PT-2018-8577

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 15.1F6-S10 Junos OS versions prior to 15.1R4-S9 Junos OS versions prior to 15.1R6-S6 Junos OS versions prior to 15.1R7 Junos OS versions prior to 16.1R3-S8 Junos OS versions prior to 16.1R4-S9 Junos OS versions prio...

CVE-2018-0034: Improper Input Validation

A Denial of Service vulnerability exists in the Juniper Networks Junos OS JDHCPD daemon which allows an attacker to core the JDHCPD daemon by sending a crafted IPv6 packet to the system. This issue is limited to systems which receives IPv6 DHCP packets on a system configured for DHCP processing...

CVE-2018-0032: Improper Input Validation

The receipt of a crafted BGP UPDATE can lead to a routing process daemon RPD crash and restart. Repeated receipt of the same crafted BGP UPDATE can result in an extended denial of service condition for the device. This issue only affects the specific versions of Junos OS listed within this...

CVE-2018-0031: Uncontrolled Resource Consumption

Receipt of specially crafted UDP/IP packets over MPLS may be able to bypass a stateless firewall filter. The crafted UDP packets must be encapsulated and meet a very specific packet format to be classified in a way that bypasses IP firewall filter rules. The packets themselves do not cause a...

CVE-2018-0027: Improper Input Validation

Receipt of a crafted or malformed RSVP PATH message may cause the routing protocol daemon RPD to hang or crash. When RPD is unavailable, routing updates cannot be processed which can lead to an extended network outage. If RSVP is not enabled on an interface, then the issue cannot be triggered via...

PT-2018-8572

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 12.1X46-D45 on SRX Series Juniper Networks Junos OS versions prior to 12.3X48-D20 on SRX Series Juniper Networks Junos OS versions prior to 12.3R11 on EX Series Juniper Networks Junos OS versions...

PT-2018-8575

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 16.1R3 Description: The issue is caused by the receipt of a crafted or malformed RSVP PATH message, which may cause the routing protocol daemon RPD to hang or crash. This can lead to an extended network outage becau...

PT-2018-8576

Name of the Vulnerable Software and Affected Versions: Junos OS versions 15.1 through 17.4 Description: The system can crash and restart when the fxp0 interface is placed into promiscuous mode via the 'monitor traffic interface fxp0' command during a broadcast storm. This issue affects both singl...

PT-2018-8578

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 12.1X46-D76 Junos OS versions prior to 12.3R12-S10 Junos OS versions prior to 12.3X48-D66 Junos OS versions prior to 12.3X48-D70 Junos OS versions prior to 14.1X53-D47 Junos OS versions prior to 15.1F6-S10 Junos OS...

PT-2018-8580

Name of the Vulnerable Software and Affected Versions: Junos OS versions 15.1X53-D21 through 15.1X53-D60 Description: The issue allows a superuser to reboot to an unintended additional Open Network Install Environment ONIE partition, which wipes out the content of the Junos partition and its...

CVE-2018-0030: Uncontrolled Resource Consumption

Receipt of a specific MPLS packet may cause MPC7/8/9, PTX-FPC3 FPC-P1, FPC-P2 line cards or PTX1K to crash and restart. By continuously sending specific MPLS packets, an attacker can repeatedly crash the line cards or PTX1K causing a sustained Denial of Service. Affected releases are Juniper...

PT-2018-2499

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 16.1X65-D47 Junos OS versions prior to 17.2X75-D91 Junos OS versions prior to 17.2X75-D110 Junos OS versions prior to 17.3R1-S4 Junos OS versions prior to 17.3R2 Junos OS versions prior to 17.4R1-S3 Junos OS versions...

PT-2018-8579

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 12.3R12-S10 on EX Series Juniper Networks Junos OS versions prior to 12.3X48-D70 on SRX Series Juniper Networks Junos OS versions prior to 14.1X53-D47 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300...

CVE-2018-0024: Improper Privilege Management

An Improper Privilege Management vulnerability in a shell session of Juniper Networks Junos OS allows an authenticated unprivileged attacker to gain full control of the system. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D45 on SRX Series; 12.3X48 versions...

CVE-2018-0029: Uncontrolled Resource Consumption

While experiencing a broadcast storm, placing the fxp0 interface into promiscuous mode via the 'monitor traffic interface fxp0' can cause the system to crash and restart vmcore. This issue only affects Junos OS 15.1 and later releases, and affects both single core and multi-core REs. Releases pri...

CVE-2018-0026: Undefined Security Weakness

After Junos OS device reboot or upgrade, the stateless firewall filter configuration may not take effect. This issue can be verified by running the command: user@re0 show interfaces extensive | match filters" CAM destination filters: 0, CAM source filters: 0 Note: when the issue occurs, it does n...

PT-2018-8574

Name of the Vulnerable Software and Affected Versions: Junos OS versions 15.1R4 through 15.1R6 Junos OS versions 15.1X8 prior to 15.1X8.3 Description: The stateless firewall filter configuration may not take effect after a Junos OS device reboot or upgrade. This issue affects firewall filters for...

Juniper Networks Releases Security Updates

Juniper Networks has released security updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC encourages users and administrators to review the following Juniper Security Advisories...

Design/Logic Flaw

A vulnerability in the Network Address Translation - Protocol Translation NAT-PT feature of Junos OS on SRX series devices may allow a certain valid IPv6 packet to crash the flowd daemon. Repeated crashes of the flowd daemon can result in an extended denial of service condition for the SRX device...

Design/Logic Flaw

A Junos device with VPLS routing-instances configured on one or more interfaces may be susceptible to an mbuf leak when processing a specific MPLS packet. Approximately 1 mbuf is leaked per each packet processed. The number of mbufs is platform dependent. The following command provides the number...