CVE-2018-0005

CVE-2018-0005 affects Juniper Networks Junos OS on QFX and EX Series switches. When MAC move limit is exceeded, the device forwards instead of dropping, enabling a denial-of-service/unstable behavior. Affected releases: Junos OS 14.1X53 before 14.1X53-D40; 15.1X53 before 15.1X53-D55; 15.1 before ...

CVE-2018-0009 SRX Series: Firewall bypass vulnerability when UUID with leading zeros is configured.

On Juniper Networks SRX series devices, firewall rules configured to match custom application UUIDs starting with zeros can match all TCP traffic. Due to this issue, traffic that should have been blocked by other rules is permitted to flow through the device resulting in a firewall bypass...

CVE-2018-0008

The CVE-2018-0008 entry describes an authentication bypass in Junos OS where an unauthenticated root login can occur after a reboot when a commit script is used. During normal commit, certain scripts may trigger a mode change on reboot that leaves the system in a safe-mode authentication state, a...

CVE-2018-0006 Junos OS: bbe-smgd process denial of service while processing VLAN authentication requests/rejects

A high rate of VLAN authentication attempts sent from an adjacent host on the local broadcast domain can trigger high memory utilization by the BBE subscriber management daemon bbe-smgd, and lead to a denial of service condition. The issue was caused by attempting to process an unbounded number o...

CVE-2018-0001

CVE-2018-0001 affects Junos OS via the J-Web interface: a use-after-free defect in older PHP handling could allow an unauthenticated remote code execution by crafting data sent to specific PHP URLs. Affected Junos releases include 12.1X46 (before 12.1X46-D67), 12.3 (before 12.3R12-S5), 12.3X48 (b...

CVE-2018-0008 Junos OS: commit script may allow unauthenticated root login upon reboot

An unauthenticated root login may allow upon reboot when a commit script is used. A commit script allows a device administrator to execute certain instructions during commit, which is configured under the system scripts commit stanza. Certain commit scripts that work without a problem during norm...

CVE-2018-0007

CVE-2018-0007 describes a memory corruption vulnerability in Junos OS triggered by unauthenticated LLDP packets on local segments, potentially leading to denial of service and, if authenticated on the device, arbitrary code execution with privilege escalation. The issue affects Junos OS releases ...

CVE-2018-0005 Security Bulletin: Junos OS: MAC move limit configured to drop traffic may forward traffic.

QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded will forward traffic instead of dropping traffic. This can lead to denials of services or other unintended conditions. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D40;...

PT-2018-1108

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.1X46-D50 Junos OS versions prior to 12.3X48-D30 Junos OS versions prior to 12.3R12-S7 Junos OS versions prior to 14.1R8-S4 Junos OS versions prior to 14.1R9 Junos OS versions prior to 14.1X53-D30 Junos OS versions...

PT-2018-8558

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 14.1X53-D40 Junos OS versions prior to 15.1X53-D55 Junos OS versions prior to 15.1R7 Description: A issue in QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded can cause the...

CVE-2018-0002: Improper Restriction of Operations within the Bounds of a Memory Buffer

On SRX Series and MX Series devices with a Service PIC with any ALG enabled, a crafted TCP/IP response packet processed through the device results in memory corruption leading to a flowd daemon crash. Sustained crafted response packets lead to repeated crashes of the flowd daemon which results in...

CVE-2018-0004: Uncontrolled Resource Consumption

A sustained sequence of different types of normal transit traffic can trigger a high CPU consumption denial of service condition in the Junos OS register and schedule software interrupt handler subsystem when a specific command is issued to the device. This affects one or more threads and...

CVE-2018-0009: Undefined Security Weakness

On Juniper Networks SRX series devices, firewall rules configured to match custom application UUIDs starting with zeros can match all TCP traffic. Due to this issue, traffic that should have been blocked by other rules is permitted to flow through the device resulting in a firewall bypass...

CVE-2018-0008: Improper Authentication

An unauthenticated root login may allow upon reboot when a commit script is used. A commit script allows a device administrator to execute certain instructions during commit, which is configured under the system scripts commit stanza. Certain commit scripts that work without a problem during norm...

PT-2018-1041

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 12.1X46-D71 Juniper Networks Junos OS versions prior to 12.3R12-S7 Juniper Networks Junos OS versions prior to 12.3X48-D55 Juniper Networks Junos OS versions prior to 14.1R8-S5 Juniper Networks Junos...

PT-2018-8559

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 15.1R6-S2, 15.1R7 Junos OS versions prior to 16.1R5-S1, 16.1R6 Junos OS versions prior to 16.2R2-S2, 16.2R3 Junos OS versions prior to 17.1R2-S5, 17.1R3 Junos OS versions prior to 17.2R2 Description: A high rate of...

PT-2018-8556

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 12.1X46-D60 on SRX series Junos OS versions prior to 12.3X48-D35 on SRX series Junos OS versions prior to 14.1R9 on MX series Junos OS versions prior to 14.2R8 on MX series Junos OS versions prior to 15.1X49-D60 on...

PT-2018-8557

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 12.1X46-D71 Junos OS versions prior to 12.3R12-S7 Junos OS versions prior to 12.3X48-D55 Junos OS versions prior to 14.1R8-S5 Junos OS versions prior to 14.1R9 Junos OS versions prior to 14.1X53-D45 Junos OS version...

CVE-2018-0005: Improper Check for Unusual or Exceptional Conditions

QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded will forward traffic instead of dropping traffic. This can lead to denials of services or other unintended conditions. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D40;...

CVE-2018-0001: Use After Free

A remote, unauthenticated attacker may be able to execute code by exploiting a use-after-free defect found in older versions of PHP through injection of crafted data via specific PHP URLs within the context of the J-Web process. Affected releases are Juniper Networks Junos OS: 12.1X46 versions...