CVE-2016-1269

CVE-2016-1269 affects Juniper Networks Junos OS prior to various versions (e.g., 12.1X44-D60, 12.3R11, 16.1R1, etc.) and allows remote attackers to cause a denial of service via crafted TCP timestamps, leading to socket exhaustion. The vulnerability is documented with a high impact (CVSS v3 base ...

CVE-2016-1270

Juniper Junos OS rpd daemon is vulnerable to a denial-of-service condition triggered by crafted BGP-based L2VPN/VPLS updates. Affected releases include several 12.x, 13.x, and 14.x trains listed in CVE-2016-1270; when the device is configured for BGP-based L2VPN or VPLS, processing a malformed L2...

CVE-2016-1274

Juniper Junos OS 14.1X53 before 14.1X53-D30 on QFX Series switches allows remote attackers to cause a denial of service PFE panic via a high rate of unspecified VXLAN packets...

CVE-2016-1274

CVE-2016-1274 affects Juniper Networks Junos OS running on QFX Series switches (14.1X53 prior to 14.1X53-D30). A remote attacker can cause a denial of service by sending a high rate of VXLAN packets that trigger a PFE panic. The public records describe the issue in Junos OS/QFX VXLAN handling but...

CVE-2016-1264

The CVE-2016-1264 issue affects Juniper Networks Junos OS, where a race condition in the Op command (through the Op URL option) can allow remote authenticated users to gain elevated privileges. Affected versions span multiple releases across 12.1X, 12.3, 13.2, 13.3, 14.1, 14.2, and 15.x lines (e....

CVE-2016-1273

The CVE-2016-1273 vulnerability affects Juniper Junos OS on QFX5100 and QFX10002 switches (versions before 13.2X51-D40, 14.x before 14.1X53-D30, and 15.x before 15.1X53-D20). The underlying issue is insufficient entropy in cryptographic/encryption and authentication protections, enabling remote a...

CVE-2016-1264

Race condition in the Op command in Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D20, 12.3X50 before 12.3X50-D50, 13.2 before 13.2R8, 13.2X51 before 13.2X51-D39, 13.2X52 before 13.2X52-D30, 13.3 before...

CVE-2016-1271

Juniper Junos OS before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D25, 13.2 before 13.2R8, 13.3 before 13.3R7, 14.1 before 14.1R6, 14.2 before 14.2R4, 15.1 before 15.1R1 or 15.1F2, and 15.1X49 before 15.1X49-D15 allow local users to gain privileges via...

CVE-2016-1271

CVE-2016-1271 affects Juniper Networks Junos OS versions listed (e.g., 12.1X46-D45 and earlier for 12.x, 13.x, 14.x, 15.x ranges) where a local attacker can gain privileges by crafting combinations of CLI commands and arguments. The issue is described as a local privilege escalation in the Junos ...

Juniper Networks Junos OS J-Web Embedthis Software AppWeb Denial of Service Vulnerability

Juniper Networks Junos on SRX Series devices is a network operating system that runs on SRX Series service gateway devices.J-Web is one of the network management tools.Embedthis Software AppWeb is an Embedthis Software Inc. Fast and compact web server. A security vulnerability in Embedthis Softwa...

Juniper Junos RPD Routing Process DoS (JSA10715)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to a flaw in the Label Distribution Protocol LDP implementation. An unauthenticated, remote attacker attacker can exploit this, by sending a specially crafted LDP...

Juniper Junos HTTP Request Handling J-Web DoS (JSA10720)

According to its self-reported version number, the remote Juniper Junos device is affected by denial of service vulnerability due to a flaw in the Embedthis Appweb Server when processing malformed HTTP requests. An unauthenticated, remote attacker can exploit this to crash the J-Web service...

Juniper Junos TKEY Query Handling DoS (JSA10718)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to a flaw in ISC BIND when handling queries for TKEY records. An unauthenticated, remote attacker can exploit this, via crafted TKEY queries, to cause an REQUIRE...

Juniper Junos RTSP Packet Handling flowd DoS (JSA10721)

According to its self-reported version number, the remote Juniper Junos device is affected by denial of service vulnerability due to a flaw in the Real Time Streaming Protocol Application Layer Gateway RTSP ALG implementation. An unauthenticated, remote attacker can exploit this, via a crafted RT...

Juniper Junos Network Topology Loop DoS (JSA10719)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to a flaw in the Spanning Tree Protocol implementation. An unauthenticated, remote attacker can exploit this, via specially crafted packets that create an artificial...

Juniper Networks Junos OS Routing Engine Denial of Service Vulnerability

Juniper Networks Junos on SRX Series devices is a set of network operating systems that run in SRX Series service gateway devices.Routing Engine is one of the routing engine components. The Routing Engine for Juniper Networks Junos OS crashes the RPD routing process when a remote attacker submits...

Juniper Networks Junos IGMPv3 Packet Denial of Service Vulnerability

Juniper Networks Junos on SRX Series devices is a set of network operating systems that run in SRX Series service gateway devices. A security vulnerability exists in the Juniper Networks Junos OS, where a remote attacker submits specially crafted IGMPv3 packets to crash a background program...

Juniper Junos OS Denial of Service Vulnerability (CNVD-2016-00388)

Juniper Networks is a network communications equipment company that supplies IP networking and information security solutions. A denial of service vulnerability exists in Juniper Junos OS, which can be exploited by attackers to cause a denial of service...

Juniper Junos OS Denial of Service Vulnerability

Juniper Networks is a network communications equipment company that supplies IP networking and information security solutions. Juniper Junos OS with RTSP ALG enabled can cause a process crash when processing certain constructed RTSP packets, resulting in a denial of service flowd crash...

Juniper Networks Junos OS Embedthis Appweb Server DoS Vulnerability

Junos OS is prone to a Denial of Service vulnerability with J-Web enabled. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...