The vulnerability of JunOS operating system’s network firewall filter, which allows a hacker to gain access to the device

The vulnerability of JunOS’s network firewall filter is related to a malfunction of the policer technology, combined with other technologies. Exploiting this vulnerability can allow an attacker operating remotely to gain access to the device...

Junos OS: Stateless firewall filter ignores IPv6 extension headers (JSA10905)

According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability which may allow IPv6 packets that should have been blocked to be forwarded. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid122241; scriptversion"1.3";...

Junos OS: Multiple vulnerabilities in libxml2 (JSA10902)

According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability. When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, a reachable assertion...

Junos OS: Crafted HTTP traffic may cause UTM to consume all mbufs, leading to Denial of Service (JSA10910)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability. An SRX Series Service Gateway configured for Unified Threat Management UTM may experience a denial of service due to the receipt of crafted HTTP traffic. TRUSTED...

Juniper Junos MX Malformed Packet - DOS (JSA10900)

Receipt of a malformed packet on MX Series devices with dynamic vlan configuration can trigger an uncontrolled recursion loop in the Broadband Edge subscriber management daemon bbe-smgd, and lead to high CPU usage and a crash of the bbe-smgd service. Repeated receipt of the same packet can result...

Junos OS: Deleted dynamic VPN users are allowed to establish VPN connections until reboot (JSA10915)

According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability that allows deleted dynamic VPN users to establish dynamic VPN connections until the device is rebooted. TRUSTED...

Security Bulletin: Vulnerability with Diffie-Hellman ciphers may affect Juniper EX Series Network Switches sold by IBM for use in IBM Products (CVE-2015-4000)

Summary The Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol affects Juniper EX Series Network Switches sold by IBM for use in IBM Products. Vulnerability Details Summary The Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol affec...

Junos OS: EX2300 and EX3400 series: High disk I/O operations may disrupt the communication between RE and PFE (JSA10909)

According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability in which high disk I/O operations may disrupt the communication between the routing engine RE and the packet forwarding engine PFE. C Tenable Network Security, Inc. include'compat.inc'; i...

Junos OS: RPD crash upon receipt of malformed PIM packet (JSA10913)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability. The routing protocol daemon RPD process will crash and restart when a specific invalid IPv4 PIM Join packet is received. While RPD restarts after a crash, repeated...

The vulnerability of the JunOS operating system allows attackers to carry out attacks using predictable IP IDs.

The vulnerability of the JunOS operating system is related to the predictability of port IP IDs. Exploiting this vulnerability allows a remote attacker to carry out attacks using predictable IP IDs...

The vulnerability of the JunOS operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the JunOS operating system’s kernel is related to errors in processing packets destined for another address. Exploiting this vulnerability can allow an attacker to trigger a kernel error and a service failure by sending specially crafted packets from external control interfac...

The vulnerability of the JunOS operating system allows a hacker to execute arbitrary code and cause service interruptions.

The vulnerability of the JunOS operating system arises from an uninitialized function pointer in the Packet Forwarding Engine manager fxpc. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and trigger a service failure using a specially crafted HTTP packet...

The vulnerability of the Routing Protocols Daemon (RPD) implementation in the JunOS operating system allows a hacker to induce a service failure.

The vulnerability of the Routing Protocols Daemon RPD implementation in the JunOS operating system is related to errors in packet processing for the PIM Join protocol. Exploiting this vulnerability can allow an attacker to trigger a device reboot and a service failure...

The vulnerability of the Junos operating system, related to insufficient input data validation, allows attackers to trigger a service failure.

The vulnerability of the Junos operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by using specially crafted HTTP traffic...

The vulnerability of the Junos operating system, related to insufficient input data validation, allows attackers to trigger a service failure.

The vulnerability of the Junos operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions due to an uncontrolled recursive cycle in the Broadband Edge Bbe-Smgd subscriber...

The vulnerability of the Junos operating system, related to incorrect data processing, allows a perpetrator to trigger a service failure.

The vulnerability of the Junos operating system is related to incorrect data processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures due to a failure in the routing daemon process rpd...

The vulnerability of the Junos operating system, related to insufficient input data validation, allows attackers to trigger a service failure.

The vulnerability of the Junos operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions due to a failure in the routing daemon process rpd...

The vulnerability of the Junos operating system, related to insufficient input data validation, allows attackers to trigger a service failure.

The vulnerability of the Junos operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by triggering a process failure of FPC...

Junos OS: Kernel crash after processing specific incoming packet to the out of band management interface (JSA10911)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability. The Junos OS kernel crashes after processing a specific incoming packet to the out of band management interface such as fxp0, me0, em0, vme0 destined for another addres...

CVE-2019-0007

The vMX Series software uses a predictable IP ID Sequence Number. This leaves the system as well as clients connecting through the device susceptible to a family of attacks which rely on the use of predictable IP ID sequence numbers as their base method of attack. This issue was found during...