CVE-2018-0029

CVE-2018-0029 affects Junos OS: enabling monitor traffic interface fxp0 in promiscuous mode during a broadcast storm can crash the system (vmcore) on both single-core and multi-core REs. Affected Junos OS versions include 15.1 (and later) with specific builds listed (e.g., 15.1F6-S11, 15.1R4-S9, ...

CVE-2018-0024

This CVE concerns an "Improper Privilege Management" flaw in a shell session of Juniper Networks Junos OS that allows an authenticated, unprivileged user to escalate to root. Affected releases include Junos OS on SRX Series (12.1X46 before 12.1X46-D45, 12.3X48 before 12.3X48-D20, 15.1X49 before 1...

CVE-2018-0031 Junos OS: Receipt of specially crafted UDP packets over MPLS may bypass stateless IP firewall rules

Receipt of specially crafted UDP/IP packets over MPLS may be able to bypass a stateless firewall filter. The crafted UDP packets must be encapsulated and meet a very specific packet format to be classified in a way that bypasses IP firewall filter rules. The packets themselves do not cause a...

CVE-2018-0027

The CVE-2018-0027 issue affects Juniper Networks Junos OS, where receiving a crafted or malformed RSVP PATH message can cause the routing protocol daemon (RPD) to hang or crash. This may prevent processing of routing updates when RPD is unavailable, potentially leading to an extended network outa...

CVE-2018-0035

CVE-2018-0035 affects Juniper QFX5200 and QFX10002 devices shipped with Junos OS 15.1X53-D21 through -D60 (and upgrades to these releases) that may include an unintended extra ONIE partition. This partition enables the superuser to reboot into ONIE, wiping the Junos partition and its configuratio...

CVE-2018-0032

CVE-2018-0032 affects Juniper Networks Junos OS where receiving a crafted BGP UPDATE can crash and restart the routing process daemon (RPD). Repeated identical crafted updates may cause an extended denial-of-service condition. Affected are specific Junos OS releases: 16.1X65 versions before 16.1X...

CVE-2018-0024 Junos OS: A privilege escalation vulnerability exists where authenticated users with shell access can become root

An Improper Privilege Management vulnerability in a shell session of Juniper Networks Junos OS allows an authenticated unprivileged attacker to gain full control of the system. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D45 on SRX Series; 12.3X48 versions...

CVE-2018-0034 Junos OS: A malicious crafted IPv6 DHCP packet may cause the JDHCPD daemon to core

A Denial of Service vulnerability exists in the Juniper Networks Junos OS JDHCPD daemon which allows an attacker to core the JDHCPD daemon by sending a crafted IPv6 packet to the system. This issue is limited to systems which receives IPv6 DHCP packets on a system configured for DHCP processing...

CVE-2018-0026 Junos OS: Stateless IP firewall filter rules stop working as expected after reboot or upgrade

After Junos OS device reboot or upgrade, the stateless firewall filter configuration may not take effect. This issue can be verified by running the command: user@re0 show interfaces extensive | match filters" CAM destination filters: 0, CAM source filters: 0 Note: when the issue occurs, it does n...

CVE-2018-0035 Junos OS: QFX5200 and QFX10002: Unintended ONIE partition was shipped with certain Junos OS .bin and .iso images

QFX5200 and QFX10002 devices that have been shipped with Junos OS 15.1X53-D21, 15.1X53-D30, 15.1X53-D31, 15.1X53-D32, 15.1X53-D33 and 15.1X53-D60 or have been upgraded to these releases using the .bin or .iso images may contain an unintended additional Open Network Install Environment ONIE...

CVE-2018-0035: Undefined Security Weakness

QFX5200 and QFX10002 devices that have been shipped with Junos OS 15.1X53-D21, 15.1X53-D30, 15.1X53-D31, 15.1X53-D32, 15.1X53-D33 and 15.1X53-D60 or have been upgraded to these releases using the .bin or .iso images may contain an unintended additional Open Network Install Environment ONIE...

CVE-2018-0024: Improper Privilege Management

An Improper Privilege Management vulnerability in a shell session of Juniper Networks Junos OS allows an authenticated unprivileged attacker to gain full control of the system. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D45 on SRX Series; 12.3X48 versions...

CVE-2018-0031: Uncontrolled Resource Consumption

Receipt of specially crafted UDP/IP packets over MPLS may be able to bypass a stateless firewall filter. The crafted UDP packets must be encapsulated and meet a very specific packet format to be classified in a way that bypasses IP firewall filter rules. The packets themselves do not cause a...

CVE-2018-0026: Undefined Security Weakness

After Junos OS device reboot or upgrade, the stateless firewall filter configuration may not take effect. This issue can be verified by running the command: user@re0 show interfaces extensive | match filters" CAM destination filters: 0, CAM source filters: 0 Note: when the issue occurs, it does n...

CVE-2018-0027: Improper Input Validation

Receipt of a crafted or malformed RSVP PATH message may cause the routing protocol daemon RPD to hang or crash. When RPD is unavailable, routing updates cannot be processed which can lead to an extended network outage. If RSVP is not enabled on an interface, then the issue cannot be triggered via...

CVE-2018-0029: Uncontrolled Resource Consumption

While experiencing a broadcast storm, placing the fxp0 interface into promiscuous mode via the 'monitor traffic interface fxp0' can cause the system to crash and restart vmcore. This issue only affects Junos OS 15.1 and later releases, and affects both single core and multi-core REs. Releases pri...

CVE-2018-0032: Improper Input Validation

The receipt of a crafted BGP UPDATE can lead to a routing process daemon RPD crash and restart. Repeated receipt of the same crafted BGP UPDATE can result in an extended denial of service condition for the device. This issue only affects the specific versions of Junos OS listed within this...

CVE-2018-0030: Uncontrolled Resource Consumption

Receipt of a specific MPLS packet may cause MPC7/8/9, PTX-FPC3 FPC-P1, FPC-P2 line cards or PTX1K to crash and restart. By continuously sending specific MPLS packets, an attacker can repeatedly crash the line cards or PTX1K causing a sustained Denial of Service. Affected releases are Juniper...

CVE-2018-0034: Improper Input Validation

A Denial of Service vulnerability exists in the Juniper Networks Junos OS JDHCPD daemon which allows an attacker to core the JDHCPD daemon by sending a crafted IPv6 packet to the system. This issue is limited to systems which receives IPv6 DHCP packets on a system configured for DHCP processing...

CVE-2018-0037: Improper Input Validation

Junos OS routing protocol daemon RPD process may crash and restart or may lead to remote code execution while processing specific BGP NOTIFICATION messages. By continuously sending crafted BGP NOTIFICATION messages, an attacker can repeatedly crash the RPD process causing a sustained Denial of...