CVE-2021-31353

Summary : CVE-2021-31353 is a vulnerability in Juniper Networks Junos OS and Junos OS Evolved where processing a crafted BGP update can crash the Routing Protocol Daemon (RPD), causing a DoS. The issue is tied to an improper handling of exceptional conditions and affects specific Ju nis OS/Junos ...

CVE-2021-31351

CVE-2021-31351 affects Juniper Networks Junos OS on MX Series where MS-MPC/MS-MIC packet processing can trigger a reset and sustained DoS due to an improper check for unusual or exceptional conditions. The affected versions span numerous releases (e.g., 17.3R3-S11 through 21.1R1) with prior relea...

CVE-2021-31350 Junos OS and Junos OS Evolved: Privilege escalation vulnerability in Juniper Extension Toolkit (JET)

An Improper Privilege Management vulnerability in the gRPC framework, used by the Juniper Extension Toolkit JET API on Juniper Networks Junos OS and Junos OS Evolved, allows a network-based, low-privileged authenticated attacker to perform operations as root, leading to complete compromise of the...

CVE-2021-31350

CVE-2021-31350 affects Juniper Junos OS and Junos OS Evolved via the Juniper Extension Toolkit (JET) gRPC API. The issue stems from jsd authenticating a user and passing configuration operations to mgd (root-owned), enabling network-based, low-privilege attackers to perform root-level operations....

CVE-2021-0299 Junos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet

An Improper Handling of Exceptional Conditions vulnerability in the processing of a transit or directly received malformed IPv6 packet in Juniper Networks Junos OS results in a kernel crash, causing the device to restart, leading to a Denial of Service DoS. Continued receipt and processing of thi...

CVE-2021-0299

This CVE (CVE-2021-0299) affects Juniper Networks Junos OS and is triggered by processing malformed IPv6 packets. A kernel crash occurs, restarting the device and causing a Denial of Service (DoS); sustained DoS can follow with continued malformed packets. Affected are IPv6-enabled devices runnin...

CVE-2021-0298

A race condition in the show chassis pic command can crash the port interface concentrator daemon (picd) on the FPC, causing DoS when the CLI is executed under certain system events. Affected: Juniper Networks Junos OS Evolved prior to 20.1R2-EVO on PTX10003/PTX10008. Junos OS (non-Evolved) is no...

CVE-2021-0297 Junos OS Evolved: BGP and LDP sessions with TCP MD5 authentication established with peers not configured for authentication

A vulnerability in the processing of TCP MD5 authentication in Juniper Networks Junos OS Evolved may allow a BGP or LDP session configured with MD5 authentication to succeed, even if the peer does not have TCP MD5 authentication enabled. This could lead to untrusted or unauthorized sessions being...

CVE-2021-0297

The CVE-2021-0297 issue affects Juniper Networks Junos OS Evolved: TCP MD5 authentication processing may allow a BGP/LDP session with MD5 enabled to succeed against a peer that is not configured for MD5. Affected are Junos OS Evolved versions prior to 20.3R2-S1-EVO, 20.4 prior to 20.4R2-EVO, and ...

PT-2021-19273 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 12.3R12-S18 Juniper Networks Junos OS versions prior to 15.1R7-S9 Juniper Networks Junos OS versions prior to 17.2R3-S3 Juniper Networks Junos OS versions prior to 17.3R3-S7 Juniper Networks Junos O...

PT-2021-19258 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 20.4R2-S2-EVO Juniper Networks Junos OS Evolved version 21.1 versions prior to 21.1R2-EVO Juniper Networks Junos OS Evolved version 21.2 versions prior to 21.2R1-S1-EVO, 21.2R2-EVO...

PT-2021-19256 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 20.4R3-S1-EVO Juniper Networks Junos OS Evolved versions 21.1-EVO and 21.2-EVO Description: A command injection issue in command processing allows an attacker with authenticated CLI access t...

PT-2021-19257 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 20.3R2-S1-EVO Juniper Networks Junos OS Evolved 20.4 versions prior to 20.4R2-S2-EVO Juniper Networks Junos OS Evolved 21.1 versions prior to 21.1R2-EVO Juniper Networks Junos OS Evolved 21....

PT-2021-19259 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 15.1R7-S10 Juniper Networks Junos OS versions prior to 17.4R3-S5 Juniper Networks Junos OS versions prior to 18.3R3-S5 Juniper Networks Junos OS versions prior to 18.4R3-S9 Juniper Networks Junos OS...

PT-2021-19260 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on QFX Series versions prior to 17.3R3-S11 Juniper Networks Junos OS on QFX Series versions 17.4 prior to 17.4R2-S13, 17.4R3-S4 Juniper Networks Junos OS on QFX Series versions 18.1 prior to 18.1R3-S12 Juniper Networ...

Juniper Networks Junos OS Access Control Error Vulnerability

Juniper Networks Junos OS is a network operating system from Juniper Networks, Inc. for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS is vulnerable to an access control error, which results from a specific...

Vulnerabilities fixed in Juniper Junos OS

Vulnerabilities have been fixed in Juniper Junos OS. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Cross-Site Scripting XSS. Denial-of-Service DoS. Remote code execution User Rights Increased user rights Juniper...

CVE-2021-31358

A command injection vulnerability in sftp command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be able to bypass configured access protections to execute arbitrary shell commands within the context of the current user. The vulnerability allow...

CVE-2021-31355

A persistent cross-site scripting XSS vulnerability in the captive portal graphical user interface of Juniper Networks Junos OS may allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a web administration session, possibly tricking a...

CVE-2021-31377

An Incorrect Permission Assignment for Critical Resource vulnerability of a certain file in the filesystem of Junos OS allows a local authenticated attacker to cause routing process daemon RPD to crash and restart, causing a Denial of Service DoS. Repeated actions by the attacker will create a...