CVE-2019-0075

The CVE-2019-0075 issue affects Juniper Networks Junos OS on SRX Series, specifically the srxpfe process when handling Protocol Independent Multicast (PIM) messages. A vulnerable state can cause the srxpfe process to crash and trigger an FPC reboot, potentially leading to an extended denial-of-se...

CVE-2019-0054 Junos OS: SRX Series: An attacker may be able to perform Man-in-the-Middle (MitM) attacks during app-id signature updates.

An Improper Certificate Validation weakness in the SRX Series Application Identification app-id signature update client of Juniper Networks Junos OS allows an attacker to perform Man-in-the-Middle MitM attacks which may compromise the integrity and confidentiality of the device. This issue affect...

CVE-2019-0057 NFX Series: An attacker may be able to take control of the JDM application and subsequently the entire system.

An improper authorization weakness in Juniper Networks Junos OS allows a local authenticated attacker to bypass regular security controls to access the Junos Device Manager JDM application and take control of the system. This issue affects: Juniper Networks Junos OS versions prior to 18.2R1,...

CVE-2019-0060 Junos OS: SRX Series: flowd process crash due to processing of specific transit IP packets

The flowd process, responsible for forwarding traffic in SRX Series services gateways, may crash and restart when processing specific transit IP packets through an IPSec tunnel. Continued processing of these packets may result in an extended Denial of Service DoS condition. This issue only occurs...

CVE-2019-0061

CVE-2019-0061 describes a local privilege-escalation flaw in Junos OS where a misconfigured internal unix-domain socket in the management daemon (MGD) can allow a local, authenticated user to gain administrative privileges. Affected are Linux-based Junos deployments (FreeBSD unaffected); exploita...

CVE-2019-0050

CVE-2019-0050 affects Juniper Junos OS on SRX1500; the srxpfe process can crash under heavy traffic, causing DoS and potential traffic-forwarding failure. Affected releases include 15.1X49 (before D170), 17.3 (before R3-S7), 17.4 (before R2-S8, R3), 18.1 (before R3-S8), 18.2 (before R3), 18.3 (be...

CVE-2019-0051

CVE-2019-0051 affects Juniper Junos OS on SRX5000 Series. The SSL-Proxy feature cannot handle a hardware resource limitation, allowing a remote SSL/TLS server to crash the flowd daemon when clients protected by an SRX initiate a connection to a malicious server. This can yield an extended DoS con...

CVE-2019-0067

The vulnerability CVE-2019-0067 affects Juniper Junos OS on MC-LAG-enabled devices. A crafted link-local IPv6 packet destined to the RE can cause a kernel crash (vmcore), leading to a prolonged DoS. Affected: Junos OS 16.1 before 16.1R6-S2 and 16.1R7; 16.2 before 16.2R2-S10; 17.1 before 17.1R3. N...

CVE-2019-0057

CVE-2019-0057 : Juniper Junos OS has an improper authorization vulnerability that allows a local authenticated attacker to bypass security controls and take control of the Junos Device Manager (JDM). Affected: Junos OS versions prior to 18.2R1 and 18.2X75-D5. Documents confirm local vector with h...

CVE-2019-0066

CVE-2019-0066 affects Juniper Junos OS NG-mVPN: an unexpected status return value in the NG-mVPN service can be triggered by a crafted malformed IPv4 packet, allowing an unauthenticated remote attacker to cause a Denial of Service by core-dumping the routing protocol daemon (rpd). Impact is a DoS...

CVE-2019-0059

CVE-2019-0059 describes a memory leak in Junos OS routing protocol process (rdp) that can cause a Denial of Service when specific BGP state commands are received from a peered host. Affected are Junos OS 18.1 versions prior to 18.1R2-S4 and 18.1R3-S1; and 18.1X75 all versions. Versions before 18....

CVE-2019-0064

CVE-2019-0064 affects Juniper Networks Junos OS on SRX5000 Series devices. The issue arises when a crafted TCP packet is received that matches the configuration command set security zones security-zone tcp-rst, causing the flowd process to crash and restart, with potential extended DoS if a cont...

CVE-2019-0062

CVE-2019-0062 describes a session-fixation vulnerability in Juniper Junos OS J-Web that can allow an attacker to fix and hijack a web session and potentially gain administrative access. Affected products and versions include Juniper EX Series running Junos OS 12.3 before 12.3R12-S15; SRX Series 1...

CVE-2019-0054

CVE-2019-0054 refers to an Improper Certificate Validation weakness in Juniper Networks Junos OS, specifically the SRX Series app-id signature update client. The vulnerability allows a remote attacker to perform a Man-in-the-Middle (MitM) attack, potentially compromising integrity and confidentia...

CVE-2019-0069

The CVE-2019-0069 issue affects Juniper Junos OS on multiple platforms (vSRX, SRX1500/4000, QFX5100/5200/10K, QFX5110, NFX, ACX5000, EX4600, SRX4000, etc.) running a Linux Host OS, where console management port authentication credentials are written to a log file in clear text. The vulnerability ...

CVE-2019-0068

CVE-2019-0068 affects Juniper Networks Junos OS on SRX Series, where the SRX flowd process may crash and restart when handling specific multicast packets. A remote, unauthenticated attacker can trigger a sustained Denial of Service by repeatedly sending the crafted multicast traffic, causing the ...

CVE-2019-0065 Junos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC

On MX Series, when the SIP ALG is enabled, receipt of a certain malformed SIP packet may crash the MS-PIC component on MS-MIC or MS-MPC. By continuously sending a crafted SIP packet, an attacker can repeatedly bring down MS-PIC on MS-MIC/MS-MPC causing a sustained Denial of Service. This issue...

CVE-2019-0065

Junos OS on MX Series is affected by CVE-2019-0065 due to a malformed SIP packet that, when the SIP ALG is enabled, can crash the MS-PIC component on MS-MIC or MS-MPC and cause a sustained DoS. Affected releases include MX Series across multiple track versions prior to fixed builds: 16.1R7-S5, 16...

CVE-2019-0058 Junos OS: SRX Series: A weakness in the Veriexec subsystem may allow privilege escalation.

A vulnerability in the Veriexec subsystem of Juniper Networks Junos OS allowing an attacker to fully compromise the host system. A local authenticated user can elevate privileges to gain full control of the system even if they are specifically denied access to perform certain actions. This issue...

CVE-2019-0051 SRX5000 Series: Denial of Service vulnerability in SSL-Proxy feature.

SSL-Proxy feature on SRX devices fails to handle a hardware resource limitation which can be exploited by remote SSL/TLS servers to crash the flowd daemon. Repeated crashes of the flowd daemon can result in an extended denial of service condition. For this issue to occur, clients protected by the...