CVE-2021-0264: Improper Check or Handling of Exceptional Conditions

A vulnerability in the processing of traffic matching a firewall filter containing a syslog action in Juniper Networks Junos OS on MX Series with MPC10/MPC11 cards installed, PTX10003 and PTX10008 Series devices, will cause the line card to crash and restart, creating a Denial of Service DoS...

CVE-2021-0270: Concurrent Execution using Shared Resource with Improper Synchronization

On PTX Series and QFX10k Series devices with the "inline-jflow" feature enabled, a use after free weakness in the Packet Forwarding Engine PFE microkernel architecture of Juniper Networks Junos OS may allow an attacker to cause a Denial of Service DoS condition whereby one or more Flexible PIC...

CVE-2021-0268: Improper Neutralization of CRLF Sequences in HTTP Headers

An Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Response Splitting' weakness in J-web of Juniper Networks Junos OS leads to buffer overflows, segment faults, or other impacts, which allows an attacker to modify the integrity of the device and exfiltration information from the...

CVE-2021-0261: Out-of-bounds Read

A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN DVPN, Firewall Authentication Pass-Through with Web-Redirect, and Captive Portal allows an unauthenticated attacker to cause an extended Denial of Service DoS for these services by sending a high number of...

CVE-2021-0238: Uncontrolled Resource Consumption

When a MX Series is configured as a Broadband Network Gateway BNG based on Layer 2 Tunneling Protocol L2TP, executing certain CLI command may cause the system to run out of disk space, excessive disk usage may cause other complications. An administrator can use the following CLI command to monito...

CVE-2021-0229: Uncontrolled Resource Consumption

An uncontrolled resource consumption vulnerability in Message Queue Telemetry Transport MQTT server of Juniper Networks Junos OS allows an attacker to cause MQTT server to crash and restart leading to a Denial of Service DoS by sending a stream of specific packets. A Juniper Extension Toolkit JET...

CVE-2021-0224: Allocation of Resources Without Limits or Throttling

A vulnerability in the handling of internal resources necessary to bring up a large number of Layer 2 broadband remote access subscriber BRAS nodes in Juniper Networks Junos OS can cause the Access Node Control Protocol daemon ANCPD to crash and restart, leading to a Denial of Service DoS...

PT-2021-12980

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 17.3R3-S9 Junos OS versions 17.4 prior to 17.4R3-S2 Junos OS versions 18.1 prior to 18.1R3-S11 Junos OS versions 18.2 prior to 18.2R3-S5 Junos OS versions 18.3 prior to 18.3R3-S3 Junos OS versions 18.4 prior to...

PT-2021-12962

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on NFX Series versions 18.1R1 through 18.2R3-S5 Juniper Networks Junos OS on NFX Series versions 18.3 through 18.3R3-S3 Juniper Networks Junos OS on NFX Series versions 18.4 through 18.4R3-S4 Juniper Networks Junos O...

PT-2021-12958

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 14.1X53-D53 Juniper Networks Junos OS versions 14.1R1 and later versions prior to 15.1R7-S6 Juniper Networks Junos OS versions prior to 15.1X53-D593 Juniper Networks Junos OS versions prior to...

PT-2021-12977

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 17.4R3-S3 Juniper Networks Junos OS 18.1 versions prior to 18.1R3-S12 Juniper Networks Junos OS 18.2 versions prior to 18.2R3-S6 Juniper Networks Junos OS 18.3 versions prior to 18.3R3-S4 Juniper...

PT-2021-12941

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 17.3R3-S9 Junos OS versions prior to 17.4R2-S11 Junos OS versions prior to 17.4R3-S2 Junos OS versions prior to 18.2R3-S5 Junos OS versions prior to 18.3R2-S4 Junos OS versions prior to 18.3R3-S3 Junos OS versions...

PT-2021-12974 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on cSRX Series versions prior to 20.2R3 Juniper Networks Junos OS on cSRX Series version 20.3 prior to 20.3R2 Juniper Networks Junos OS on cSRX Series version 20.4 prior to 20.4R2 Description: The issue in Juniper...

CVE-2021-0228: Improper Check for Unusual or Exceptional Conditions

An improper check for unusual or exceptional conditions vulnerability in Juniper Networks MX Series platforms with Trio-based MPC Modular Port Concentrator deployed in Ethernet VPN EVPN-Virtual Extensible LAN VXLAN configuration, may allow an attacker sending specific Layer 2 traffic to cause...

CVE-2021-0230: Uncontrolled Resource Consumption

On Juniper Networks SRX Series devices with link aggregation lag configured, executing any operation that fetches Aggregated Ethernet AE interface statistics, including but not limited to SNMP GET requests, causes a slow kernel memory leak. If all the available memory is consumed, the traffic wil...

PT-2021-12943 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on SRX Series versions 17.1R3 through 17.3R3-S10 Juniper Networks Junos OS on SRX Series versions 17.4 through 17.4R3-S4 Juniper Networks Junos OS on SRX Series versions 18.2 through 18.2R3-S6 Juniper Networks Junos ...

PT-2021-12968

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on QFX5K Series versions 17.3 through 17.3R3-S11 Juniper Networks Junos OS on QFX5K Series versions 17.4 through 17.4R3-S5 Juniper Networks Junos OS on QFX5K Series versions 18.1 through 18.1R3-S13 Juniper Networks...

PT-2021-12961

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 17.4R1 through 17.4R2-S6, 17.4R3 Juniper Networks Junos OS versions 18.1 through 18.1R3-S7 Juniper Networks Junos OS versions 18.2 through 18.2R2-S6, 18.2R3-S3 Juniper Networks Junos OS versions 18.3 through...

PT-2021-12950

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 20.4R1-EVO Description: The issue is caused by the receipt of a specific stream of genuine Layer 2 frames, which may crash the Advanced Forwarding Toolkit AFT manager process, leading to a...

PT-2021-12970

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 12.3R12-S17 on EX Series Junos OS versions prior to 12.3X48-D105 on SRX Series Junos OS versions prior to 15.1R7-S8 Junos OS versions prior to 15.1X49-D230 on SRX Series Junos OS versions prior to 16.1R7-S8 Junos OS...