CVE-2023-28967 Junos OS and Junos OS Evolved: An attacker sending genuine BGP packets causes an RPD crash

A Use of Uninitialized Resource vulnerability in the Border Gateway Protocol BGP software of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to send specific genuine BGP packets to a device configured with BGP to cause a Denial of Service DoS by...

Juniper Networks Junos OS Evolved authorization issue vulnerability

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. Juniper Networks Junos OS Evolved suffers from an authorization issue vulnerability that arises from improper authorization in the "sysmanctl" shell command, which could be exploited by an attacker to execute...

Juniper Networks Junos OS security vulnerabilities

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability in Juniper Networks Junos OS, which arises from an inconsistent length parameter in...

Juniper Networks Junos OS code-related vulnerabilities

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS QFX10002, which is caused by improperly checkin...

Juniper Networks Junos OS code-related vulnerabilities

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. An authorization issue vulnerability exists in Juniper Networks Junos OS, which is caused by improper authentication in th...

Juniper Networks Junos OS Evolved security vulnerabilities

Juniper Networks Junos OS Evolved is an updated version of Juniper Networks' Junos OS. A security vulnerability exists in Juniper Networks Junos OS Evolved, which can be exploited by a local, low-privileged user with shell access to execute CLI commands as root, and affects the following products...

Juniper Networks Junos OS security vulnerabilities

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in the Juniper Networks Junos OS ACX series, which is caused by mishandling ...

Juniper Networks Junos OS security vulnerabilities

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability in the Juniper Networks Junos OS AppID service on SRX Series devices, which arises from an...

Juniper Networks Junos OS code-related vulnerabilities

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A code issue vulnerability exists in the Juniper Networks Junos OS MX Series that arises from an exception o...

Juniper Networks Junos OS Evolved security vulnerabilities

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS system. A security vulnerability in Juniper Networks Junos OS Evolved, which arises from an incorrect assignment of critical resource permissions, can be exploited by an attacker to copy a potentially malicious...

Juniper Networks Junos OS resource management error vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS has a resource management error vulnerability that stems from the presence of a...

Juniper Networks Junos OS Evolved operating system command injection vulnerability

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. Juniper Networks Junos OS Evolved suffers from an operating system command injection vulnerability that stems from the presence of an operating system command injection vulnerability that can be exploited by a...

Juniper Networks Junos OS Evolved security vulnerabilities

Juniper Networks Junos OS Evolved is an updated version of Juniper Networks' Junos OS. A security vulnerability in Juniper Networks Junos OS Evolved, which arises from an insecure default resource initialization, can be exploited by an attacker to gain access to certain confidential information a...

Juniper Networks Junos OS security vulnerabilities

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS has a security vulnerability that originates from a missing memory release...

CVE-2023-28960

CVE-2023-28960 concerns Juniper Networks Junos OS Evolved. The issue is an incorrect permission assignment for a critical resource that lets a local, authenticated, low-privileged user copy potentially malicious files into an existing Docker container on the local system. A follow-on administrato...

CVE-2023-28970 Junos OS: JRR200: Kernel crash upon receipt of a specific packet

An Improper Check or Handling of Exceptional Conditions vulnerability in packet processing on the network interfaces of Juniper Networks Junos OS on JRR200 route reflector appliances allows an adjacent, network-based attacker sending a specific packet to the device to cause a kernel crash,...

CVE-2023-28960: Incorrect Permission Assignment for Critical Resource

An Incorrect Permission Assignment for Critical Resource vulnerability in Juniper Networks Junos OS Evolved allows a local, authenticated low-privileged attacker to copy potentially malicious files into an existing Docker container on the local system. A follow-on administrator could then...

CVE-2023-28979

CVE-2023-28979 affects Juniper Networks Junos OS kernels across multiple branches, enabling an adjacent attacker to bypass an integrity check in 6PE scenarios when an additional integrity check is configured. The issue causes specific malformed IPv6 packets to fail the integrity check and be forw...

CVE-2023-28965

CVE-2023-28965 targets Juniper Networks Junos OS on QFX10002, caused by an improper check/handling in the storm control feature. A high rate of traffic can trigger a sustained DoS as storm control drops packets when thresholds are exceeded. Affected versions include: 19.3R3-S7 and earlier; 19.4R3...

CVE-2023-28976: Improper Check for Unusual or Exceptional Conditions

An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine pfe of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. If specific traffic is received on MX Series and its rate exceeds...