Juniper Networks Junos OS libgd Heap Overflow Vulnerability

Junos OS is prone to a heap overflow vulnerability in libgd which allows remote attackers to cause a denial of service or potentially execute arbitrary code. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Juniper Networks Junos OS MPLS DoS Vulnerability

Junos OS is prone to a denial of service vulnerability in rpd when receiving a malformed MPLS ping packet. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Juniper Networks Releases Junos OS Security Advisory

Juniper Networks has released a security advisory that addresses a vulnerability in Junos OS. A remote attacker could exploit this vulnerability to cause a denial-of-service condition. US-CERT encourages users and administrators to review the Juniper Security Advisory and apply necessary updates...

The vulnerability of the UserFW component of the Junos operating system, which allows a hacker to gain access to the device

The vulnerability of the UserFW component used to facilitate easy implementation of user profiles through existing firewall policies in the Junos operating system exists due to the rigid encoding of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely...

Juniper Junos User Authentication Bypass (JSA10802)

According to its self-reported version number, the remote Juniper Junos device is affected by an authentication bypass vulnerability due to a specific device configuration that can result in a commit failure condition, which allows a user to be logged in without being prompted for a password. A...

Juniper Junos PHP multiple vulnerabilities (JSA10804)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by multiple vulnerabilities in the included PHP version : - An unspecified flaw exists in the SQLite extension that allows an unauthenticated, remote attacker to bypass the 'openbasedir'...

Juniper Junos sendmsg Local Privilege Escalation (JSA10797)

According to its self-reported version number, the remote Juniper Junos device is affected by a heap-based buffer overflow condition in the sendmsg system call, specifically due to incorrect handling of arguments in the sockargs function in sys/kern/uipcsyscalls.c. A local attacker can exploit th...

Juniper Junos jdhcpd IPv6 UDP DoS (JSA10800)

According to its self-reported version and model number, the remote Juniper Junos device is affected by a denial of service vulnerability in the jdhcpd daemon when handling invalid IPv6 UDP packets. An unauthenticated, remote attacker can exploit this, via specially crafted IPv6 UDP packets, to...

Juniper Junos SRX, vSRX, and J-Series ISC BIND DoS (JSA10799)

According to its self-reported version and model number, the remote Juniper Junos device is affected by a denial of service vulnerability in ISC BIND, specifically in the queryfind function within file bin/named/query.c, when simultaneously using DNS64 and RPZ for query responses. An...

Juniper Junos SRX Cluster Synchronization Failover Errors (JSA10806)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by a flaw in the handling of cluster synchronization and failover operations whenever the root account has been locked out. An unauthenticated, remote attacker can exploit this, via a seri...

Juniper Junos libgd Compressed GD2 Data RCE (JSA10798)

According to its self-reported version number, the remote Juniper Junos device is affected by an integer signedness error in the included GD Graphics Library libgd when handling compressed GD2 data due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit...

Juniper Junos CLI XML Privilege Escalation (JSA10805)

According to its self-reported version number, the remote Juniper Junos device is affected by a privilege escalation vulnerability in the CLI component due to improper validation of user-supplied input before being processed as XML content. A local attacker can exploit this, via XML injection, to...

Juniper Junos CLI Local Privilege Escalation (JSA10803)

According to its self-reported version number, the remote Juniper Junos device is affected by an unspecified buffer overflow condition in the CLI component that allows a local attacker who has read-only privileges to execute arbitrary code with root privileges. C Tenable Network Security, Inc...

Juniper Junos SRX IDP Remote Command Injection (JSA10801)

According to its self-reported version and model number, the remote Juniper Junos device is affected by a remote command injection vulnerability in the IDP feature due to improper validation of user-supplied input. An authenticated, remote attacker can exploit this to execute arbitrary shell...

The vulnerability of the Junos operating system, allowing a hacker to inject code into the root directory

The vulnerability of the Junos operating system arises from buffer overflows. Exploiting this vulnerability allows a local attacker, who has only read access and permission to the Junos CLI configuration, to inject code into the root directory, thereby enhancing their privileges...

Juniper vSRX and SRX Series Appliances Junos OS Denial of Service Vulnerability

Juniper vSRX and SRX are both products of Juniper Networks, Inc. vSRX is a firewall emulator. srx is a firewall appliance. junos OS is one of the operating systems. dhcp is one of the dynamic host configuration protocols. A security vulnerability exists in Junos OS versions 12.1X46, 12.3X48, and...

Juniper MX Series Appliance Junos OS ALG Denial of Service Vulnerability

Juniper MX Series is an MX Series router from Juniper Networks, Inc.Junos OS is the operating system used in the Juniper MX Series. A security vulnerability exists in the Junos OS in Juniper MX Series devices. A remote attacker could send packet fragments through the Application Layer Gateway ALG...

Juniper SRX Series Appliance Junos OS Denial of Service Vulnerability

Juniper SRX Series devices are an SRX Series gateway device from Juniper Networks, Inc.Junos OS is the operating system used in them. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in the cluster mode of Junos OS versions 12.1X46,...

Junos OS MPLS ping packet denial of service vulnerability

Juniper Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Junos OS. A remote attacker could exploit this vulnerability by sending special...

Junos OS Elevation of Privilege Vulnerability in Multiple Juniper Products

Juniper QFX5110 series and others are products of Juniper Networks, Inc. The QFX5110 series is a series of Ethernet switches; the Juniper vSRX series is a series of firewall emulator products; and the SRX1500 series is a series of firewall appliances. Junos OS is one of the operating systems. A...