CVE-2019-0063 Junos OS: MX Series: jdhcpd crash when receiving a specific crafted DHCP response message

When an MX Series Broadband Remote Access Server BRAS is configured as a Broadband Network Gateway BNG with DHCPv6 enabled, jdhcpd might crash when receiving a specific crafted DHCP response message on a subscriber interface. The daemon automatically restarts without intervention, but continuous...

CVE-2019-0070 Junos OS: NFX Series: An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions.

An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions to take control of other portions of the NFX platform they should not be able to access, and execute commands outside their authorized scope of control. This leads to the attacker being able to ta...

CVE-2019-0063

CVE-2019-0063 concerns Juniper Networks Junos OS on MX Series BRAS configured as BNG with DHCPv6 enabled, where a specifically crafted DHCP response on a subscriber interface can crash the jdhcpd daemon. The crash triggers an automatic restart, but repeated crafted messages may cause an extended ...

CVE-2019-0056

Juniper Networks Junos OS on MX480/MX960/MX2008/MX2010/MX2020 is affected by CVE-2019-0056. The vulnerability is an Insufficient Resource Pool in OSPF that lets an attacker drive OSPF states to Down, causing a DoS affecting all IPv4/IPv6 traffic routed by OSPF. Exploitation requires a high rate o...

CVE-2019-0066 Junos OS: A malformed IPv4 packet received by Junos in an NG-mVPN scenario may cause the routing protocol daemon (rpd) process to core

An unexpected status return value weakness in the Next-Generation Multicast VPN NG-mVPN service of Juniper Networks Junos OS allows attacker to cause a Denial of Service DoS condition and core the routing protocol daemon rpd process when a specific malformed IPv4 packet is received by the device...

CVE-2019-0061 Junos OS: Insecure management daemon (MGD) configuration may allow local privilege escalation

The management daemon MGD is responsible for all configuration and management operations in Junos OS. The Junos CLI communicates with MGD over an internal unix-domain socket and is granted special permission to open this protected mode socket. Due to a misconfiguration of the internal socket, a...

CVE-2019-0064 Junos OS: SRX5000 Series: flowd process crash due to receipt of specific TCP packet

On SRX5000 Series devices, if 'set security zones security-zone tcp-rst' is configured, the flowd process may crash when a specific TCP packet is received by the device and triggers a new session. The process restarts automatically. However, receipt of a constant stream of these TCP packets may...

CVE-2019-0070

CVE-2019-0070 affects Juniper Networks Junos OS on NFX Series prior to 18.2R1. The issue is an improper input validation weakness that allows a local attacker to elevate privileges and take control of the entire system. Affected component: Junos OS on NFX Series; root cause: input validation fail...

CVE-2019-0056 Junos OS: MX Series: An MPC10 Denial of Service (DoS) due to OSPF states transitioning to Down, causes traffic to stop forwarding through the device.

This issue only affects devices with three 3 or more MPC10's installed in a single chassis with OSPF enabled and configured on the device. An Insufficient Resource Pool weakness allows an attacker to cause the device's Open Shortest Path First OSPF states to transition to Down, resulting in a...

CVE-2019-0059 Junos OS: The routing protocol process (rpd) may crash and generate core files upon receipt of specific valid BGP states from a peered host.

A memory leak vulnerability in the of Juniper Networks Junos OS allows an attacker to cause a Denial of Service DoS to the device by sending specific commands from a peered BGP host and having those BGP states delivered to the vulnerable device. This issue affects: Juniper Networks Junos OS: 18.1...

CVE-2019-0050 Junos OS: SRX1500: Denial of service due to crash of srxpfe process under heavy traffic conditions.

Under certain heavy traffic conditions srxpfe process can crash and result in a denial of service condition for the SRX1500 device. Repeated crashes of the srxpfe can result in an extended denial of service condition. The SRX device may fail to forward traffic when this condition occurs. Affected...

CVE-2019-0047 Junos OS: Persistent XSS vulnerability in J-Web

A persistent Cross-Site Scripting XSS vulnerability in Junos OS J-Web interface may allow remote unauthenticated attackers to perform administrative actions on the Junos device. Successful exploitation requires a Junos administrator to first perform certain diagnostic actions on J-Web. This issue...

CVE-2019-0069 Junos OS: vSRX, SRX1500, SRX4K, ACX5K, EX4600, QFX5100, QFX5110, QFX5200, QFX10K and NFX Series: console management port device authentication credentials are logged in clear text

On EX4600, QFX5100 Series, NFX Series, QFX10K Series, QFX5110, QFX5200 Series, QFX5110, QFX5200, QFX10K Series, vSRX, SRX1500, SRX4000 Series, vSRX, SRX1500, SRX4000, QFX5110, QFX5200, QFX10K Series, when the user uses console management port to authenticate, the credentials used during device...

CVE-2019-0060

The vulnerability CVE-2019-0060 affects Juniper Junos OS on SRX Series where the flowd process may crash and restart while processing specific transit IP packets through an IPSec tunnel, potentially causing a Denial of Service (DoS). Affected versions include Junos OS 15.1X49 prior to 15.1X49-D17...

CVE-2019-0058

CVE-2019-0058 affects Juniper Networks Junos OS Veriexec subsystem on SRX Series: versions 12.3X48 prior to 12.3X48-D80 are vulnerable. A locally authenticated user can elevate privileges to gain full control of the system. The issue is documented across multiple feeds (including NVD and Nessus e...

CVE-2019-0047

CVE-2019-0047 is a reported persistent XSS vulnerability in the Junos OS J-Web interface. The description and connected sources confirm that remote attackers could leverage J-Web to perform administrative actions after a prerequisite diagnostic action by a Junos administrator. Affected are Junipe...

CVE-2019-0055

CVE-2019-0055 affects Juniper Networks Junos OS SIP ALG flowd. The issue allows an unauthenticated attacker to cause a Denial of Service by sending specific valid SIP traffic to the device, triggering the flowd process to crash and generate a core dump while processing SIP ALG traffic. Continued ...

Juniper Junos CVE-2019-0061 Local Privilege Escalation Vulnerability

Description Juniper Junos is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. The following versions of Juniper Junos are affected: Junper Junos 15.1X49 versions prior to 15.1X49-D171 and 15.1X49-D180 Junper Junos 15.1X53...

Juniper Junos CVE-2019-0054 Certificate Validation Security Weakness

Description Juniper Junos is prone to a security weakness. An attacker can exploit this issue to perform man-in-the-middle attacks and perform certain unauthorized actions, which will aid in further attacks. Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D120 are vulnerable...

Juniper Junos CVE-2019-0063 Denial of Service Vulnerability

Description Juniper Junos is prone to a denial-of-service vulnerability. An attacker may exploit this issue to cause denial-of-service conditions. Technologies Affected Juniper Junos 15.1 Juniper Junos 15.1A2 Juniper Junos 15.1F1 Juniper Junos 15.1F2 Juniper Junos 15.1F2-S14 Juniper Junos...