CVE-2023-22415 Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash when specific H.323 packets are received

An Out-of-Bounds Write vulnerability in the H.323 ALG of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service DoS. On all MX Series and SRX Series platform, when H.323 ALG is enabled and specific H.323 packets are received simultaneously, a flow...

CVE-2023-22417 Junos OS: SRX Series: A memory leak might be observed in IPsec VPN scenario leading to an FPC crash

A Missing Release of Memory after Effective Lifetime vulnerability in the Flow Processing Daemon flowd of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service DoS. In an IPsec VPN environment, a memory leak will be seen if a DH or ECDH group is...

CVE-2023-22406 Junos OS and Junos OS Evolved: A memory leak which will ultimately lead to an rpd crash will be observed when a peer interface flaps continuously in a Segment Routing scenario using OSPF

A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS. In a segment-routing scenario with OSPF as IGP, when a peer interface continuously flap...

CVE-2023-22402

CVE-2023-22402 is a Use After Free in the Junos OS Evolved kernel that can cause a Denial of Service in NSR when a BGP neighbor flap occurs while bgp auto-discovery is enabled. Affected: Juniper Junos OS Evolved 21.3 before 21.3R3-EVO; 21.4 before 21.4R2-EVO; 22.1 before 22.1R2-EVO; 22.2 before 2...

CVE-2023-22395

CVE-2023-22395 describes a Missing Release of Memory after Effective Lifetime vulnerability in Juniper Networks Junos OS. An unauthenticated, adjacent attacker can cause a Denial of Service by sending specific MPLS-scoped packets to an IRB interface, triggering a buffer (mbuf) leak. Sustained tra...

CVE-2023-22411

CVE-2023-22411 – Junos OS flowd DoS via IPv6 filter path . An out-of-bounds write in the Flow Processing Daemon (flowd) on SRX Series Junos OS can crash flowd and restart the PFE, allowing a network-based attacker to induce a DoS without authentication. Affected releases (SRX Series with Unified ...

CVE-2023-22408

CVE-2023-22408 affects Juniper Networks Junos OS on SRX 5000 Series. The vulnerability is an improper validation of an array index in the SIP ALG, triggered by specific SIP packets with malformed SDP fields. This can allow a network-based, unauthenticated attacker to cause a Denial of Service by ...

Juniper Junos OS Vulnerability (JSA70198)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70198 advisory. - A Use After Free vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS...

Juniper Junos OS Vulnerability (JSA70210)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70210 advisory. - A Missing Release of Memory after Effective Lifetime vulnerability in Flexible PIC Concentrator FPC of Juniper Networks Junos OS allows an adjacent, unauthenticated attack...

Juniper Junos OS Vulnerability (JSA70211)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70211 advisory. - An Out-of-Bounds Write vulnerability in the H.323 ALG of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service DoS...

Juniper Junos OS Vulnerability (JSA70191)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70191 advisory. - A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated, adjacent attacker to cause a Denia...

Juniper Junos OS Vulnerability (JSA70208)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70208 advisory. - An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series with MS-MPC or MS-MIC card and SRX Series allows an unauthenticated, network-bas...

PT-2023-3054 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 21.1 through 21.1R3-S4 Juniper Networks Junos OS versions 21.2 through 21.2R3-S3 Juniper Networks Junos OS versions 21.3 through 21.3R3-S2 Juniper Networks Junos OS versions 21.4 through 21.4R2-S2, 21.4R3...

PT-2023-1292 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 15.1 through 15.1R7-S11 Juniper Networks Junos OS versions 19.1 through 19.1R3-S8 Juniper Networks Junos OS versions 19.2 through 19.2R1-S8 Juniper Networks Junos OS versions 19.2R3 through 19.2R3-S4 Juniper...

PT-2023-1291 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.3R3-S7 Juniper Networks Junos OS versions 19.4 prior to 19.4R2-S8, 19.4R3-S9 Juniper Networks Junos OS versions 20.2 prior to 20.2R3-S5 Juniper Networks Junos OS versions 20.3 prior to 20.3R3-S5...

PT-2023-1289 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 18.4R2-S7 Juniper Networks Junos OS versions 19.1 prior to 19.1R3-S2 Juniper Networks Junos OS versions 19.2 prior to 19.2R3 Juniper Networks Junos OS versions 19.3 prior to 19.3R3 Juniper Networks...

PT-2023-1061 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 19.3R3-S7 Junos OS versions 19.4 prior to 19.4R3-S9 Junos OS versions 20.2 prior to 20.2R3-S5 Junos OS versions 20.3 prior to 20.3R3-S5 Junos OS versions 20.4 prior to 20.4R3-S4 Junos OS versions 21.1 prior to...

PT-2023-1060 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 19.3R3-S7 Junos OS 19.4 versions prior to 19.4R3-S9 Junos OS 20.1 version 20.1R1 and later versions Junos OS 20.2 versions prior to 20.2R3-S5 Junos OS 20.3 versions prior to 20.3R3-S5 Junos OS 20.4 versions prior to...

PT-2023-3067 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 12.3R12-S19 through 22.3R2 Juniper Networks Junos OS versions 15.1R7-S10 through 22.3R2 Juniper Networks Junos OS versions 17.3R3-S12 through 22.3R2 Juniper Networks Junos OS versions 18.4R3-S9 through 22.3R...

PT-2023-3065 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions 21.3 prior to 21.3R3-EVO Juniper Networks Junos OS Evolved versions 21.4 prior to 21.4R2-EVO Juniper Networks Junos OS Evolved versions 22.1 prior to 22.1R2-EVO Juniper Networks Junos OS Evolved...