CVE-2016-1274

CVE-2016-1274 affects Juniper Networks Junos OS running on QFX Series switches (14.1X53 prior to 14.1X53-D30). A remote attacker can cause a denial of service by sending a high rate of VXLAN packets that trigger a PFE panic. The public records describe the issue in Junos OS/QFX VXLAN handling but...

CVE-2016-1269

CVE-2016-1269 affects Juniper Networks Junos OS prior to various versions (e.g., 12.1X44-D60, 12.3R11, 16.1R1, etc.) and allows remote attackers to cause a denial of service via crafted TCP timestamps, leading to socket exhaustion. The vulnerability is documented with a high impact (CVSS v3 base ...

CVE-2016-1264

The CVE-2016-1264 issue affects Juniper Networks Junos OS, where a race condition in the Op command (through the Op URL option) can allow remote authenticated users to gain elevated privileges. Affected versions span multiple releases across 12.1X, 12.3, 13.2, 13.3, 14.1, 14.2, and 15.x lines (e....

CVE-2016-1273: Undefined Security Weakness

Juniper Junos OS before 13.2X51-D40, 14.x before 14.1X53-D30, and 15.x before 15.1X53-D20 on QFX5100 and QFX10002 switches do not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic encryption and authentication protection mechanisms via unspecified vectors...

PT-2016-1746

Name of the Vulnerable Software and Affected Versions Juniper Junos OS versions prior to 13.2X51-D40 Juniper Junos OS versions prior to 14.1X53-D30 Juniper Junos OS versions prior to 15.1X53-D20 Description The issue is related to insufficient entropy in the Juniper Junos OS, which makes it easie...

PT-2016-1749

Name of the Vulnerable Software and Affected Versions Juniper Junos OS versions prior to 12.1X44-D60 Juniper Junos OS versions prior to 12.1X46-D40 Juniper Junos OS versions prior to 12.1X47-D30 Juniper Junos OS versions prior to 12.3R11 Juniper Junos OS versions prior to 12.3X48-D20 Juniper Juno...

CVE-2016-1264: Undefined Security Weakness

Race condition in the Op command in Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D20, 12.3X50 before 12.3X50-D50, 13.2 before 13.2R8, 13.2X51 before 13.2X51-D39, 13.2X52 before 13.2X52-D30, 13.3 before...

CVE-2016-1267: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the RPC functionality in Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R8, 13.2X51 before 13.2X51-D39, 13.3 before 13.3R7, 14.1 before 14.1R6, 14.1X53 before...

CVE-2016-1270: Undefined Security Weakness

The rpd daemon in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R7, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R6, 14.1 before 14.1R4, and 14.2 before 14.2R2, when configured with...

PT-2016-1752

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.1X44-D55 Junos OS versions prior to 12.1X46-D40 Junos OS versions prior to 12.1X47-D25 Junos OS versions prior to 12.3R11 Junos OS versions prior to 12.3X48-D20 Junos OS versions prior to 12.3X50-D50 Junos OS...

CVE-2016-1274: Undefined Security Weakness

Juniper Junos OS 14.1X53 before 14.1X53-D30 on QFX Series switches allows remote attackers to cause a denial of service PFE panic via a high rate of unspecified VXLAN packets...

CVE-2016-1271: Improper Input Validation

Juniper Junos OS before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D25, 13.2 before 13.2R8, 13.3 before 13.3R7, 14.1 before 14.1R6, 14.2 before 14.2R4, 15.1 before 15.1R1 or 15.1F2, and 15.1X49 before 15.1X49-D15 allow local users to gain privileges via...

CVE-2016-1269: Undefined Security Weakness

Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R9, 13.2X51 before 13.2X51-D39, 13.3 before 13.3R8, 14.1 before 14.1R6, 14.1X53 before 14.1X53-D30, 14.2 before 14.2R4-S1, 15.1 before...

PT-2016-1745

Name of the Vulnerable Software and Affected Versions Juniper Junos OS versions 14.1X53 before 14.1X53-D30 on QFX Series switches Description The issue is related to incorrect data processing in the Junos operating system. It can be exploited by a remote attacker to cause a denial of service by...

PT-2016-1748

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.1X44-D60 Junos OS versions 12.1X46 prior to 12.1X46-D45 Junos OS versions 12.1X47 prior to 12.1X47-D30 Junos OS versions 12.3 prior to 12.3R9 Junos OS versions 12.3X48 prior to 12.3X48-D20 Junos OS versions 13.2...

Juniper Junos OS Denial of Service Vulnerability

Juniper Networks is a network communications equipment company that supplies IP networking and information security solutions. Juniper Junos OS with RTSP ALG enabled can cause a process crash when processing certain constructed RTSP packets, resulting in a denial of service flowd crash...

Juniper Networks Junos OS SRX RTSP DoS Vulnerability

Junos OS on SRX Series is prone to a Denial of Service vulnerability in flowd. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Juniper Networks Junos OS SRX and J-Series BIND DoS Vulnerability

Junos OS BIND on SRX-Series and J-Series is prone to a Denial of Service vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Juniper Networks Junos OS Embedthis Appweb Server DoS Vulnerability

Junos OS is prone to a Denial of Service vulnerability with J-Web enabled. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Juniper Networks Junos OS IGMPv3 Multicast DoS Vulnerability

Junos OS is prone to a Denial of Service vulnerability with IGMPv3 enabled. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...