The vulnerability of the JunOS operating system, related to deficiencies in handling exceptional states, allows a perpetrator to trigger a service failure.

The vulnerability of the JunOS operating system is related to deficiencies in handling exceptional states. Exploiting this vulnerability allows a malicious actor to trigger a service failure through a specially crafted BGP UPDATE message...

Juniper Junos Privilege Escalation (JSA10978)

The version of Junos OS installed on the remote host is EX2300, EX2300-C or EX3400 version 18.1R3-S4 or 18.3R1-S3. It is, therefore, affected by a privilege escalation vulnerability as referenced in the JSA10978 advisory. Note that Nessus has not tested for this issue but has instead relied only ...

Juniper Junos DNS filtering JSA11028

According to the self reported version of Junos OS on the remote device is vulnerable to improper input validation. When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets processed by the...

Juniper Junos BGP DoS (JSA11024)

According to the self reported version of Junos OS on the remote device it is affected by a denial of service vulnerability as referenced in the JSA11024 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C Tenab...

Juniper Junos Privilege Escalation Vulnerability (JSA10977)

The version of Junos OS installed on the remote host is NFX prior to 18.2R1. It is, therefore, affected by a privilege escalation vulnerability as referenced in the JSA10977 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Juniper Junos DoS (JSA11020)

The version of Junos OS installed on the remote host is prior to 12.3R12-S15, 12.3X48-D95, 14.1X50-D145, 14.1X53-D47, 15.1R2, 15.1X49-D170, or 15.1X53-D67. It is, therefore, affected by a vulnerability as referenced in the JSA11020 advisory. Note that Nessus has not tested for this issue but has...

Juniper Junos DoS (JSA11006)

The version of Junos OS installed on the remote host is vMX and MX150 prior to 18.1R3, 18.2R3, 18.2X75-D60, 18.3R3, 18.4R2, or 19.1R2. It is, therefore, affected by a denial of service vulnerability DoS as referenced in the JSA11006 advisory. Note that Nessus has not tested for this issue but has...

Junos OS: SRX Series: Unified Access Control (UAC) bypass vulnerability (JSA11018)

The version of Junos OS installed on the remote host is prior to 12.3X48-D100, 15.1X49-D210, 17.3R2-S5, 17.4R2-S9, 18.1R3-S10, 18.2R2-S7, 18.3R1-S7, 18.4R1-S6, 19.1R1-S4, 19.2R1-S3, 19.3R2-S1, or 19.4R1-S1. It is, therefore, affected by a unified access control UAC bypass vulnerability as...

Juniper Junos NFX150 Multiple Vulnerabilities (JSA11026)

According to its self-reported version, the remote Junos OS device is affected by multiple vulnerabilities in the BIOS firmware, including the following: - Logic issue in subsystem in IntelR AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potential...

Junos OS: RPD crash when processing a specific BGP packet (JSA11035)

The version of Junos OS installed on the remote host is affected by a denial of service DoS vulnerability. Processing a specific BGP packet can lead to a routing process daemon RPD crash and restart. This issue can occur even before the BGP session with the peer is established. Repeated receipt o...

Unspecified Vulnerability in Juniper Networks Junos Space and Security Director

Juniper Networks Junos Space and Junos Space Security Director are both products of Juniper Networks, U.S.A. Juniper Networks Junos Space is a network management solution. The solution supports automated configuration, monitoring, and troubleshooting of devices and services throughout their...

Juniper Junos OpenSSL Security Advisory (JSA11025)

According to its self-reported version, the remote Juniper Junos device is affected by a vulnerability in the OpenSSL library. There is an overflow bug in the x6464 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that...

Juniper Junos MX Series PFE Small Packet DoS (JSA11036)

According to its self-reported version, the remote Juniper Junos OS device is affected by a denial of service DoS vulnerability. When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2TP, MAP-E...

Juniper Junos MX Series PFE Large Packet DoS (JSA11041)

According to its self-reported version, the remote Juniper Junos OS device is affected by a denial of service DoS vulnerability. When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2TP, MAP-E...

Juniper Junos MX Series PFE DoS (JSA11038)

According to its self-reported version, the remote Juniper Junos device is affected by a denial of service DoS vulnerability where receipt of a stream of specific Layer 2 frames may cause a memory leak resulting in the packet forwarding engine PFE on the line card to crash and restart, causing...

Juniper Junos RPD Crash DoS (JSA11032)

The version of Junos OS installed on the remote host is prior to 17.2X75-D105.19, 17.3R3-S8, 17.4R2-S10, 18.1R3-S10, 18.2R2-S7, 18.2X75-D13, 18.3R2-S4, 18.4R1-S7, 19.1R1-S5, 19.2R1-S5, 19.3R2-S2, or 19.4R1-S2. It is, therefore, affected by a denial of service vulnerability DoS as referenced in th...

CVE-2020-1655

When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2TP, MAP-E, GRE, and IPIP, the packet forwarding engine PFE will become disabled upon receipt of large packets requiring fragmentation,...

CVE-2020-1655

When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2TP, MAP-E, GRE, and IPIP, the packet forwarding engine PFE will become disabled upon receipt of large packets requiring fragmentation,...

CVE-2020-1654

On Juniper Networks SRX Series with ICAP Internet Content Adaptation Protocol redirect service enabled, processing a malformed HTTP message can lead to a Denial of Service DoS or Remote Code Execution RCE Continued processing of this malformed HTTP message may result in an extended Denial of...

CVE-2020-1648

On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific BGP packet can lead to a routing process daemon RPD crash and restart. This issue can occur even before the BGP session with the peer is established. Repeated receipt of this specific BGP packet can result in an...