Session fixation

A session fixation vulnerability in J-Web on Junos OS may allow an attacker to use social engineering techniques to fix and hijack a J-Web administrators web session and potentially gain administrative access to the device. This issue affects: Juniper Networks Junos OS 12.3 versions prior to...

Denial of service

The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending the specific multicast packets, an attacker can repeatedly crash the flowd process causing a sustained Denial of Service. This issue affects Juniper...

Authentication flaw

Veriexec is a kernel-based file integrity subsystem in Junos OS that ensures only authorized binaries are able to be executed. Due to a flaw in specific versions of Junos OS, affecting specific EX Series platforms, the Veriexec subsystem will fail to initialize, in essence disabling file integrit...

Design/Logic Flaw

An unexpected status return value weakness in the Next-Generation Multicast VPN NG-mVPN service of Juniper Networks Junos OS allows attacker to cause a Denial of Service DoS condition and core the routing protocol daemon rpd process when a specific malformed IPv4 packet is received by the device...

Code injection

This issue only affects devices with three 3 or more MPC10's installed in a single chassis with OSPF enabled and configured on the device. An Insufficient Resource Pool weakness allows an attacker to cause the device's Open Shortest Path First OSPF states to transition to Down, resulting in a...

Authorization

An improper authorization weakness in Juniper Networks Junos OS allows a local authenticated attacker to bypass regular security controls to access the Junos Device Manager JDM application and take control of the system. This issue affects: Juniper Networks Junos OS versions prior to 18.2R1,...

CVE-2019-0073 Junos OS: PKI key pairs are exported with insecure file permissions

The PKI keys exported using the command "run request security pki key-pair export" on Junos OS may have insecure file permissions. This may allow another user on the Junos OS device with shell access to read them. This issue affects: Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D18...

CVE-2019-0075 Junos OS: SRX Series: Denial of Service vulnerability in srxpfe related to PIM

A vulnerability in the srxpfe process on Protocol Independent Multicast PIM enabled SRX series devices may lead to crash of the srxpfe process and an FPC reboot while processing PIM messages. Sustained receipt of these packets may lead to an extended denial of service condition. Affected releases...

CVE-2019-0074

The CVE-2019-0074 issue is a path traversal vulnerability in Juniper Junos OS affecting NFX150, QFX10K, EX9200, MX, and PTX series with NG-RE (vmhost). A local authenticated attacker can read sensitive system files via traversal in NG-RE paths. Affected are multiple firmware tracks: 15.1F before ...

CVE-2019-0073

CVE-2019-0073 describes a local vulnerability in Juniper Networks Junos OS where PKI keys exported via the command run request security pki key-pair export may have insecure file permissions. This could allow a local user with shell access to read those keys. Affected releases include Junos OS 15...

CVE-2019-0074 Junos OS: NFX150 Series, QFX10K Series, EX9200 Series, MX Series, PTX Series: Path traversal vulnerability in NFX150 and NG-RE leads to information disclosure.

A path traversal vulnerability in NFX150 Series and QFX10K Series, EX9200 Series, MX Series and PTX Series devices with Next-Generation Routing Engine NG-RE allows a local authenticated user to read sensitive system files. This issue only affects NFX150 Series and QFX10K Series, EX9200 Series, MX...

CVE-2019-0071 Junos OS: EX2300, EX3400 Series: Veriexec signature checking not enforced in specific versions of Junos OS

Veriexec is a kernel-based file integrity subsystem in Junos OS that ensures only authorized binaries are able to be executed. Due to a flaw in specific versions of Junos OS, affecting specific EX Series platforms, the Veriexec subsystem will fail to initialize, in essence disabling file integrit...

CVE-2019-0071

CVE-2019-0071 affects Junos OS on EX2300/EX2300-C/EX3400 with versions 18.1R3-S4 and 18.3R1-S3. The Veriexec file-integrity subsystem can fail to initialize, effectively disabling integrity checks and allowing a locally authenticated user with shell access to install untrusted executables and esc...

CVE-2019-0075

The CVE-2019-0075 issue affects Juniper Networks Junos OS on SRX Series, specifically the srxpfe process when handling Protocol Independent Multicast (PIM) messages. A vulnerable state can cause the srxpfe process to crash and trigger an FPC reboot, potentially leading to an extended denial-of-se...

CVE-2019-0059

CVE-2019-0059 describes a memory leak in Junos OS routing protocol process (rdp) that can cause a Denial of Service when specific BGP state commands are received from a peered host. Affected are Junos OS 18.1 versions prior to 18.1R2-S4 and 18.1R3-S1; and 18.1X75 all versions. Versions before 18....

CVE-2019-0057 NFX Series: An attacker may be able to take control of the JDM application and subsequently the entire system.

An improper authorization weakness in Juniper Networks Junos OS allows a local authenticated attacker to bypass regular security controls to access the Junos Device Manager JDM application and take control of the system. This issue affects: Juniper Networks Junos OS versions prior to 18.2R1,...

CVE-2019-0056 Junos OS: MX Series: An MPC10 Denial of Service (DoS) due to OSPF states transitioning to Down, causes traffic to stop forwarding through the device.

This issue only affects devices with three 3 or more MPC10's installed in a single chassis with OSPF enabled and configured on the device. An Insufficient Resource Pool weakness allows an attacker to cause the device's Open Shortest Path First OSPF states to transition to Down, resulting in a...

CVE-2019-0060 Junos OS: SRX Series: flowd process crash due to processing of specific transit IP packets

The flowd process, responsible for forwarding traffic in SRX Series services gateways, may crash and restart when processing specific transit IP packets through an IPSec tunnel. Continued processing of these packets may result in an extended Denial of Service DoS condition. This issue only occurs...

CVE-2019-0050

CVE-2019-0050 affects Juniper Junos OS on SRX1500; the srxpfe process can crash under heavy traffic, causing DoS and potential traffic-forwarding failure. Affected releases include 15.1X49 (before D170), 17.3 (before R3-S7), 17.4 (before R2-S8, R3), 18.1 (before R3-S8), 18.2 (before R3), 18.3 (be...

CVE-2019-0054

CVE-2019-0054 refers to an Improper Certificate Validation weakness in Juniper Networks Junos OS, specifically the SRX Series app-id signature update client. The vulnerability allows a remote attacker to perform a Man-in-the-Middle (MitM) attack, potentially compromising integrity and confidentia...