PT-2018-1754

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 15.1X49-D30 on vSRX. Description An authentication bypass issue in the initial boot sequence of Juniper Networks Junos OS on vSRX Series may allow an attacker to gain full control of the system witho...

PT-2018-1760

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.1X46-D77 Junos OS versions prior to 12.3R12-S10 Junos OS versions prior to 12.3X48-D70 Junos OS versions prior to 15.1R4-S9 Junos OS versions prior to 15.1R6-S6 Junos OS versions prior to 15.1R7 Junos OS version...

CVE-2018-0049: NULL Pointer Dereference

A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to cause the Junos OS kernel to crash. Continued receipt of this specifically crafted malicious MPLS packet will cause a sustained Denial of Service condition. This issue require it to be received on an...

PT-2018-1749

Name of the Vulnerable Software and Affected Versions Junos OS versions 17.2R1 through 17.2R1-S7, 17.2R2-S6, 17.2R3 Junos OS versions 17.2X75 prior to 17.2X75-D102, 17.2X75-D110 Junos OS versions 17.3 prior to 17.3R2-S4, 17.3R3 Junos OS versions 17.4 prior to 17.4R1-S5, 17.4R2 Junos OS versions...

CVE-2018-0051: Improper Input Validation

A Denial of Service vulnerability in the SIP application layer gateway ALG component of Junos OS based platforms allows an attacker to crash MS-PIC, MS-MIC, MS-MPC, MS-DPC or SRX flow daemon flowd process. This issue affects Junos OS devices with NAT or stateful firewall configuration in...

PT-2018-1759

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 18.1R4 on NFX Series Description The issue is related to an insecure SSHD configuration in Juniper Device Manager JDM and the host OS on Juniper NFX Series devices, which may allow remote...

PT-2018-8592

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 12.1X46-D40 on SRX Series Juniper Networks Junos OS versions prior to 12.3X48-D20 on SRX Series Juniper Networks Junos OS versions prior to 14.1X53-D40 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX430...

PT-2018-1750

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 12.1X46-D76 through 12.1X46-D80 Juniper Networks Junos OS version 12.3R12-S10 Juniper Networks Junos OS versions 12.3X48-D66 through 12.3X48-D74 Juniper Networks Junos OS version 14.1X53-D47 Juniper Networks...

CVE-2018-0057: Undefined Security Weakness

On MX Series and M120/M320 platforms configured in a Broadband Edge BBE environment, subscribers logging in with DHCP Option 50 to request a specific IP address will be assigned the requested IP address, even if there is a static MAC to IP address binding in the access profile. In the problem...

CVE-2018-0061: Uncontrolled Resource Consumption

A denial of service vulnerability in the telnetd service on Junos OS allows remote unauthenticated users to cause high CPU usage which may affect system performance. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D81 on SRX Series; 12.3 versions prior to...

PT-2018-8587

Name of the Vulnerable Software and Affected Versions: Junos OS versions 15.1 through 18.2X75-D20, specifically: Junos OS versions 15.1 prior to 15.1R7-S2 Junos OS versions 15.1X49 prior to 15.1X49-D160 Junos OS versions 15.1X53 prior to 15.1X53-D235, 15.1X53-D495 Junos OS versions 16.1 prior to...

CVE-2018-0063: Uncontrolled Resource Consumption

A vulnerability in the IP next-hop index database in Junos OS 17.3R3 may allow a flood of ARP requests, sent to the management interface, to exhaust the private Internal routing interfaces IRIs next-hop limit. Once the IRI next-hop database is full, no further next hops can be learned and existin...

PT-2018-8595

Name of the Vulnerable Software and Affected Versions: Junos OS version 17.3R3 Description: A flood of ARP requests sent to the management interface may exhaust the private Internal routing interfaces IRIs next-hop limit, leading to a sustained denial of service DoS condition. This issue is...

CVE-2018-0053: Improper Authentication

An authentication bypass vulnerability in the initial boot sequence of Juniper Networks Junos OS on vSRX Series may allow an attacker to gain full control of the system without authentication when the system is initially booted up. Affected releases are Juniper Networks Junos OS: 15.1X49 versions...

Juniper Networks Releases Security Updates

Juniper Networks has released security updates to address vulnerabilities affecting multiple Junos OS versions. An attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC encourages users and administrators to review the Juniper Security Advisories websit...

Junos OS: QFX5200 and QFX10002: Unintended ONIE partition was shipped with certain Junos OS .bin and .iso images

QFX5200 and QFX10002 devices that have been shipped with Junos OS 15.1X53-D21, 15.1X53-D30, 15.1X53-D31, 15.1X53-D32, 15.1X53-D33 and 15.1X53-D60 or have been upgraded to these releases using the .bin or .iso images may contain an unintended additional Open Network Install Environment ONIE...

Design/Logic Flaw

Receipt of specially crafted UDP/IP packets over MPLS may be able to bypass a stateless firewall filter. The crafted UDP packets must be encapsulated and meet a very specific packet format to be classified in a way that bypasses IP firewall filter rules. The packets themselves do not cause a...

Privilege escalation

An Improper Privilege Management vulnerability in a shell session of Juniper Networks Junos OS allows an authenticated unprivileged attacker to gain full control of the system. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D45 on SRX Series; 12.3X48 versions...

Remote code execution

Junos OS routing protocol daemon RPD process may crash and restart or may lead to remote code execution while processing specific BGP NOTIFICATION messages. By continuously sending crafted BGP NOTIFICATION messages, an attacker can repeatedly crash the RPD process causing a sustained Denial of...

Design/Logic Flaw

The receipt of a crafted BGP UPDATE can lead to a routing process daemon RPD crash and restart. Repeated receipt of the same crafted BGP UPDATE can result in an extended denial of service condition for the device. This issue only affects the specific versions of Junos OS listed within this...