Juniper Junos Protocol Daemon (RPD) BGP OPEN Message Handling DoS (JSA10779)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by a denial of service vulnerability in the routing protocol daemon rpd due to improper handling of BGP OPEN messages. An unauthenticated, remote attacker can exploit this, via a specially...

Juniper Junos snmpd SNMP Packet Handling RCE (JSA10793)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by a remote code execution vulnerability in the snmpd daemon due to improper handling of SNMP packets. An unauthenticated, remote attacker can exploit this, via a specially crafted SNMP...

Juniper Junos SRX Integrated User Firewall Hardcoded Credentials (JSA10791)

According to its self-reported version and configuration, the remote Juniper Junos device has hardcoded credentials for the Integrated User Firewall UserFW services authentication API. An unauthenticated, remote attacker can exploit this to gain administrative access to the device. TRUSTED...

Juniper Junos rpd MPLS Ping Packet Handling DoS (JSA10795)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by a denial of service vulnerability in the rpd daemon due to improper handling of MPLS ping packets. An unauthenticated, remote attacker can exploit this, via a specially crafted MPLS pin...

Juniper Junos Virtualized Environment Guest-To-Host Privilege Escalation (JSA10787)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by a privilege escalation vulnerability when running in a virtualized environment due to improper handling of authentication. An attacker on the Junos guest can exploit this to escalate...

Juniper Junos Multiple OpenSSL Vulnerabilities (JSA10775)

According to its self-reported version number, the remote Juniper Junos device is affected by multiple vulnerabilities : - A carry propagation error exists in the OpenSSL component in the Broadwell-specific Montgomery multiplication procedure when handling input lengths divisible by but longer th...

Juniper Junos SRX MACsec Feature Secure Link Failure Silent Fallback Information Disclosure (JSA10790)

According to its self-reported version and model number, the remote Juniper Junos device is affected by an information disclosure vulnerability in the MACsec feature due to error reporting over an unencrypted link when a secure link cannot be established. An adjacent attacker can exploit this to...

Juniper Junos ALG Fragmented Traffic Handling MS-MPC / MS-MIC Service PIC DoS (JSA10794)

According to its self-reported version and model number, the remote Juniper Junos device is affected by a denial of service vulnerability in the Application Layer Gateway ALG that is triggered when handling a large amount of fragmented packets. An unauthenticated, remote attacker can exploit this...

Juniper Issues Security Alert Tied to Routers and Switches

Juniper Networks warned customers Thursday of a high-risk vulnerability in the GD graphics library that could allow a remote attacker to take control of systems running certain versions of the Junos OS. The alert was in conjunction with a warning from the U.S. Computer Emergency Readiness Team...

Juniper Networks Junos OS libgd Heap Overflow Vulnerability

Junos OS is prone to a heap overflow vulnerability in libgd which allows remote attackers to cause a denial of service or potentially execute arbitrary code. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Juniper Networks Junos OS MPLS DoS Vulnerability

Junos OS is prone to a denial of service vulnerability in rpd when receiving a malformed MPLS ping packet. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Juniper Networks Releases Junos OS Security Advisory

Juniper Networks has released a security advisory that addresses a vulnerability in Junos OS. A remote attacker could exploit this vulnerability to cause a denial-of-service condition. US-CERT encourages users and administrators to review the Juniper Security Advisory and apply necessary updates...

The vulnerability of the UserFW component of the Junos operating system, which allows a hacker to gain access to the device

The vulnerability of the UserFW component used to facilitate easy implementation of user profiles through existing firewall policies in the Junos operating system exists due to the rigid encoding of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely...

Juniper Junos jdhcpd IPv6 UDP DoS (JSA10800)

According to its self-reported version and model number, the remote Juniper Junos device is affected by a denial of service vulnerability in the jdhcpd daemon when handling invalid IPv6 UDP packets. An unauthenticated, remote attacker can exploit this, via specially crafted IPv6 UDP packets, to...

Juniper Junos User Authentication Bypass (JSA10802)

According to its self-reported version number, the remote Juniper Junos device is affected by an authentication bypass vulnerability due to a specific device configuration that can result in a commit failure condition, which allows a user to be logged in without being prompted for a password. A...

Juniper Junos sendmsg Local Privilege Escalation (JSA10797)

According to its self-reported version number, the remote Juniper Junos device is affected by a heap-based buffer overflow condition in the sendmsg system call, specifically due to incorrect handling of arguments in the sockargs function in sys/kern/uipcsyscalls.c. A local attacker can exploit th...

Juniper Junos PHP multiple vulnerabilities (JSA10804)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by multiple vulnerabilities in the included PHP version : - An unspecified flaw exists in the SQLite extension that allows an unauthenticated, remote attacker to bypass the 'openbasedir'...

Juniper Junos libgd Compressed GD2 Data RCE (JSA10798)

According to its self-reported version number, the remote Juniper Junos device is affected by an integer signedness error in the included GD Graphics Library libgd when handling compressed GD2 data due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit...

Juniper Junos CLI XML Privilege Escalation (JSA10805)

According to its self-reported version number, the remote Juniper Junos device is affected by a privilege escalation vulnerability in the CLI component due to improper validation of user-supplied input before being processed as XML content. A local attacker can exploit this, via XML injection, to...

Juniper Junos SRX, vSRX, and J-Series ISC BIND DoS (JSA10799)

According to its self-reported version and model number, the remote Juniper Junos device is affected by a denial of service vulnerability in ISC BIND, specifically in the queryfind function within file bin/named/query.c, when simultaneously using DNS64 and RPZ for query responses. An...