CVE-2020-1683: Missing Release of Memory after Effective Lifetime

On Juniper Networks Junos OS devices, a specific SNMP OID poll causes a memory leak which over time leads to a kernel crash vmcore. Prior to the kernel crash other processes might be impacted, such as failure to establish SSH connection to the device. The administrator can monitor the output of t...

CVE-2020-1679: Improper Input Validation

On Juniper Networks PTX and QFX Series devices with packet sampling configured using tunnel-observation mpls-over-udp, sampling of a malformed packet can cause the Kernel Routing Table KRT queue to become stuck. KRT is the module within the Routing Process Daemon RPD that synchronized the routing...

CVE-2020-1668: Uncontrolled Resource Consumption

On Juniper Networks EX2300 Series, receipt of a stream of specific multicast packets by the layer2 interface can cause high CPU load, which could lead to traffic interruption. This issue occurs when multicast packets are received by the layer 2 interface. To check if the device has high CPU load...

CVE-2020-1680: Incorrect Calculation of Buffer Size

On Juniper Networks MX Series with MS-MIC or MS-MPC card configured with NAT64 configuration, receipt of a malformed IPv6 packet may crash the MS-PIC component on MS-MIC or MS-MPC. This issue occurs when a multiservice card is translating the malformed IPv6 packet to IPv4 packet. An unauthenticat...

CVE-2020-1662: Improper Input Validation

On Juniper Networks Junos OS and Junos OS Evolved devices, BGP session flapping can lead to a routing process daemon RPD crash and restart, limiting the attack surface to configured BGP peers. This issue only affects devices with BGP damping in combination with accepted-prefix-limit configuration...

PT-2020-14879

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS Evolved versions 18.4R1-EVO through 20.2R1-EVO Description The system console configuration option 'log-out-on-disconnect' fails to log out an active CLI session when the console cable is disconnected, potentially...

PT-2020-5509

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on SRX Series and NFX Series versions prior to 12.3X48-D105 Juniper Networks Junos OS on SRX Series and NFX Series versions prior to 15.1X49-D190 Juniper Networks Junos OS on SRX Series and NFX Series versions prior t...

CVE-2020-1672: Improper Input Validation

On Juniper Networks Junos OS devices configured with DHCPv6 relay enabled, receipt of a specific DHCPv6 packet might crash the jdhcpd daemon. The jdhcpd daemon automatically restarts without intervention, but continuous receipt of specific crafted DHCP messages will repeatedly crash jdhcpd, leadi...

Vulnerability fixed in Juniper Junos OS for PTX and QFX

Juniper Networks has fixed a vulnerability in Junos OS for the PTX and QTX platforms. An unauthenticated malicious person at remote user could potentially exploit the vulnerability to cause a Denial-of-Service attack. To do this, rogue network traffic should be sent to the vulnerable device. Only...

Vulnerabilities fixed in Juniper Junos OS

Juniper Networks has fixed several vulnerabilities in Junos OS. A malicious person, whether remotely authenticated or not, could potentially exploit these vulnerabilities to carry out attacks leading to the following categories of damage: Cross-Site Scripting XSS. Denial-of-Service DoS...

PT-2020-5144

Name of the Vulnerable Software and Affected Versions Junos OS on SRX Series versions prior to 12.3X48-D90 Junos OS on SRX Series versions prior to 15.1X49-D190 Junos OS on SRX Series versions prior to 17.4R2-S9, 17.4R3 Junos OS on SRX Series versions prior to 18.1R3-S9 Junos OS on SRX Series...

PT-2020-4367

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 17.2R3-S4 Junos OS versions prior to 17.2X75-D102 Junos OS versions prior to 17.2X75-D110 Junos OS versions prior to 17.3R3-S8 Junos OS versions prior to 17.4R2-S11 Junos OS versions prior to 17.4R3-S2 Junos OS...

PT-2020-6119

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1R7-S7 Junos OS versions prior to 15.1X53-D593 Junos OS versions prior to 16.1R7-S8 Junos OS versions prior to 17.2R3-S4 Junos OS versions prior to 17.3R3-S6 Junos OS versions prior to 17.4R2-S11 Junos OS versions...

PT-2020-5146

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 17.2R3-S3 through 20.1R1-S1 Juniper Networks Junos OS versions 17.3R3-S3 through 17.3R3-S7 Juniper Networks Junos OS versions 17.4R2-S4 through 17.4R2-S9 Juniper Networks Junos OS versions 17.4R3 through...

PT-2020-5145

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 17.3R3-S8 Juniper Networks Junos OS versions prior to 18.3R3-S1 Juniper Networks Junos OS versions prior to 18.4R3 Juniper Networks Junos OS versions prior to 19.1R3 Juniper Networks Junos OS version...

PT-2020-5152

Name of the Vulnerable Software and Affected Versions Junos versions 17.4R3 through 19.4R1-S3 Description The issue is related to a memory leak caused by a specific SNMP OID poll, which can lead to a kernel crash over time. This may also impact other processes, such as establishing SSH connection...

PT-2020-5148

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 17.3 prior to 17.3R3-S9 Juniper Networks Junos OS versions 17.4 prior to 17.4R2-S11, 17.4R3-S2, 17.4R3-S3 Juniper Networks Junos OS versions 18.1 prior to 18.1R3-S11 Juniper Networks Junos OS versions 18.2...

PT-2020-5149

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 17.4R2-S12 Juniper Networks Junos OS versions prior to 17.4R3-S3 Juniper Networks Junos OS versions prior to 18.1R3-S11 Juniper Networks Junos OS versions prior to 18.2R3-S6 Juniper Networks Junos OS...

PT-2020-5151 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on PTX/QFX Series versions prior to 17.2X75-D105 Juniper Networks Junos OS on PTX/QFX Series versions prior to 18.1R3-S11 Juniper Networks Junos OS on PTX/QFX Series versions prior to 18.2R3-S5 Juniper Networks Junos...

PT-2020-5150

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 18.1R3-S1 Juniper Networks Junos OS versions prior to 18.2R3-S5 Juniper Networks Junos OS versions prior to 18.3R2-S4, 18.3R3-S2 Juniper Networks Junos OS versions prior to 18.4R2-S5, 18.4R3-S2 Junip...