CVE-2017-2304

CVE-2017-2304 affects Juniper Junos OS on QFX3500/3600/5100/5200 and EX4300/EX4600 devices. The root cause is that Ethernet packets are not padded with zeros, allowing packets to reveal fragments of system memory or data from previous packets (Etherleak). Impact is information disclosure via netw...

CVE-2017-2307

A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions prior to 16.1R1 may allow remote attackers to steal sensitive information or perform certain administrative actions on Junos Space...

CVE-2017-2308

An XML External Entity Injection vulnerability in Juniper Networks Junos Space versions prior to 16.1R1 may allow an authenticated user to read arbitrary files on the device...

CVE-2017-2303

On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D50, 12.1X47 prior to 12.1X47-D40, 12.3 prior to 12.3R13, 12.3X48 prior to 12.3X48-D30, 13.2X51 prior to 13.2X51-D40, 13.3 prior to 13.3R10, 14.1 prior to 14.1R8, 14.1X53 prior to 14.1X53-D35, 14.1X55 prior to...

CVE-2017-2310

CVE-2017-2310 affects Juniper Networks Junos Space; a firewall bypass vulnerability exists in the host-based firewall for versions prior to 16.1R1 that may permit certain crafted packets, posing a network integrity risk. Exploitation status is not detailed in the provided documents. According to ...

Juniper Networks Junos OS Input Validation Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. A vulnerability exists in the IPv6 ND packet processing in Juniper Networks Junos OS versions 15.1 and 16.1 on th...

The vulnerability of the Junos operating system, which allows a hacker to trigger a service failure

The vulnerability of Juniper Networks’ Junos operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger an emergency shutdown and restart of the device, or cause a failure in service delivery through process routing...

The vulnerability of the Junos operating system, which allows a hacker to trigger a service failure

The vulnerability of Juniper Networks’ Junos operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause slow memory leaks, deplete resources, and result in service failures through a specially created package...

The vulnerability of the Junos operating system allows a perpetrator to trigger a system failure and restart the device.

The vulnerability of the LDP configuration in the Junos operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to trigger an emergency shutdown and restart of the device remotely...

The vulnerability of the Juniper Networks component of the Junos operating system, which allows a hacker to cause the PFE (Packet Forwarding Engine) to freeze or crash.

The vulnerability of Juniper Networks’ Junos operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause the Packet Forwarding Engine to become unresponsive or crash remotely...

Juniper Networks NorthStar Controller Information Disclosure Vulnerability

Juniper Networks NorthStar Controller is a powerful and flexible traffic engineering solution that enables granular visualization and control of IP/MPLS flows in carrier networks. An information disclosure vulnerability exists in Juniper Networks NorthStar Controller that could allow an...

Juniper Junos Denial of Service Vulnerability (CNVD-2017-07129)

Juniper Junos is a Juniper Networks network operating system designed for the company's hardware systems. The operating system provides a secure programming interface and the JunosSDK. A denial of service vulnerability exists in Juniper Junos. An attacker could exploit this vulnerability to cause...

CVE-2017-2326

An information disclosure vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, network-based attacker to replicate the underlying Junos OS VM and all data it maintains to their local system for future...

Design/Logic Flaw

On Juniper Networks devices running Junos OS affected versions and with LDP enabled, a specific LDP packet destined to the RE Routing Engine will consume a small amount of the memory allocated for the rpd routing protocol daemon process. Over time, repeatedly receiving this type of LDP packets wi...

CVE-2017-2340

On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15.1R4, 16.1 prior to 16.1R3, on M/MX platforms where Enhanced Subscriber Management for DHCPv6 subscribers is configured, a vulnerability in processing IPv6 ND packets originating from subscribers and destined to M/MX series routers can...

CVE-2017-2313

Juniper Networks devices running affected Junos OS versions may be impacted by the receipt of a crafted BGP UPDATE which can lead to an rpd routing process daemon crash and restart. Repeated crashes of the rpd daemon can result in an extended denial of service condition. The affected Junos OS...

Design/Logic Flaw

On Juniper Networks EX Series Ethernet Switches running affected Junos OS versions, a vulnerability in IPv6 processing has been discovered that may allow a specially crafted IPv6 Neighbor Discovery ND packet destined to an EX Series Ethernet Switch to cause a slow memory leak. A malicious...

Information disclosure

An information disclosure vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, network-based attacker to replicate the underlying Junos OS VM and all data it maintains to their local system for future...

Code injection

On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15.1R4, 16.1 prior to 16.1R3, on M/MX platforms where Enhanced Subscriber Management for DHCPv6 subscribers is configured, a vulnerability in processing IPv6 ND packets originating from subscribers and destined to M/MX series routers can...

CVE-2017-2312

On Juniper Networks devices running Junos OS affected versions and with LDP enabled, a specific LDP packet destined to the RE Routing Engine will consume a small amount of the memory allocated for the rpd routing protocol daemon process. Over time, repeatedly receiving this type of LDP packets wi...