CVE-2017-10607: Undefined Security Weakness

Juniper Networks Junos OS 16.1R1, and services releases based off of 16.1R1, are vulnerable to the receipt of a crafted BGP Protocol Data Unit PDU sent directly to the router, which can cause the RPD routing process to crash and restart. Unlike BGP UPDATEs, which are transitive in nature, this...

PT-2017-11416

Name of the Vulnerable Software and Affected Versions Junos OS versions 12.1X46 prior to 12.1X46-D71 Junos OS versions 12.3X48 prior to 12.3X48-D50 Junos OS versions 14.1 prior to 14.1R8-S5, 14.1R9 Junos OS versions 14.1X53 prior to 14.1X53-D50 Junos OS versions 14.2 prior to 14.2R7-S9, 14.2R8...

PT-2017-11410

Name of the Vulnerable Software and Affected Versions Junos OS versions 12.1X46 prior to 12.1X46-D45 Junos OS versions 12.3X48 prior to 12.3X48-D30 Junos OS versions 14.1 prior to 14.1R4-S9, 14.1R8 Junos OS versions 14.2 prior to 14.2R6 Junos OS versions 15.1 prior to 15.1F5, 15.1R3 Junos OS...

CVE-2017-10618: Undefined Security Weakness

When the 'bgp-error-tolerance' feature â€" designed to help mitigate remote session resets from malformed path attributes â€" is enabled, a BGP UPDATE containing a specifically crafted set of transitive attributes can cause the RPD routing process to crash and restart. Devices with BGP enabled th...

CVE-2017-10613: Uncontrolled Resource Consumption

A vulnerability in a specific loopback filter action command, processed in a specific logical order of operation, in a running configuration of Juniper Networks Junos OS, allows an attacker with CLI access and the ability to initiate remote sessions to the loopback interface with the defined...

PT-2017-11404

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 16.1R1 through 16.1R1-S3 Description The issue is caused by the receipt of a crafted BGP Protocol Data Unit PDU sent directly to the router, which can cause the RPD routing process to crash and restart. This...

PT-2017-11413

Name of the Vulnerable Software and Affected Versions Junos OS versions 13.3 prior to 13.3R10-S2 Junos OS versions 14.1 prior to 14.1R8-S4, 14.1R9 Junos OS versions 14.1X50 prior to 14.1X50-D185 Junos OS versions 14.1X53 prior to 14.1X53-D45, 14.1X53-D50 Junos OS versions 14.2 prior to 14.2R7-S7,...

PT-2017-3104

Name of the Vulnerable Software and Affected Versions Junos OS versions 14.1R5 through 14.1R8-S4, 14.1R9 Junos OS versions 14.1X53 through 14.1X53-D50 on EX and QFX series Junos OS versions 14.2R3 through 14.2R7-S8, 14.2R8 Description A vulnerability in the pluggable authentication module PAM of...

Juniper Issues Security Alert Tied to Routers and Switches

Juniper Networks warned customers Thursday of a high-risk vulnerability in the GD graphics library that could allow a remote attacker to take control of systems running certain versions of the Junos OS. The alert was in conjunction with a warning from the U.S. Computer Emergency Readiness Team...

Juniper Networks Junos OS MPLS DoS Vulnerability

Junos OS is prone to a denial of service vulnerability in rpd when receiving a malformed MPLS ping packet. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Juniper Networks Junos OS libgd Heap Overflow Vulnerability

Junos OS is prone to a heap overflow vulnerability in libgd which allows remote attackers to cause a denial of service or potentially execute arbitrary code. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Juniper Networks Releases Junos OS Security Advisory

Juniper Networks has released a security advisory that addresses a vulnerability in Junos OS. A remote attacker could exploit this vulnerability to cause a denial-of-service condition. US-CERT encourages users and administrators to review the Juniper Security Advisory and apply necessary updates...

Juniper SRX Series Appliance Junos OS Denial of Service Vulnerability

Juniper SRX Series devices are an SRX Series gateway device from Juniper Networks, Inc.Junos OS is the operating system used in them. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in the cluster mode of Junos OS versions 12.1X46,...

Juniper Junos Denial of Service Vulnerability (CNVD-2017-23941)

Juniper Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Junos OS. An attacker could exploit this vulnerability by continuously sending...

CVE-2017-2341

An insufficient authentication vulnerability on platforms where Junos OS instances are run in a virtualized environment, may allow unprivileged users on the Junos OS instance to gain access to the host operating environment, and thus escalate privileges. Affected releases are Juniper Networks Jun...

CVE-2017-2342

MACsec feature on Juniper Networks Junos OS 15.1X49 prior to 15.1X49-D100 on SRX300 series does not report errors when a secure link can not be established. It falls back to an unencrypted link. This can happen when MACsec is configured on ports that are not capable of MACsec or when a secure lin...

CVE-2017-2343

The Integrated User Firewall UserFW feature was introduced in Junos OS version 12.1X47-D10 on the Juniper SRX Series devices to provide simple integration of user profiles on top of the existing firewall polices. As part of an internal security review of the UserFW services authentication API,...

CVE-2017-2344

A routine within an internal Junos OS sockets library is vulnerable to a buffer overflow. Malicious exploitation of this issue may lead to a denial of service kernel panic or be leveraged as a privilege escalation through local code execution. The routines are only accessible via programs running...

CVE-2017-2347

A denial of service vulnerability in rpd daemon of Juniper Networks Junos OS allows a malformed MPLS ping packet to crash the rpd daemon if MPLS OAM is configured. Repeated crashes of the rpd daemon can result in an extended denial of service condition for the device. The affected releases are...

CVE-2017-2348

The Juniper Enhanced jdhcpd daemon may experience high CPU utilization, or crash and restart upon receipt of an invalid IPv6 UDP packet. Both high CPU utilization and repeated crashes of the jdhcpd daemon can result in a denial of service as DHCP service is interrupted. No other Juniper Networks...