Code injection

The rpd daemon in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R7, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R6, 14.1 before 14.1R4, and 14.2 before 14.2R2, when configured with...

Input validation

Juniper Junos OS 14.1X53 before 14.1X53-D30 on QFX Series switches allows remote attackers to cause a denial of service PFE panic via a high rate of unspecified VXLAN packets...

CVE-2016-1269

CVE-2016-1269 affects Juniper Networks Junos OS prior to various versions (e.g., 12.1X44-D60, 12.3R11, 16.1R1, etc.) and allows remote attackers to cause a denial of service via crafted TCP timestamps, leading to socket exhaustion. The vulnerability is documented with a high impact (CVSS v3 base ...

CVE-2016-1269

Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R9, 13.2X51 before 13.2X51-D39, 13.3 before 13.3R8, 14.1 before 14.1R6, 14.1X53 before 14.1X53-D30, 14.2 before 14.2R4-S1, 15.1 before...

CVE-2016-1267

CVE-2016-1267 affects Juniper Networks Junos OS by a race condition in the RPC functionality. Affected Junos OS versions include 12.1X44-D55 and earlier, 12.3R11 and earlier, 13.2R8 and earlier, 14.1R6 and earlier, 14.2R3-S4, 15.1F2/15.1R2, and 16.1R1. The underlying issue allows local users to r...

CVE-2016-1270

Juniper Junos OS rpd daemon is vulnerable to a denial-of-service condition triggered by crafted BGP-based L2VPN/VPLS updates. Affected releases include several 12.x, 13.x, and 14.x trains listed in CVE-2016-1270; when the device is configured for BGP-based L2VPN or VPLS, processing a malformed L2...

CVE-2016-1270

The rpd daemon in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R7, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R6, 14.1 before 14.1R4, and 14.2 before 14.2R2, when configured with...

CVE-2016-1267

Race condition in the RPC functionality in Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R8, 13.2X51 before 13.2X51-D39, 13.3 before 13.3R7, 14.1 before 14.1R6, 14.1X53 before...

CVE-2016-1274

Juniper Junos OS 14.1X53 before 14.1X53-D30 on QFX Series switches allows remote attackers to cause a denial of service PFE panic via a high rate of unspecified VXLAN packets...

CVE-2016-1274

CVE-2016-1274 affects Juniper Networks Junos OS running on QFX Series switches (14.1X53 prior to 14.1X53-D30). A remote attacker can cause a denial of service by sending a high rate of VXLAN packets that trigger a PFE panic. The public records describe the issue in Junos OS/QFX VXLAN handling but...

CVE-2016-1271

Juniper Junos OS before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D25, 13.2 before 13.2R8, 13.3 before 13.3R7, 14.1 before 14.1R6, 14.2 before 14.2R4, 15.1 before 15.1R1 or 15.1F2, and 15.1X49 before 15.1X49-D15 allow local users to gain privileges via...

CVE-2016-1264

Race condition in the Op command in Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R11, 12.3X48 before 12.3X48-D20, 12.3X50 before 12.3X50-D50, 13.2 before 13.2R8, 13.2X51 before 13.2X51-D39, 13.2X52 before 13.2X52-D30, 13.3 before...

CVE-2016-1273

The CVE-2016-1273 vulnerability affects Juniper Junos OS on QFX5100 and QFX10002 switches (versions before 13.2X51-D40, 14.x before 14.1X53-D30, and 15.x before 15.1X53-D20). The underlying issue is insufficient entropy in cryptographic/encryption and authentication protections, enabling remote a...

CVE-2016-1271

CVE-2016-1271 affects Juniper Networks Junos OS versions listed (e.g., 12.1X46-D45 and earlier for 12.x, 13.x, 14.x, 15.x ranges) where a local attacker can gain privileges by crafting combinations of CLI commands and arguments. The issue is described as a local privilege escalation in the Junos ...

CVE-2016-1264

The CVE-2016-1264 issue affects Juniper Networks Junos OS, where a race condition in the Op command (through the Op URL option) can allow remote authenticated users to gain elevated privileges. Affected versions span multiple releases across 12.1X, 12.3, 13.2, 13.3, 14.1, 14.2, and 15.x lines (e....

Juniper Networks Junos OS J-Web Embedthis Software AppWeb Denial of Service Vulnerability

Juniper Networks Junos on SRX Series devices is a network operating system that runs on SRX Series service gateway devices.J-Web is one of the network management tools.Embedthis Software AppWeb is an Embedthis Software Inc. Fast and compact web server. A security vulnerability in Embedthis Softwa...

Juniper Junos TKEY Query Handling DoS (JSA10718)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to a flaw in ISC BIND when handling queries for TKEY records. An unauthenticated, remote attacker can exploit this, via crafted TKEY queries, to cause an REQUIRE...

Juniper Junos RPD Routing Process DoS (JSA10715)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to a flaw in the Label Distribution Protocol LDP implementation. An unauthenticated, remote attacker attacker can exploit this, by sending a specially crafted LDP...

Juniper Junos HTTP Request Handling J-Web DoS (JSA10720)

According to its self-reported version number, the remote Juniper Junos device is affected by denial of service vulnerability due to a flaw in the Embedthis Appweb Server when processing malformed HTTP requests. An unauthenticated, remote attacker can exploit this to crash the J-Web service...

Juniper Junos RTSP Packet Handling flowd DoS (JSA10721)

According to its self-reported version number, the remote Juniper Junos device is affected by denial of service vulnerability due to a flaw in the Real Time Streaming Protocol Application Layer Gateway RTSP ALG implementation. An unauthenticated, remote attacker can exploit this, via a crafted RT...