CVE-2021-31382: Concurrent Execution using Shared Resource with Improper Synchronization

On PTX1000 System, PTX10002-60C System, after upgrading to an affected release, a Race Condition vulnerability between the chassis daemon chassisd and firewall process dfwd of Juniper Networks Junos OS, may update the device's interfaces with incorrect firewall filters. This issue only occurs whe...

PT-2021-19269

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on QFX5000 and EX4600 Series versions prior to 17.3R3-S12 Juniper Networks Junos OS on QFX5000 and EX4600 Series 17.4 versions prior to 17.4R3-S5 Juniper Networks Junos OS on QFX5000 and EX4600 Series 18.3 versions...

CVE-2021-31359: Improper Privilege Management

A local privilege escalation vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged user to cause the Juniper DHCP daemon jdhcpd process to crash, resulting in a Denial of Service DoS, or execute arbitrary commands as root. Continued processing of malicious...

CVE-2021-31361: Improper Check for Unusual or Exceptional Conditions

An Improper Check for Unusual or Exceptional Conditions vulnerability combined with Improper Handling of Exceptional Conditions in Juniper Networks Junos OS on QFX Series and PTX Series allows an unauthenticated network based attacker to cause increased FPC CPU utilization by sending specific IP...

PT-2021-19264

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS EX4300 Series versions prior to 15.1R7-S7; 16.1 versions prior to 16.1R7-S8; 17.1 versions prior to 17.1R2-S12; 17.2 versions prior to 17.2R3-S4; 17.3 versions prior to 17.3R3-S8; 17.4 versions prior to 17.4R2-S10,...

CVE-2021-31370: Incomplete List of Disallowed Inputs

An Incomplete List of Disallowed Inputs vulnerability in Packet Forwarding Engine PFE of Juniper Networks Junos OS on QFX5000 Series and EX4600 Series allows an adjacent unauthenticated attacker which sends a high rate of specific multicast traffic to cause control traffic received from the netwo...

CVE-2021-31379: Incorrect Behavior Order

An Incorrect Behavior Order vulnerability in the MAP-E automatic tunneling mechanism of Juniper Networks Junos OS allows an attacker to send certain malformed IPv4 or IPv6 packets to cause a Denial of Service DoS to the PFE on the device which is disabled as a result of the processing of these...

PT-2021-19279

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on PTX1000 System versions 17.2R1 through 20.4R2 Juniper Networks Junos OS on PTX10002-60C System versions 18.2R1 through 21.3R2 Description A Race Condition vulnerability between the chassis daemon chassisd and...

PT-2021-19272

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 17.3 through 17.3R3-S10 Juniper Networks Junos OS versions 17.4 through 17.4R2-S12 Juniper Networks Junos OS versions 17.4R3 through 17.4R3-S3 Juniper Networks Junos OS versions 18.1 through 18.1R3-S11 Junipe...

CVE-2021-31356: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability in command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be able to bypass configured access protections to execute arbitrary shell commands within the context of the current user. The vulnerability allows an...

PT-2021-12984

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 20.1R2-EVO Description: A race condition in the 'show chassis pic' command may allow an attacker to crash the port interface concentrator daemon picd process, leading to a Denial of Service...

PT-2021-19263

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2 versions prior to 17.4R3-S5 Juniper Networks Junos OS SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2 18.3 versions prior to...

PT-2021-19256 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 20.4R3-S1-EVO Juniper Networks Junos OS Evolved versions 21.1-EVO and 21.2-EVO Description: A command injection issue in command processing allows an attacker with authenticated CLI access t...

CVE-2021-31383: Stack-based Buffer Overflow

In Point to MultiPoint P2MP scenarios within established sessions between network or adjacent neighbors the improper use of a source to destination copy write operation combined with a Stack-based Buffer Overflow on certain specific packets processed by the routing protocol daemon RPD of Juniper...

PT-2021-19254

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 19.2R3-S3 Juniper Networks Junos OS versions 19.3 prior to 19.3R3-S3 Juniper Networks Junos OS versions 20.1 prior to 20.1R2-S2, 20.1R3-S1 Juniper Networks Junos OS versions 20.2 prior to 20.2R3-S2...

PT-2021-19262

Name of the Vulnerable Software and Affected Versions Junos OS versions 19.2R2 through 19.2R3-S3 Junos OS versions 19.3 through 19.3R2-S6 Junos OS versions 19.3 through 19.3R3-S2 Junos OS versions 19.4 through 19.4R1-S4 Junos OS versions 19.4 through 19.4R2-S4 Junos OS versions 19.4 through...

PT-2021-19280

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 12.3 prior to 12.3R12-S20 Juniper Networks Junos OS versions 15.1 prior to 15.1R7-S11 Juniper Networks Junos OS versions 18.3 prior to 18.3R3-S6 Juniper Networks Junos OS versions 18.4 prior to 18.4R3-S10...

CVE-2021-31385: Improper Limitation of a Pathname to a Restricted Directory

An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in J-Web of Juniper Networks Junos OS allows any low-privileged authenticated attacker to elevate their privileges to root. This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S1...

PT-2021-19257 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 20.3R2-S1-EVO Juniper Networks Junos OS Evolved 20.4 versions prior to 20.4R2-S2-EVO Juniper Networks Junos OS Evolved 21.1 versions prior to 21.1R2-EVO Juniper Networks Junos OS Evolved 21....

CVE-2021-31367: Missing Release of Memory after Effective Lifetime

A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on PTX Series allows an adjacent attacker to cause a Denial of Service DoS by sending genuine BGP flowspec packets which cause an FPC heap memory leak. Once having r...