CVE-2017-2302

On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D55, 12.1X47 prior to 12.1X47-D45, 12.3R13 prior to 12.3R13, 12.3X48 prior to 12.3X48-D35, 13.3 prior to 13.3R10, 14.1 prior to 14.1R8, 14.1X53 prior to 14.1X53-D40, 14.1X55 prior to 14.1X55-D35, 14.2 prior to...

PT-2017-15336

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.1X46-D65 Junos OS versions prior to 12.3X48-D40 Junos OS versions prior to 12.3X48-D60 Description A crash and restart of the flowd daemon on the primary node of an SRX Series chassis cluster may occur when...

CVE-2017-2302: Undefined Security Weakness

On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D55, 12.1X47 prior to 12.1X47-D45, 12.3R13 prior to 12.3R13, 12.3X48 prior to 12.3X48-D35, 13.3 prior to 13.3R10, 14.1 prior to 14.1R8, 14.1X53 prior to 14.1X53-D40, 14.1X55 prior to 14.1X55-D35, 14.2 prior to...

PT-2017-2193

Name of the Vulnerable Software and Affected Versions Junos OS versions 12.1X46 prior to 12.1X46-D50 Junos OS versions 12.1X47 prior to 12.1X47-D40 Junos OS versions 12.3 prior to 12.3R13 Junos OS versions 12.3X48 prior to 12.3X48-D30 Junos OS versions 13.2X51 prior to 13.2X51-D40 Junos OS versio...

PT-2017-15337

Name of the Vulnerable Software and Affected Versions Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300, and EX4600 devices running Junos OS versions prior to 14.1X53-D40 Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300, and EX4600 devices running Junos OS versions prior to...

PT-2017-2195

Name of the Vulnerable Software and Affected Versions Junos OS versions 11.4 prior to 11.4R13-S3 Junos OS versions 12.1X46 prior to 12.1X46-D60 Junos OS versions 12.3 prior to 12.3R12-S2 or 12.3R13 Junos OS versions 12.3X48 prior to 12.3X48-D40 Junos OS versions 13.2X51 prior to 13.2X51-D40 Junos...

PT-2017-2194

Name of the Vulnerable Software and Affected Versions Junos OS versions 12.1X46 prior to 12.1X46-D55 Junos OS versions 12.1X47 prior to 12.1X47-D45 Junos OS versions 12.3R13 prior to 12.3R13 Junos OS versions 12.3X48 prior to 12.3X48-D35 Junos OS versions 13.3 prior to 13.3R10 Junos OS versions...

CVE-2017-2301: Undefined Security Weakness

On Juniper Networks products or platforms running Junos OS 11.4 prior to 11.4R13-S3, 12.1X46 prior to 12.1X46-D60, 12.3 prior to 12.3R12-S2 or 12.3R13, 12.3X48 prior to 12.3X48-D40, 13.2X51 prior to 13.2X51-D40, 13.3 prior to 13.3R10, 14.1 prior to 14.1R8, 14.1X53 prior to 14.1X53-D12 or...

CVE-2017-2300: Undefined Security Weakness

On Juniper Networks SRX Series Services Gateways chassis clusters running Junos OS 12.1X46 prior to 12.1X46-D65, 12.3X48 prior to 12.3X48-D40, 12.3X48 prior to 12.3X48-D60, flowd daemon on the primary node of an SRX Series chassis cluster may crash and restart when attempting to synchronize a...

CVE-2017-2304: Exposure of Sensitive Information to an Unauthorized Actor

Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53-D40, 15.1X53 prior to 15.1X53-D40, 15.1 prior to 15.1R2, do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from...

CVE-2017-2303: Undefined Security Weakness

On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D50, 12.1X47 prior to 12.1X47-D40, 12.3 prior to 12.3R13, 12.3X48 prior to 12.3X48-D30, 13.2X51 prior to 13.2X51-D40, 13.3 prior to 13.3R10, 14.1 prior to 14.1R8, 14.1X53 prior to 14.1X53-D35, 14.1X55 prior to...

Design/Logic Flaw

Juniper Networks devices running affected Junos OS versions may be impacted by the receipt of a crafted BGP UPDATE which can lead to an rpd routing process daemon crash and restart. Repeated crashes of the rpd daemon can result in an extended denial of service condition. The affected Junos OS...

Design/Logic Flaw

On Juniper Networks EX Series Ethernet Switches running affected Junos OS versions, a vulnerability in IPv6 processing has been discovered that may allow a specially crafted IPv6 Neighbor Discovery ND packet destined to an EX Series Ethernet Switch to cause a slow memory leak. A malicious...

Code injection

On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15.1R4, 16.1 prior to 16.1R3, on M/MX platforms where Enhanced Subscriber Management for DHCPv6 subscribers is configured, a vulnerability in processing IPv6 ND packets originating from subscribers and destined to M/MX series routers can...

Information disclosure

An information disclosure vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, network-based attacker to replicate the underlying Junos OS VM and all data it maintains to their local system for future...

Design/Logic Flaw

On Juniper Networks devices running Junos OS affected versions and with LDP enabled, a specific LDP packet destined to the RE Routing Engine will consume a small amount of the memory allocated for the rpd routing protocol daemon process. Over time, repeatedly receiving this type of LDP packets wi...

CVE-2017-2326

An information disclosure vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, network-based attacker to replicate the underlying Junos OS VM and all data it maintains to their local system for future...

CVE-2017-2313

Juniper Networks devices running affected Junos OS versions may be impacted by the receipt of a crafted BGP UPDATE which can lead to an rpd routing process daemon crash and restart. Repeated crashes of the rpd daemon can result in an extended denial of service condition. The affected Junos OS...

CVE-2017-2340

On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15.1R4, 16.1 prior to 16.1R3, on M/MX platforms where Enhanced Subscriber Management for DHCPv6 subscribers is configured, a vulnerability in processing IPv6 ND packets originating from subscribers and destined to M/MX series routers can...

CVE-2017-2312

On Juniper Networks devices running Junos OS affected versions and with LDP enabled, a specific LDP packet destined to the RE Routing Engine will consume a small amount of the memory allocated for the rpd routing protocol daemon process. Over time, repeatedly receiving this type of LDP packets wi...