CVE-2018-0020 Junos OS: rpd daemon cores due to malformed BGP UPDATE packet

Junos OS may be impacted by the receipt of a malformed BGP UPDATE which can lead to a routing process daemon rpd crash and restart. Receipt of a repeated malformed BGP UPDATEs can result in an extended denial of service condition for the device. This malformed BGP UPDATE does not propagate to oth...

CVE-2018-0020

CVE-2018-0020 affects Junos OS where receipt of a malformed BGP UPDATE can cause the routing process daemon (rpd) to crash and restart. Repeated malformed updates may lead to an extended denial-of-service on the device, though the malformed update does not propagate to other BGP peers. Affected J...

CVE-2018-0021 Junos OS: Short MacSec keys may allow man-in-the-middle attacks.

If all 64 digits of the connectivity association name CKN key or all 32 digits of the connectivity association key CAK key are not configured, all remaining digits will be auto-configured to 0. Hence, Juniper devices configured with short MacSec keys are at risk to an increased likelihood that an...

CVE-2018-0019: Improper Input Validation

A vulnerability in Junos OS SNMP MIB-II subagent daemon mib2d may allow a remote network based attacker to cause the mib2d process to crash resulting in a denial of service condition DoS for the SNMP subsystem. While a mib2d process crash can disrupt the network monitoring via SNMP, it does not...

CVE-2018-0018: Exposure of Sensitive Information to an Unauthorized Actor

On SRX Series devices during compilation of IDP policies, an attacker sending specially crafted packets may be able to bypass firewall rules, leading to information disclosure which an attacker may use to gain control of the target device or other internal devices, systems or services protected b...

PT-2018-8568

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 12.1X46-D60 on SRX Junos OS versions prior to 12.3X48-D35 on SRX Junos OS versions prior to 15.1X49-D60 on SRX Description: An issue exists where an attacker sending specially crafted packets may be able to bypass...

PT-2018-1289

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 14.1X53-D47 Junos OS versions prior to 15.1F6-S10, 15.1R4-S9, 15.1R6-S6, 15.1R7 Junos OS versions prior to 15.1X49-D130 on SRX Junos OS versions prior to 15.1X53-D66 on QFX10K Junos OS versions prior to 15.1X53-D58 o...

PT-2018-1288

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.1X46-D76 Junos OS versions prior to 12.3X48-D66 Junos OS versions prior to 12.3X48-D70 Junos OS versions prior to 14.1R9 Junos OS versions prior to 14.1X53-D47 Junos OS versions prior to 14.2R8 Junos OS versions...

CVE-2018-0020: Improper Input Validation

Junos OS may be impacted by the receipt of a malformed BGP UPDATE which can lead to a routing process daemon rpd crash and restart. Receipt of a repeated malformed BGP UPDATEs can result in an extended denial of service condition for the device. This malformed BGP UPDATE does not propagate to oth...

CVE-2018-0021: Undefined Security Weakness

If all 64 digits of the connectivity association name CKN key or all 32 digits of the connectivity association key CAK key are not configured, all remaining digits will be auto-configured to 0. Hence, Juniper devices configured with short MacSec keys are at risk to an increased likelihood that an...

CVE-2018-0022: Uncontrolled Resource Consumption

A Junos device with VPLS routing-instances configured on one or more interfaces may be susceptible to an mbuf leak when processing a specific MPLS packet. Approximately 1 mbuf is leaked per each packet processed. The number of mbufs is platform dependent. The following command provides the number...

PT-2018-8569

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 12.1X46-D76 Junos OS versions prior to 12.3R12-S7 Junos OS versions prior to 12.3R13 Junos OS versions prior to 12.3X48-D65 Junos OS versions prior to 14.1R9 Junos OS versions prior to 14.1X53-D130 Junos OS versions...

PT-2018-8570

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 14.1R10 Junos OS versions prior to 14.1X53-D47 Junos OS versions prior to 15.1R4-S9 Junos OS versions prior to 15.1R6-S6 Junos OS versions prior to 15.1R7 Junos OS versions prior to 15.1X49-D100 Junos OS versions...

PT-2018-8567

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 12.1X46-D72 Junos OS versions prior to 12.3X48-D55 Junos OS versions prior to 15.1X49-D90 Description: A vulnerability in the Network Address Translation - Protocol Translation NAT-PT feature of Junos OS on SRX seri...

CVE-2018-0017: Improper Input Validation

A vulnerability in the Network Address Translation - Protocol Translation NAT-PT feature of Junos OS on SRX series devices may allow a certain valid IPv6 packet to crash the flowd daemon. Repeated crashes of the flowd daemon can result in an extended denial of service condition for the SRX device...

CVE-2018-0016: Undefined Security Weakness

Receipt of a specially crafted Connectionless Network Protocol CLNP datagram destined to an interface of a Junos OS device may result in a kernel crash or lead to remote code execution. Devices are only vulnerable to the specially crafted CLNP datagram if 'clns-routing' or ES-IS is explicitly...

PT-2018-1290

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1F5-S3 Junos OS versions prior to 15.1F6-S8 Junos OS versions prior to 15.1F7 Junos OS versions prior to 15.1R5 Junos OS 15.1X49 versions prior to 15.1X49-D60 Junos OS 15.1X53 versions prior to 15.1X53-D66 Junos O...

Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2018-02840)

Juniper QFX and EX Series switches are both Juniper Networks switches.Junos OS is the set of operating systems that run on them. A denial of service vulnerability exists in Junos OS versions 14.1X53 prior to 14.1X53-D40, 15.1X53 prior to 15.1X53-D55, and 15.1R7 prior to 15.1 on Juniper QFX and EX...

Juniper Junos Remote Code Execution Vulnerability

Juniper Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. A remote code execution vulnerability exists in Juniper Junos OS. A remote attacker could exploit the vulnerability to...

Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2018-02839)

Juniper SRX Series and MX Series with Service PICs are Juniper Networks firewall appliances.Junos OS is the operating system that runs on them. A denial of service vulnerability exists in the Junos OS in Juniper SRX Series and MX Series with Service PIC appliances. An attacker can exploit this...