS version 15.1F6 Junos OS versions prior to 15.1X49-D120 Junos OS versions prior to...

CVE-2018-0043: Improper Input Validation

Receipt of a specific MPLS packet may cause the routing protocol daemon RPD process to crash and restart or may lead to remote code execution. By continuously sending specific MPLS packets, an attacker can repeatedly crash the RPD process causing a sustained Denial of Service. This issue affects...

PT-2018-8593

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 12.1X46-D81 on SRX Series Junos OS versions prior to 12.3R12-S11 Junos OS versions prior to 12.3X48-D80 on SRX Series Junos OS versions prior to 15.1R7 Junos OS versions prior to 15.1X49-D150 Junos OS versions prior...