CVE-2021-0290 Junos OS: MX Series, EX9200 Series, SRX4600: Ethernet interface vulnerable to specially crafted frames

Improper Handling of Exceptional Conditions in Ethernet interface frame processing of Juniper Networks Junos OS allows an attacker to send specially crafted frames over the local Ethernet segment, causing the interface to go into a down state, resulting in a Denial of Service DoS condition. The...

CVE-2021-0290

The CVE-2021-0290 issue is a Junos OS vulnerability where specially crafted Ethernet frames can cause an interface to permanently go down, leading to a DoS. Affected are MX Series, EX9200 Series, and SRX4600 devices with specific platform families and Junos OS versions listed in the CVE details (...

CVE-2021-0289 Junos OS: User-defined ARP Policer isn't applied on Aggregated Ethernet (AE) interface until firewall process is restarted

When user-defined ARP Policer is configured and applied on one or more Aggregated Ethernet AE interface units, a Time-of-check Time-of-use TOCTOU Race Condition vulnerability between the Device Control Daemon DCD and firewall process dfwd daemons of Juniper Networks Junos OS allows an attacker to...

CVE-2021-0289

The CVE-2021-0289 issue in Juniper Junos OS is a TOCTOU race condition between the Device Control Daemon (DCD) and the firewall process (dfwd) that can bypass a user-defined ARP Policer on AE interfaces. Affected software includes Junos OS across multiple releases (from 5.6R1 up to but excluding ...

CVE-2021-0288 Junos OS: MX Series, EX9200 Series: FPC may crash upon receipt of specific MPLS packet affecting Trio-based MPCs

A vulnerability in the processing of specific MPLS packets in Juniper Networks Junos OS on MX Series and EX9200 Series devices with Trio-based MPCs Modular Port Concentrators may cause FPC to crash and lead to a Denial of Service DoS condition. Continued receipt of this packet will sustain the...

CVE-2021-0288

CVE-2021-0288 affects Juniper Junos OS on MX Series and EX9200 Series with Trio-based MPCs. The vulnerability stems from how specific MPLS packets are processed, potentially causing the FPC to crash and triggering a DoS if packets continue to arrive. Affected versions are listed in the core CVE d...

CVE-2021-0287

CVE-2021-0287 affects Juniper Networks Junos OS and Junos OS Evolved in SR-ISIS/MPLS with ISIS Flexible Algorithm and sensor-based statistics. A flap of an ISIS link can crash and restart the RPD, causing Denial of Service (DoS). Affected versions include Junos OS: 19.4 prior to 19.4R1-S4 and 19....

CVE-2021-0286

CVE-2021-0286 affects Juniper Networks Junos OS Evolved (EVO). A vulnerability in handling of exceptional conditions can be triggered by specially crafted packets, causing the evo-aftmand-bt or evo-aftmand-zx process to crash and restart, which disrupts all traffic through the FPC and leads to a ...

CVE-2021-0286 Junos OS Evolved: Specially crafted packets may cause the AFT manager process to crash and restart

A vulnerability in the handling of exceptional conditions in Juniper Networks Junos OS Evolved EVO allows an attacker to send specially crafted packets to the device, causing the Advanced Forwarding Toolkit manager evo-aftmand-bt or evo-aftmand-zx process to crash and restart, impacting all traff...

CVE-2021-0285 Junos OS: QFX5000 Series and EX4600 Series: Continuous traffic destined to a device configured with MC-LAG leading to nodes losing their control connection which can impact traffic

An uncontrolled resource consumption vulnerability in Juniper Networks Junos OS on QFX5000 Series and EX4600 Series switches allows an attacker sending large amounts of legitimate traffic destined to the device to cause Interchassis Control Protocol ICCP interruptions, leading to an unstable...

CVE-2021-0285

CVE-2021-0285 describes an uncontrolled resource consumption vulnerability in Juniper Networks Junos OS on QFX5000 Series and EX4600 Series switches. The issue allows an attacker to send large volumes of legitimate traffic to a device, causing ICCP interruptions and an unstable MC-LAG control con...

CVE-2021-0283

CVE-2021-0283 is a buffer overflow in Juniper Networks Junos OS TCP/IP stack that enables DoS by sending crafted packets to the device. According to the sources, affected Junos OS versions include 12.3 before 12.3R12-S19; 15.1 before 15.1R7-S10; 16.1 (R1 and later), 16.2 (R1 and later), 17.1 (R1 ...

CVE-2021-0282

CVE-2021-0282 – Junos OS DoS via BGP UPDATE with Multipath/add-path enabled . Affects Juniper’s Junos OS where Multipath/add-path is enabled; processing a specific BGP UPDATE can crash and restart the routing process daemon (RPD), causing a DoS. Sustained receipt of the UPDATE can propagate the D...

CVE-2021-0281 Junos OS and Junos OS Evolved: Specific packets can trigger rpd crash when BGP Origin Validation is configured with RPKI

On Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure RPKI receipt of a specific packet from the RPKI cache server may cause routing process daemon RPD to crash and restart, creating a Denial of Service DoS condition. Continued receipt...

CVE-2021-0281

CVE-2021-0281 affects Juniper Networks Junos OS and Junos OS Evolved. A crafted BGP origin validation/ RPki packet from the RPKI cache server can crash and restart the routing process daemon (RPD), causing a DoS. Affected releases include Junos OS 17.3 (before 17.3R3-S12), 17.4 (before 17.4R3-S5)...

CVE-2021-0280

CVE-2021-0280 affects Juniper Junos OS on PTX and QFX10K with Paradise (PE) chipset line cards. Root cause: Improper initialization in the DDoS policer path of the Packet Forwarding Engine, causing ddos-protection CLI changes to not apply beyond default DDoS settings. Impact: BFD session flapping...

CVE-2021-0278 Junos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.

An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated attacker to escalate their privileges to root over the target device. junos:18.3R3-S5 junos:18.4R3-S9 junos:19.1R3-S6 junos:19.3R2-S6 junos:19.3R3-S3 junos:19.4R1-S4 junos:19.4R3-S4...

CVE-2021-0278

CVE-2021-0278 is an Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS that allows a locally authenticated attacker to escalate to root. Affected Junos OS versions include 19.3R1 and later (various 19.3/19.4/20.x/21.x releases listed in sources). The connected documents...

CVE-2021-0277

Summary (CVE-2021-0277): An out-of-bounds read in the Layer 2 Control Protocol Daemon (l2cpd) of Juniper Networks Junos OS and Junos OS Evolved can cause DoS and may lead to remote code execution when processing crafted LLDP frames. Affected: Junos OS versions prior to listed fixed releases (e.g....

Vulnerabilities fixed in Juniper products

Juniper has fixed vulnerabilities in Junos OS, Junos OS Evolved and PTX, QTX, MX, EX9200 and SRX4600 devices. The vulnerabilities potentially enable a malicious party to launch attacks leading to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Remote...