PT-2024-5540 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 21.4R3-S7 Junos OS versions 22.1 prior to 22.1R3-S5 Junos OS versions 22.2 prior to 22.2R3-S3 Junos OS versions 22.3 prior to 22.3R3-S3 Junos OS versions 22.4 prior to 22.4R3-S2 Junos OS versions 23.2 prior to 23.2R...

Juniper Junos OS Vulnerability (JSA82976)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA82976 advisory. - An Improper Input Validation vulnerability in the 802.1X Authentication dot1x Daemon of Juniper Networks Junos OS allows a local, low-privileged attacker with access to th...

PT-2024-5803

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS Evolved versions prior to 21.4R3-S7-EVO Juniper Networks Junos OS Evolved 22.3-EVO versions prior to 22.3R2-S2-EVO, 22.3R3-S2-EVO Juniper Networks Junos OS Evolved 22.4-EVO versions prior to 22.4R3-EVO Juniper Network...

Juniper Networks Junos OS Evolved Security Vulnerability

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. A security vulnerability exists in Juniper Networks Junos OS Evolved that stems from the presence of an incorrect input validation vulnerability that could allow a local, low-privilege attacker to cause a deni...

Juniper Networks Junos OS Evolved Security Vulnerability

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS system. A security vulnerability exists in Juniper Networks Junos OS Evolved, which arises from a vulnerability in packet processing that does not properly check for anomalies or unusual conditions, allowing an...

CVE-2024-39556: Stack-based Buffer Overflow

A Stack-Based Buffer Overflow vulnerability in Juniper Networks Junos OS and Juniper Networks Junos OS Evolved may allow a local, low-privileged attacker with access to the CLI the ability to load a malicious certificate file, leading to a limited Denial of Service DoS or privileged code executio...

CVE-2024-39560: Improper Handling of Exceptional Conditions

An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a logically adjacent downstream RSVP neighbor to cause kernel memory exhaustion, leading to a kernel crash, resulting in a Denial of Service DoS...

CVE-2024-39558: Unchecked Return Value

An Unchecked Return Value vulnerability in the Routing Protocol Daemon rpd on Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows a logically adjacent, unauthenticated attacker sending a specific PIM packet to cause rpd to crash and restart, resulting in a Denial of Service DoS...

CVE-2024-39554: Concurrent Execution using Shared Resource with Improper Synchronization

A Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to inject incremental routing updates when...

CVE-2024-39518: Heap-based Buffer Overflow

A Heap-based Buffer Overflow vulnerability in the telemetry sensor process sensord of Juniper Networks Junos OS on MX240, MX480, MX960 platforms using MPC10E causes a steady increase in memory utilization, ultimately leading to a Denial of Service DoS. When the device is subscribed to a specific...

CVE-2024-39517: Improper Check for Unusual or Exceptional Conditions

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Layer 2 Address Learning Daemon l2ald on Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause Denial of Service DoS. In an EVPN/VXLAN scenario, when a high amount specific...

CVE-2024-39512: Improper Physical Access Control

An Improper Physical Access Control vulnerability in the console port control of Juniper Networks Junos OS Evolved allows an attacker with physical access to the device to get access to a user account. When the console cable is disconnected, the logged in user is not logged out. This allows a...

CVE-2024-39514: Improper Check or Handling of Exceptional Conditions

An Improper Check or Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. An attacker can send specific traffic to the device, which causes...

CVE-2024-39511: Improper Input Validation

An Improper Input Validation vulnerability in the 802.1X Authentication dot1x Daemon of Juniper Networks Junos OS allows a local, low-privileged attacker with access to the CLI to cause a Denial of Service DoS. On running a specific operational dot1x command, the dot1x daemon crashes. An attacker...

CVE-2024-39562: Missing Release of Resource after Effective Lifetime

A Missing Release of Resource after Effective Lifetime vulnerability the xinetd process, responsible for spawning SSH daemon sshd instances, of Juniper Networks Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial of Service DoS by blocking SSH access for legitimate...

Juniper Junos OS Vulnerability (JSA83017)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA83017 advisory. - An Uncontrolled Resource Consumption vulnerability in the Layer 2 Address Learning Daemon l2ald of Juniper Networks Junos OS Evolved allows an unauthenticated, adjacent...

Juniper Junos OS Vulnerability (JSA82996)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA82996 advisory. - A Missing Release of Memory after Effective Lifetime vulnerability in the Periodic Packet Management Daemon ppmd of Juniper Networks Junos OS and Junos OS Evolved allows a...

Juniper Junos OS Vulnerability (JSA83007)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA83007 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the the IKE daemon iked of Juniper Networks Junos OS on SRX Series, MX Series with SPC3 and NFX350...

Juniper Junos OS Vulnerability (JSA83004)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA83004 advisory. - A Buffer Copy without Checking Size of Input vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows an...

Juniper Junos OS Vulnerability (JSA82997)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA82997 advisory. - An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved on ACX 7000 Series allows an unauthenticated,...