CVE-2021-0258

CVE-2021-0258 describes a DoS vulnerability in Juniper Networks Junos OS where forwarding of transit TCPv6 packets on the Ethernet management interface can trigger a kernel panic. The issue arose from a TCP Parallelization feature introduced in Junos OS 17.2, active by default with concurrent net...

CVE-2021-0258 Junos OS: Kernel panic upon receipt of specific TCPv6 packet on management interface

A vulnerability in the forwarding of transit TCPv6 packets received on the Ethernet management interface of Juniper Networks Junos OS allows an attacker to trigger a kernel panic, leading to a Denial of Service DoS. Continued receipt and processing of these transit packets will create a sustained...

CVE-2021-0259 Junos OS and Junos OS Evolved: QFX5K Series: Underlay network traffic might not be processed upon receipt of high rate of specific genuine overlay packets in VXLAN scenario

Due to a vulnerability in DDoS protection in Juniper Networks Junos OS and Junos OS Evolved on QFX5K Series switches in a VXLAN configuration, instability might be experienced in the underlay network as a consequence of exceeding the default ddos-protection aggregate threshold. If an attacker on ...

CVE-2021-0259

CVE-2021-0259 affects Juniper Networks Junos OS and Junos OS Evolved on QFX5K Series switches in VXLAN configurations. The issue arises from DDoS protection logic, where an improperly detected DDoS violation can cause a leaf to drop processing of certain L2 traffic from spines in the underlay, al...

CVE-2021-0257 Junos OS: MX Series, EX9200 Series: Trio-based MPCs memory leak in VPLS with integrated routing and bridging (IRB) interface

On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPCs Modular Port Concentrators where Integrated Routing and Bridging IRB interfaces are configured and mapped to a VPLS instance or a Bridge-Domain, certain Layer 2 network events at Customer Edge CE devices may cause memo...

CVE-2021-0257

CVE-2021-0257 affects Juniper Junos OS on MX Series and EX9200 Series with Trio-based MPCs where IRB interfaces are mapped to a VPLS or Bridge-Domain. The issue is a memory leak in the MPC that can lead to an out-of-memory condition and an MPC restart, causing temporary traffic interruptions. Aff...

CVE-2021-0255 Junos OS: ethtraceroute Local Privilege Escalation vulnerability in SUID binaries

A local privilege escalation vulnerability in ethtraceroute of Juniper Networks Junos OS may allow a locally authenticated user with shell access to escalate privileges and write to the local filesystem as root. ethtraceroute is shipped with setuid permissions enabled and is owned by the root use...

CVE-2021-0255

CVE-2021-0255 describes a local privilege-escalation in Juniper Junos OS due to ethtraceroute (a setuid root binary) which can be exploited by a locally authenticated user with shell access to gain root privileges and write to the local filesystem. Affected Junos OS versions span multiple branche...

CVE-2021-0256

CVE-2021-0256 affects Juniper Junos OS (mosquitto component) where a locally authenticated user with shell access can read sensitive files (e.g., master.passwd) due to mosquitto running with setuid root. The issue affects multiple Junos OS releases listed in the CVE description (e.g., 17.3R3-S12 ...

CVE-2021-0254

CVE-2021-0254 affects Juniper Networks Junos OS, where a buffer size validation issue in the overlayd service (Overlay OAM) can be triggered by unauthenticated, specially crafted UDP packets to port 4789, potentially causing partial DoS or remote code execution. The overlayd daemon runs as root a...

CVE-2021-0254 Junos OS: Remote code execution vulnerability in overlayd service

A buffer size validation vulnerability in the overlayd service of Juniper Networks Junos OS may allow an unauthenticated remote attacker to send specially crafted packets to the device, triggering a partial Denial of Service DoS condition, or leading to remote code execution RCE. Continued receip...

CVE-2021-0252 Junos OS: NFX Series: Local Code Execution Vulnerability in JDMD Leads to Privilege Escalation

NFX Series devices using Juniper Networks Junos OS are susceptible to a local code execution vulnerability thereby allowing an attacker to elevate their privileges via the Junos Device Management Daemon JDMD process. This issue affects Juniper Networks Junos OS on NFX Series: 18.1 version 18.1R1...

CVE-2021-0253

CVE-2021-0253 : A local command execution vulnerability in Juniper Junos OS on the NFX Series can allow privilege escalation via the Junos Device Management Daemon (JDMD). Affected are NFX Series devices with Junos OS versions starting at 17.2R1 (17.2 up to 17.2R1) and later, with specific exclus...

CVE-2021-0253 Junos OS: NFX Series: Local Command Execution Vulnerability in JDMD Leads to Privilege Escalation

NFX Series devices using Juniper Networks Junos OS are susceptible to a local command execution vulnerability thereby allowing an attacker to elevate their privileges via the Junos Device Management Daemon JDMD process. This issue affects Juniper Networks Junos OS on NFX Series 17.2 version 17.2R...

CVE-2021-0252

CVE-2021-0252 affects Juniper Networks Junos OS on NFX Series devices. The issue is a local code execution vulnerability via the Junos Device Management Daemon (JDMD) that can lead to privilege escalation. Affected: NFX Series with Junos OS 18.1R1 and later versions prior to 18.2R3-S5; 18.3 versi...

CVE-2021-0251 Junos OS: MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC: The BRAS Subscriber Services service activation portal is vulnerable to a Denial of Service (DoS) via malformed HTTP packets

A NULL Pointer Dereference vulnerability in the Captive Portal Content Delivery CPCD services daemon cpcd of Juniper Networks Junos OS on MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC allows an attacker to send malformed HTTP packets to the device thereby causing a Denial of Service DoS,...

CVE-2021-0251

CVE-2021-0251 describes a NULL pointer dereference in Juniper Networks Junos OS CPCD daemon (cpcd) on MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC. The flaw allows an attacker to send malformed HTTP packets that crash mspmand and related services, causing a sustained DoS and login denial whil...

CVE-2021-0250 Junos OS and Junos OS Evolved: An attacker sending a specific crafted BGP update message will crash RPD

In segment routing traffic engineering SRTE environments where the BGP Monitoring Protocol BMP feature is enable, a vulnerability in the Routing Protocol Daemon RPD process of Juniper Networks Junos OS allows an attacker to send a specific crafted BGP update message causing the RPD service to cor...

CVE-2021-0249 Junos OS: SRX Series: A remote attacker may be able to cause a PFE buffer overflow to arbitrarily remotely execute code or commands on the target device with UTM enabled.

On SRX Series devices configured with UTM services a buffer overflow vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS may allow an attacker to arbitrarily execute code or commands on the target to take over or otherwise impact the device by sending crafted packets to...

CVE-2021-0250

CVE-2021-0250 is a vulnerability in Juniper Networks Junos OS (and Junos OS Evolved) where, in SRTE/BGP monitoring contexts, processing a crafted BGP update message can cause the Routing Protocol Daemon (RPD) to core, leading to a DoS. Affected: Junos OS versions 17.4R1 and later before 17.4R2-S6...