PT-2016-4678

Name of the Vulnerable Software and Affected Versions Juniper Junos OS versions prior to 12.1X46-D45 Juniper Junos OS versions prior to 12.1X47-D35 Juniper Junos OS versions prior to 12.3X48-D30 Juniper Junos OS versions prior to 13.3R9-S1 Juniper Junos OS versions prior to 14.1R7 Juniper Junos O...

PT-2016-2780

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.1X46-D45 Junos OS versions prior to 12.1X46-D50 Junos OS versions prior to 12.1X47-D35 Junos OS versions prior to 12.3R12 Junos OS versions prior to 12.3X48-D25 Junos OS versions prior to 13.3R10 Junos OS versions...

PT-2016-4679

Name of the Vulnerable Software and Affected Versions Juniper Junos OS versions prior to 13.3R9 Juniper Junos OS versions 14.1R6 before 14.1R6-S1 Juniper Junos OS versions 14.1 before 14.1R7 Description The issue allows remote attackers to obtain sensitive mbuf information by injecting a flood of...

CVE-2016-1279: Exposure of Sensitive Information to an Unauthorized Actor

J-Web in Juniper Junos OS before 12.1X46-D45, 12.1X46-D50, 12.1X47 before 12.1X47-D35, 12.3 before 12.3R12, 12.3X48 before 12.3X48-D25, 13.3 before 13.3R10, 13.3R9 before 13.3R9-S1, 14.1 before 14.1R7, 14.1X53 before 14.1X53-D35, 14.2 before 14.2R6, 15.1 before 15.1A2 or 15.1F4, 15.1X49 before...

CVE-2016-1263: Improper Input Validation

Juniper Junos OS before 12.1X46-D45, 12.1X46-D50, 12.1X47 before 12.1X47-D35, 12.3X48 before 12.3X48-D30, 13.3 before 13.3R9-S1, 14.1 before 14.1R7, 14.2 before 14.2R6, 15.1 before 15.1F2-S5, 15.1F4 before 15.1F4-S2, 15.1R before 15.1R2-S3, 15.1 before 15.1R3, and 15.1X49 before 15.1X49-D40 allow...

CVE-2016-1277: Improper Input Validation

Juniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D40, 12.3X48 before 12.3X48-D30, 13.3 before 13.3R9, 14.1 before 14.1R8, 14.1X53 before 14.1X53-D40, 14.2 before 14.2R6, 15.1 before 15.1F6 or 15.1R3, and 15.1X49 before 15.1X49-D40, when configured with a GRE or IPIP tunnel, allow remot...

PT-2016-4681

Name of the Vulnerable Software and Affected Versions Juniper Junos OS versions prior to 12.1X46-D50 Juniper Junos OS versions 12.1X47 prior to 12.1X47-D40 Juniper Junos OS versions 12.3X48 prior to 12.3X48-D30 Juniper Junos OS versions 13.3 prior to 13.3R9 Juniper Junos OS versions 14.1 prior to...

CVE-2016-1276

Juniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D23, 12.3X48 before 12.3X48-D25, and 15.1X49 before 15.1X49-D40 on a High-End SRX-Series chassis system with one or more Application Layer Gateways ALGs enabled allow remote attackers to cause a denial of service CPU consumption, fab lin...

Design/Logic Flaw

Juniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D23, 12.3X48 before 12.3X48-D25, and 15.1X49 before 15.1X49-D40 on a High-End SRX-Series chassis system with one or more Application Layer Gateways ALGs enabled allow remote attackers to cause a denial of service CPU consumption, fab lin...

Design/Logic Flaw

Juniper Junos OS before 12.1X46-D50 on SRX Series devices reverts to "safe mode" authentication and allows root CLI logins without a password after a failed upgrade to 12.1X46, which might allow local users to gain privileges by leveraging use of the "request system software" command with the...

CVE-2016-1278

Juniper Junos OS before 12.1X46-D50 on SRX Series devices reverts to "safe mode" authentication and allows root CLI logins without a password after a failed upgrade to 12.1X46, which might allow local users to gain privileges by leveraging use of the "request system software" command with the...

CVE-2016-1278

CVE-2016-1278 affects Juniper Junos OS on SRX Series devices. A failed upgrade to 12.1X46 can cause the device to revert to a safe mode with a flaw that allows root CLI logins without a password via the partition option of the upgrade, enabling local privilege escalation. Affected component is th...

CVE-2016-1276

Juniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D23, 12.3X48 before 12.3X48-D25, and 15.1X49 before 15.1X49-D40 on a High-End SRX-Series chassis system with one or more Application Layer Gateways ALGs enabled allow remote attackers to cause a denial of service CPU consumption, fab lin...

CVE-2016-1276

CVE-2016-1276 affects Juniper Junos OS on High-End SRX-Series chassis with one or more Application Layer Gateways (ALGs) enabled. A DoS can be triggered by remote attackers via in-transit traffic matching ALG rules, causing CPU consumption, fab link failure, or flip-flop failovers. Affected versi...

CVE-2016-1278: Improper Authentication

Juniper Junos OS before 12.1X46-D50 on SRX Series devices reverts to "safe mode" authentication and allows root CLI logins without a password after a failed upgrade to 12.1X46, which might allow local users to gain privileges by leveraging use of the "request system software" command with the...

PT-2016-4680

Name of the Vulnerable Software and Affected Versions Juniper Junos OS versions prior to 12.1X46-D50 Juniper Junos OS versions 12.1X47 prior to 12.1X47-D23 Juniper Junos OS versions 12.3X48 prior to 12.3X48-D25 Juniper Junos OS versions 15.1X49 prior to 15.1X49-D40 Description The issue allows...

PT-2016-4682

Name of the Vulnerable Software and Affected Versions Juniper Junos OS versions prior to 12.1X46-D50 on SRX Series devices Description The issue allows local users to gain privileges by leveraging the use of the request system software command with the partition option after a failed upgrade to...

CVE-2016-1276: Undefined Security Weakness

Juniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D23, 12.3X48 before 12.3X48-D25, and 15.1X49 before 15.1X49-D40 on a High-End SRX-Series chassis system with one or more Application Layer Gateways ALGs enabled allow remote attackers to cause a denial of service CPU consumption, fab lin...

Juniper Networks Junos OS SRX Series ALGs DoS Vulnerability (JSA10751)

Junos OS on SRX Series is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Juniper Networks Junos OS mbuf Leak Vulnerability

Junos OS is prone to a mbuf leak vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if description...