PT-2021-12952

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 17.3R3-S11 Juniper Networks Junos OS versions prior to 17.4R3-S4 Juniper Networks Junos OS versions prior to 18.1R3-S12 Juniper Networks Junos OS versions prior to 18.2R3-S7 Juniper Networks Junos O...

PT-2021-12963

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 17.2R1 through 18.3R3-S4 Juniper Networks Junos OS versions 18.4 through 18.4R2-S5 Juniper Networks Junos OS versions 18.4R3 through 18.4R3-S5 Juniper Networks Junos OS versions 19.1 through 19.1R1-S3 Junipe...

PT-2021-12968

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on QFX5K Series versions 17.3 through 17.3R3-S11 Juniper Networks Junos OS on QFX5K Series versions 17.4 through 17.4R3-S5 Juniper Networks Junos OS on QFX5K Series versions 18.1 through 18.1R3-S13 Juniper Networks...

CVE-2021-0272: Missing Release of Memory after Effective Lifetime

A kernel memory leak in QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016 devices Flexible PIC Concentrators FPCs on Juniper Networks Junos OS allows an attacker to send genuine packets destined to the device to cause a Denial of Service DoS to the device. On QFX10002-32Q, QFX10002-60C...

CVE-2021-0260: Improper Authorization

An improper authorization vulnerability in the Simple Network Management Protocol daemon snmpd service of Juniper Networks Junos OS leads an unauthenticated attacker being able to perform SNMP read actions, an Exposure of System Data to an Unauthorized Control Sphere, or write actions to OIDs tha...

CVE-2021-0254: Incorrect Calculation of Buffer Size

A buffer size validation vulnerability in the overlayd service of Juniper Networks Junos OS may allow an unauthenticated remote attacker to send specially crafted packets to the device, triggering a partial Denial of Service DoS condition, or leading to remote code execution RCE. Continued receip...

CVE-2021-0253: Improper Neutralization of Special Elements used in a Command

NFX Series devices using Juniper Networks Junos OS are susceptible to a local command execution vulnerability thereby allowing an attacker to elevate their privileges via the Junos Device Management Daemon JDMD process. This issue affects Juniper Networks Junos OS on NFX Series 17.2 version 17.2R...

CVE-2021-0237: Undefined Security Weakness

On Juniper Networks EX4300-MP Series, EX4600 Series, EX4650 Series, QFX5K Series deployed as a Virtual Chassis with a specific Layer 2 circuit configuration, Packet Forwarding Engine manager FXPC process may crash and restart upon receipt of specific layer 2 frames. Continued receipt and processi...

CVE-2021-0268: Improper Neutralization of CRLF Sequences in HTTP Headers

An Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Response Splitting' weakness in J-web of Juniper Networks Junos OS leads to buffer overflows, segment faults, or other impacts, which allows an attacker to modify the integrity of the device and exfiltration information from the...

CVE-2021-0235: Incorrect Default Permissions

On SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series devices using tenant services on Juniper Networks Junos OS, due to incorrect permission scheme assigned to tenant system administrators, a tenant system administrator may inadvertently send their network traffic to...

PT-2021-12967

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 17.2 through 17.2R3-S4 Juniper Networks Junos OS versions 17.3 through 17.3R3-S9 Juniper Networks Junos OS versions 17.4 through 17.4R2-S11, 17.4R3-S2 Juniper Networks Junos OS versions 18.1 through 18.1R3-S...

PT-2021-12961

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 17.4R1 through 17.4R2-S6, 17.4R3 Juniper Networks Junos OS versions 18.1 through 18.1R3-S7 Juniper Networks Junos OS versions 18.2 through 18.2R2-S6, 18.2R3-S3 Juniper Networks Junos OS versions 18.3 through...

CVE-2021-0258: Concurrent Execution using Shared Resource with Improper Synchronization

A vulnerability in the forwarding of transit TCPv6 packets received on the Ethernet management interface of Juniper Networks Junos OS allows an attacker to trigger a kernel panic, leading to a Denial of Service DoS. Continued receipt and processing of these transit packets will create a sustained...

CVE-2021-0270: Concurrent Execution using Shared Resource with Improper Synchronization

On PTX Series and QFX10k Series devices with the "inline-jflow" feature enabled, a use after free weakness in the Packet Forwarding Engine PFE microkernel architecture of Juniper Networks Junos OS may allow an attacker to cause a Denial of Service DoS condition whereby one or more Flexible PIC...

PT-2021-12978

Name of the Vulnerable Software and Affected Versions: Junos OS versions 18.1R2 through 18.1R3-S10 Description: A use after free weakness in the Packet Forwarding Engine PFE microkernel architecture of Juniper Networks Junos OS may allow an attacker to cause a Denial of Service DoS condition,...

CVE-2021-0242: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability due to the improper handling of direct memory access DMA buffers on EX4300 switches on Juniper Networks Junos OS allows an attacker sending specific unicast frames to trigger a Denial of Service DoS condition by exhausting DMA buffers, causing the FPC to crash and the device to...

PT-2021-12950

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 20.4R1-EVO Description: The issue is caused by the receipt of a specific stream of genuine Layer 2 frames, which may crash the Advanced Forwarding Toolkit AFT manager process, leading to a...

CVE-2021-0264: Improper Check or Handling of Exceptional Conditions

A vulnerability in the processing of traffic matching a firewall filter containing a syslog action in Juniper Networks Junos OS on MX Series with MPC10/MPC11 cards installed, PTX10003 and PTX10008 Series devices, will cause the line card to crash and restart, creating a Denial of Service DoS...

CVE-2021-0225: Improper Check for Unusual or Exceptional Conditions

An Improper Check for Unusual or Exceptional Conditions in Juniper Networks Junos OS Evolved may cause the stateless firewall filter configuration which uses the action 'policer' in certain combinations with other options to not take effect. An administrator can use the following CLI command to s...

CVE-2021-0236: Improper Check for Unusual or Exceptional Conditions

Due to an improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved the Routing Protocol Daemon RPD service, upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, crashes and restarts causing a Denial of...