CVE-2021-0239 Junos OS Evolved: Denial of Service due to receipt of specific genuine layer 2 frames.

In Juniper Networks Junos OS Evolved, receipt of a stream of specific genuine Layer 2 frames may cause the Advanced Forwarding Toolkit AFT manager process Evo-aftmand, responsible for handling Route, Class-of-Service CoS, Firewall operations within the packet forwarding engine PFE to crash and...

CVE-2021-0238 Junos OS: MX Series: Executing CLI command repetitively may cause the system to run out of disk space

When a MX Series is configured as a Broadband Network Gateway BNG based on Layer 2 Tunneling Protocol L2TP, executing certain CLI command may cause the system to run out of disk space, excessive disk usage may cause other complications. An administrator can use the following CLI command to monito...

CVE-2021-0238

CVE-2021-0238 affects Junos OS on MX Series: repeatedly executing a CLI command may exhaust disk space, causing partial availability impact. Vulnerable versions include MX Series 17.3R1 and newer, up to but not including 17.4R3-S5, then 18.1–20.4 with various sub-versions listed; the issue does n...

CVE-2021-0237 Junos OS: EX4300-MP/EX4600/EX4650/QFX5K Series: Packet Forwarding Engine manager (FXPC) process crashes when deployed in a Virtual Chassis (VC) configuration

On Juniper Networks EX4300-MP Series, EX4600 Series, EX4650 Series, QFX5K Series deployed as a Virtual Chassis with a specific Layer 2 circuit configuration, Packet Forwarding Engine manager FXPC process may crash and restart upon receipt of specific layer 2 frames. Continued receipt and processi...

CVE-2021-0237

Technical details of CVE-2021-0237 are not publicly provided in the connected documents; no concrete root-cause or fix details are included. Monitor for updates from vendors and advisories.

CVE-2021-0236 Junos OS: A specific BGP VPNv6 flowspec message causes routing protocol daemon (rpd) process to crash with a core.

Due to an improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved the Routing Protocol Daemon RPD service, upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, crashes and restarts causing a Denial of...

CVE-2021-0236

The CVE-2021-0236 issue affects Juniper Networks Junos OS and Junos OS Evolved, specifically MP-BGP VPNv6 FlowSpec processing. The root cause is an improper check for unusual or exceptional conditions in the RPD when handling a matching BGP FlowSpec packet, leading to a crash and restart and a su...

CVE-2021-0234

CVE-2021-0234 affects Juniper Networks Junos OS on QFX5100-96S with QFX 5e Series image. The issue is an improper initialization that prevents ddos-protection changes from taking effect beyond default DDoS settings configured via CLI. The ddos-protection (jddosd) daemon keeps the device functioni...

CVE-2021-0234 Junos OS: QFX5100-96S: DDoS protection does not work as expected.

Due to an improper Initialization vulnerability on Juniper Networks Junos OS QFX5100-96S devices with QFX 5e Series image installed, ddos-protection configuration changes will not take effect beyond the default DDoS Distributed Denial of Service settings when configured from the CLI. The DDoS...

CVE-2021-0235 Junos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series: In a multi-tenant environment, a tenant host administrator may configure logical firewall isolation affecting other tenant networks

On SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series devices using tenant services on Juniper Networks Junos OS, due to incorrect permission scheme assigned to tenant system administrators, a tenant system administrator may inadvertently send their network traffic to...

CVE-2021-0235

The CVE-2021-0235 issue affects Juniper Networks Junos OS on SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, and vSRX Series in multi-tenant environments. Root cause: incorrect permission scheme assigned to tenant system administrators, which may allow a tenant admin to misdire...

CVE-2021-0233 Junos OS: ACX500 Series, ACX4000 Series: Denial of Service due to FFEB crash while processing high rate of specific packets.

A vulnerability in Juniper Networks Junos OS ACX500 Series, ACX4000 Series, may allow an attacker to cause a Denial of Service DoS by sending a high rate of specific packets to the device, resulting in a Forwarding Engine Board FFEB crash. Continued receipt of these packets will sustain the Denia...

CVE-2021-0233

CVE-2021-0233 affects Juniper Networks Junos OS on ACX500 Series and ACX4000 Series, where a high rate of specific packets can crash the Forwarding Engine Board (FFEB), causing DoS. Affects 17.4 versions prior to 17.4R3-S2; remediation is to upgrade to 17.4R3-S2 or later (per multiple sources). I...

CVE-2021-0230

CVE-2021-0230 affects Juniper Networks Junos OS on SRX Series devices with link aggregation (lag). When performing operations that fetch AE interface statistics (e.g., SNMP GET), a slow kernel memory leak can consume memory, potentially impacting traffic and requiring a reboot. Affected versions ...

CVE-2021-0231 Junos OS: SRX, vSRX Series: J-Web Path traversal vulnerability in SRX and vSRX Series leads to information disclosure.

A path traversal vulnerability in the Juniper Networks SRX and vSRX Series may allow an authenticated J-web user to read sensitive system files. This issue affects Juniper Networks Junos OS on SRX and vSRX Series: 19.3 versions prior to 19.3R2-S6, 19.3R3-S1; 19.4 versions prior to 19.4R2-S4,...

CVE-2021-0231

CVE-2021-0231 describes a path-traversal information-disclosure vulnerability in Juniper Networks Junos OS on SRX and vSRX Series. An authenticated J-web user can read sensitive system files. Affected versions include Junos OS 19.3 up to 19.3R2-S6 and 19.3R3-S1; 19.4 up to 19.4R2-S4 and 19.4R3; 2...

CVE-2021-0229

CVE-2021-0229 affects Juniper Networks Junos OS MQTT server used by a JET-related application that subscribes to events via a mosquitto broker. The root cause is uncontrolled resource consumption from continued receipt/processing of crafted MQTT packets, leading to a crash/restart and sustained D...

CVE-2021-0227 Junos OS: SRX Series: Denial of Service in J-Web upon receipt of crafted HTTP packets

An improper restriction of operations within the bounds of a memory buffer vulnerability in Juniper Networks Junos OS J-Web on SRX Series devices allows an attacker to cause Denial of Service DoS by sending certain crafted HTTP packets. Continued receipt and processing of these packets will creat...

CVE-2021-0227

CVE-2021-0227 concerns a memory buffer bound-checking issue in Juniper Networks Junos OS J-Web on SRX Series devices that can enable a Denial of Service via crafted HTTP packets. Affected products include Junos OS on SRX Series with the listed version ranges (e.g., 17.3 before 17.3R3-S9; 17.4 bef...

CVE-2021-0228

CVE-2021-0228 affects Juniper Networks Junos OS on MX Series with Trio-based MPC in EVPN-VXLAN deployments. The issue is an improper check for unusual conditions that allows a specific Layer 2 traffic pattern to trigger DoS protection unexpectedly, sustaining a DoS condition through continued rec...