CVE-2023-28970 Junos OS: JRR200: Kernel crash upon receipt of a specific packet

An Improper Check or Handling of Exceptional Conditions vulnerability in packet processing on the network interfaces of Juniper Networks Junos OS on JRR200 route reflector appliances allows an adjacent, network-based attacker sending a specific packet to the device to cause a kernel crash,...

CVE-2023-28979 Junos OS: In a 6PE scenario upon receipt of a specific IPv6 packet an integrity check fails

An Improper Check for Unusual or Exceptional Conditions vulnerability in the kernel of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to bypass an integrity check. In a 6PE scenario and if an additional integrity check is configured, it will fail to drop specific malformed...

Juniper Networks Junos OS 资源管理错误漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS has a resource management error vulnerability that stems from the presence of a...

CVE-2023-28981: Improper Input Validation

An Improper Input Validation vulnerability in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. If the receipt of router advertisements is enabled on an interface and a specifically malformed RA packet is...

CVE-2023-28962 Junos OS: Unauthenticated access vulnerability in J-Web

An Improper Authentication vulnerability in upload-file.php, used by the J-Web component of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to upload arbitrary files to temporary folders on the device. This issue affects Juniper Networks Junos OS: All versions prior to...

CVE-2023-1697: Improper Handling of Missing Values

An Improper Handling of Missing Values vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause a dcpfe process core and thereby a Denial of Service DoS. Continued receipt of these specific frames will cause a sustained...

CVE-2023-28976 Junos OS: MX Series: If a specific traffic rate goes above the DDoS threshold it will lead to an FPC crash

An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine pfe of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. If specific traffic is received on MX Series and its rate exceeds...

CVE-2023-28960: Incorrect Permission Assignment for Critical Resource

An Incorrect Permission Assignment for Critical Resource vulnerability in Juniper Networks Junos OS Evolved allows a local, authenticated low-privileged attacker to copy potentially malicious files into an existing Docker container on the local system. A follow-on administrator could then...

CVE-2023-28968: Improperly Controlled Sequential Memory Allocation

An Improperly Controlled Sequential Memory Allocation vulnerability in the Juniper Networks Deep Packet Inspection-Decoder JDPI-Decoder Application Signature component of Junos OS's AppID service on SRX Series devices will stop the JDPI-Decoder from identifying dynamic application traffic, allowi...

CVE-2023-28973: Improper Authorization

An Improper Authorization vulnerability in the 'sysmanctl' shell command of Juniper Networks Junos OS Evolved allows a local, authenticated attacker to execute administrative commands that could impact the integrity of the system or system availability. Administrative functions such as daemon...

CVE-2023-28959

The CVE-2023-28959 entry affects Juniper Networks Junos OS on QFX10002. The issue is an improper check/handling of exceptional conditions in packet processing, triggered by a specially malformed packet sent by an unauthenticated, adjacent attacker on the local broadcast domain. Exploitation wedge...

CVE-2023-28968

CVE-2023-28968 : An Improperly Controlled Sequential Memory Allocation in the JDPI-Decoder Application Signature (part of Junos OS AppID) can cause the JDPI-Decoder to stop identifying dynamic application traffic, allowing unauthenticated network-based traffic to pass through. Affected components...

CVE-2023-28967: Use of Uninitialized Resource

A Use of Uninitialized Resource vulnerability in the Border Gateway Protocol BGP software of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to send specific genuine BGP packets to a device configured with BGP to cause a Denial of Service DoS by...

CVE-2023-28976 Junos OS: MX Series: If a specific traffic rate goes above the DDoS threshold it will lead to an FPC crash

An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine pfe of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. If specific traffic is received on MX Series and its rate exceeds...

CVE-2023-28982

CVE-2023-28982 affects Juniper Networks Junos OS and Junos OS Evolved. In a BGP rib sharding scenario, updating an active route’s attribute can cause a memory leak in the routing protocol daemon (rpd), leading to increased memory usage, a subsequent out-of-memory condition, and a DoS through rpd ...

Juniper Networks Junos OS 安全漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability in Juniper Networks Junos OS, which arises from an inconsistent length parameter in...

PT-2023-22054 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on ACX Series versions prior to 20.2R3-S7 Juniper Networks Junos OS on ACX Series version 20.4 versions prior to 20.4R3-S4 Juniper Networks Junos OS on ACX Series version 21.1 versions prior to 21.1R3-S3 Juniper...

CVE-2023-28961

CVE-2023-28961 affects Juniper Networks Junos OS on ACX Series devices. The vulnerability arises in IPv6 firewall filter processing where a filter term using from next-header ah cannot be installed in the packet forwarding engine (PFE) due to an unsupported IP-protocol (51) match, potentially all...

CVE-2023-28980 Junos OS and Junos OS Evolved: In a BGP rib sharding scenario an rpd crash will happen shortly after a specific CLI command is issued

A Use After Free vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause Denial of Service DoS. In a rib sharding scenario the rpd process will crash shortly after specific CLI command is...

CVE-2023-28984

CVE-2023-28984 describes a Use-After-Free in Juniper Networks Junos OS, specifically in the Layer 2 Address Learning Manager (l2alm) of the QFX Series. The underlying issue is a race condition involving shared resources and improper synchronization, which can cause the Packet Forwarding Engine (P...