Juniper Networks Junos OS Point Hijacking Vulnerability

Juniper Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. A point hijacking vulnerability exists in Juniper Networks Junos OS. An attacker could exploit this vulnerability by sendi...

Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2018-02839)

Juniper SRX Series and MX Series with Service PICs are Juniper Networks firewall appliances.Junos OS is the operating system that runs on them. A denial of service vulnerability exists in the Junos OS in Juniper SRX Series and MX Series with Service PIC appliances. An attacker can exploit this...

Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2018-02840)

Juniper QFX and EX Series switches are both Juniper Networks switches.Junos OS is the set of operating systems that run on them. A denial of service vulnerability exists in Junos OS versions 14.1X53 prior to 14.1X53-D40, 15.1X53 prior to 15.1X53-D55, and 15.1R7 prior to 15.1 on Juniper QFX and EX...

Juniper SRX series Junos OS security bypass vulnerability

Juniper SRX Series is an SRX Series firewall appliance from Juniper Networks, Inc. Junos is the operating system that runs on it. A security vulnerability exists in Juniper SRX series in Junos OS 12.1X46-D71 prior to version 12.1X46, which stems from a firewall rule that is configured to match...

Juniper Junos Space Elevation of Privilege Vulnerability

Juniper Junos Space is a network management solution from Juniper Networks. The solution supports automated configuration, monitoring and troubleshooting of devices and services throughout their lifecycle. An elevation of privilege vulnerability exists in Juniper Junos Space. A local attacker cou...

Juniper Junos Space Network Management Platform File Inclusion Vulnerability

Juniper Junos Space Network Management Platform is a network management platform from Juniper Networks. The platform supports automated configuration, monitoring and troubleshooting of devices and services throughout their lifecycle. A file inclusion vulnerability exists in Juniper Junos Space...

Juniper Networks Releases Security Updates

Juniper Networks has released security updates to address vulnerabilities affecting multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC/US-CERT encourages users and administrators to review the following Juniper Security Advisori...

CVE-2018-0010

A vulnerability in the Juniper Networks Junos Space Security Director allows a user who does not have SSH access to a device to reuse the URL that was created for another user to perform SSH access. Affected releases are all versions of Junos Space Security Director prior to 17.2R1...

CVE-2018-0011

A reflected cross site scripting XSS vulnerability in Junos Space may potentially allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a session, and to perform administrative actions on the Junos Space network management device...

CVE-2018-0006

A high rate of VLAN authentication attempts sent from an adjacent host on the local broadcast domain can trigger high memory utilization by the BBE subscriber management daemon bbe-smgd, and lead to a denial of service condition. The issue was caused by attempting to process an unbounded number o...

CVE-2018-0008

An unauthenticated root login may allow upon reboot when a commit script is used. A commit script allows a device administrator to execute certain instructions during commit, which is configured under the system scripts commit stanza. Certain commit scripts that work without a problem during norm...

CVE-2018-0004

A sustained sequence of different types of normal transit traffic can trigger a high CPU consumption denial of service condition in the Junos OS register and schedule software interrupt handler subsystem when a specific command is issued to the device. This affects one or more threads and...

CVE-2018-0012

Junos Space is affected by a privilege escalation vulnerability that may allow a local authenticated attacker to gain root privileges...

CVE-2018-0011

A reflected cross site scripting XSS vulnerability in Junos Space may potentially allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a session, and to perform administrative actions on the Junos Space network management device...

CVE-2018-0009

On Juniper Networks SRX series devices, firewall rules configured to match custom application UUIDs starting with zeros can match all TCP traffic. Due to this issue, traffic that should have been blocked by other rules is permitted to flow through the device resulting in a firewall bypass...

CVE-2018-0007

An unauthenticated network-based attacker able to send a maliciously crafted LLDP packet to the local segment, through a local segment broadcast, may be able to cause a Junos device to enter an improper boundary check condition allowing a memory corruption to occur, leading to a denial of service...

CVE-2018-0006

A high rate of VLAN authentication attempts sent from an adjacent host on the local broadcast domain can trigger high memory utilization by the BBE subscriber management daemon bbe-smgd, and lead to a denial of service condition. The issue was caused by attempting to process an unbounded number o...

CVE-2018-0005

QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded will forward traffic instead of dropping traffic. This can lead to denials of services or other unintended conditions. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D40;...

CVE-2018-0004

A sustained sequence of different types of normal transit traffic can trigger a high CPU consumption denial of service condition in the Junos OS register and schedule software interrupt handler subsystem when a specific command is issued to the device. This affects one or more threads and...

CVE-2018-0003

A specially crafted MPLS packet received or processed by the system, on an interface configured with MPLS, will store information in the system memory. Subsequently, if this stored information is accessed, this may result in a kernel crash leading to a denial of service. Affected releases are...