PT-2023-4148 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.3R3-S10 Juniper Networks Junos OS versions 20.1 prior to 20.1R3-S4 Juniper Networks Junos OS versions 20.2 prior to 20.2R3-S6 Juniper Networks Junos OS versions 20.3 prior to 20.3R3-S6 Juniper...

Juniper Networks’ Junos OS DoS

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS is related to the assignment of the zero pointer. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Juniper Networks Junos OS Evolved DoS

The vulnerability of Juniper Networks Junos OS Evolved operating system is related to improper handling of requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

J-Web Interface File Disclosure

The vulnerability of the J-Web interface in Juniper Networks Junos OS systems is related to incorrect authentication. Exploiting this vulnerability allows a remote attacker to read arbitrary files...

Juniper Networks’ Junos OS Evolved Command Injection

The vulnerability of the command-line interface CLI of Juniper Networks’ Junos OS Evolved operating system is related to the improper assignment of access rights to critical resources. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

Security Bulletin: Multiple security vulnerabilities affecting Watson Knowledge Catalog for IBM Cloud Pak for Data

Summary Multiple security vulnerabilities impacting Watson Knowledge Catalog for IBM Cloud Pak for Data. These vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2023-0842 DESCRIPTION: xml2js could allow a remote attacker to execute arbitrary code on the system, caused by a...

Juniper Networks Routing Protocol Daemon DoS

The vulnerability of the Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems relates to operations involving resources after their expiration. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Juniper Networks’ Junos OS DoS

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS stems from incorrect checking of specified indices, positions, or offsets in input data. Exploiting this vulnerability can allow a malicious actor to trigger service failures remotely...

Juniper Networks Junos OS Authorization Bypass

The vulnerability of Juniper Networks’ Junos OS is related to improper authorization. Exploiting this vulnerability allows a malicious actor to bypass Juniper’s Deep Packet Inspection JDPI rules and gain access to unauthorized networks or resources...

packeIO daemon Junos OS Evolved DoS

The vulnerability of the packeIO daemon in the Juniper Networks Junos OS Evolved devices of models PTX10003, PTX10004, and PTX10008 is related to improper checking of unusual or exceptional conditions. Exploiting this vulnerability can allow a malicious actor to trigger service failures remotely...

Juniper Networks SNMPD DoS

The vulnerability of packeIO in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to insufficient handling of exceptional conditions. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Juniper Junos OS Vulnerability (JSA71542)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA71542 advisory. An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based...

Juniper Networks J-Web Interface File Upload

The vulnerability of the J-Web interface in Juniper Networks Junos OS systems is related to improper authentication. Exploiting this vulnerability allows a malicious actor, who lacks valid authentication, to upload arbitrary files to temporary directories on the device...

PT-2023-6155 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 20.4R3-S8 Juniper Networks Junos OS versions 21.1R1 and later versions Juniper Networks Junos OS versions prior to 21.2R3-S5 Juniper Networks Junos OS versions prior to 21.3R3-S4 Juniper Networks...

Juniper Networks Junos OS Packet Forwarding Engine DoS

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS on EX4300-MP, EX4600, and QFX5000 devices is related to uncontrolled memory allocation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Juniper Networks Releases Security Advisory for Junos OS and Junos OS Evolved

Juniper Networks has released a security advisory that addresses a vulnerability in Junos OS and Junos OS Evolved. A remote attacker could exploit this vulnerability to cause a denial-of-service condition. CISA encourages users and administrators to review the Juniper Security Advisory for...

Vulnerability fixed in Juniper JunOS

Juniper has fixed a vulnerability in JunOS. A unauthenticated malicious person could exploit the vulnerability to cause cause a denial-of-service. The vulnerability is in the way BGP traffic is handled. In specific circumstances, a BGP update can result in the disconnection of the connection...

Juniper Networks Packet Forwarding Engine DoS

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS for EX2300 and EX3400 series devices is related to the lack of coordination between independent representations of the general state. Exploiting this vulnerability can allow attackers to cause service...

Juniper Networks Routing Protocol Demon DoS

The vulnerability of the Routing Protocol Demon rpd in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to memory release errors, as well as unlimited resource allocation. Exploiting this vulnerability can allow an attacker to trigger a service failure by executing a...

Routing Protocol Demon DoS

The vulnerability of the routing protocol demon rpd in JunOS and JunOS Evolved is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted BGP request remotely...