Juniper Junos CVE-2019-0068 Denial of Service Vulnerability

Description Juniper Junos is prone to a denial-of-service vulnerability. An attacker may exploit this issue to cause denial-of-service conditions. Technologies Affected Juniper Junos 12.3X48 Juniper Junos 12.3X48-D10 Juniper Junos 12.3X48-D15 Juniper Junos 12.3X48-D20 Juniper Junos 12.3X48-D25...

Juniper Junos CVE-2019-0071 Local Security Bypass Vulnerability

Description Juniper Junos is prone to a local security-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions. Junos OS versions 18.1R3-S4 and 18.3R1-S3 for EX2300, EX2300-C and EX3400 platforms are vulnerable. Technologies...

Juniper Junos CVE-2019-0064 Denial of Service Vulnerability

Description Juniper Junos is prone to a denial-of-service vulnerability. An attacker may exploit this issue to cause denial-of-service conditions. The following versions of Juniper Junos are affected: Juniper Junos 18.2R3 for SRX 5000 Series platform. Juniper Junos 18.4R2 for SRX 5000 Series...

Juniper Junos CVE-2019-0051 Denial of Service Vulnerability

Description Juniper Junos is prone to a denial-of-service vulnerability. An attacker may exploit this issue to cause denial-of-service conditions. The following versions of Junos on Juniper SRX5000 Series devices are vulnerable: Juniper Junos 12.3X48 versions prior to 12.3X48-D85 Juniper Junos...

PT-2019-3593

Name of the Vulnerable Software and Affected Versions Junos OS versions 18.1R3-S4 on EX2300, EX2300-C, and EX3400 Junos OS versions 18.3R1-S3 on EX2300, EX2300-C, and EX3400 Description The Veriexec subsystem in Junos OS, responsible for ensuring only authorized binaries are executed, fails to...

Juniper Junos CVE-2019-0069 Local Information Disclosure Vulnerability

Description Juniper Junos is prone to a local information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks. The following versions of Juniper Junos are affected: Juniper Junos 15.1X49 versions prior to...

CVE-2019-0066: Unexpected Status Code or Return Value

An unexpected status return value weakness in the Next-Generation Multicast VPN NG-mVPN service of Juniper Networks Junos OS allows attacker to cause a Denial of Service DoS condition and core the routing protocol daemon rpd process when a specific malformed IPv4 packet is received by the device...

Juniper Junos CVE-2019-0054 Certificate Validation Security Weakness

Description Juniper Junos is prone to a security weakness. An attacker can exploit this issue to perform man-in-the-middle attacks and perform certain unauthorized actions, which will aid in further attacks. Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D120 are vulnerable...

PT-2019-3868

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 12.1X46-D86 Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S13 Juniper Networks Junos OS 12.3X48 versions prior to 12.3X48-D80 Juniper Networks Junos OS 14.1X53 versions prior to 14.1X53-D5...

PT-2019-3596

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on SRX Series versions prior to 12.3X48-D80 Juniper Networks Junos OS on SRX Series versions prior to 15.1X49-D160 Juniper Networks Junos OS on SRX Series versions prior to 17.3R3-S7 Juniper Networks Junos OS on SRX...

PT-2019-3483

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 18.1R2-S4 Juniper Networks Junos OS version 18.1R3-S1 Juniper Networks Junos OS version 18.1X75 Description A memory leak issue in Juniper Networks Junos OS allows an attacker to cause a Denial of...

Juniper Junos CVE-2019-0073 Local Insecure File Permissions Vulnerability

Description Juniper Junos is prone to a local insecure file-permission vulnerability. A local attacker can exploit this issue to access sensitive information stored in the file-system. The following versions of Junos are vulnerable. Juniper Junos 15.1X49 versions prior to 15.1X49-D180 Juniper Jun...

CVE-2019-0069: Cleartext Transmission of Sensitive Information

On EX4600, QFX5100 Series, NFX Series, QFX10K Series, QFX5110, QFX5200 Series, QFX5110, QFX5200, QFX10K Series, vSRX, SRX1500, SRX4000 Series, vSRX, SRX1500, SRX4000, QFX5110, QFX5200, QFX10K Series, when the user uses console management port to authenticate, the credentials used during device...

PT-2019-3490

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 16.1R6-S2 Junos OS versions prior to 16.1R7 Junos OS versions prior to 16.2R2-S10 Junos OS versions prior to 17.1R3 Description The issue exists due to insufficient input validation in the Routing Engine component of...

PT-2019-3896

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1X49-D110 on vSRX, SRX1500, SRX4000 Series Junos OS versions prior to 15.1X53-D234 on QFX5110, QFX5200 Series Junos OS versions prior to 15.1X53-D68 on QFX10K Series Junos OS versions prior to 17.1R2-S8, 17.1R3, o...

PT-2019-3594

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1X49-D170 on SRX1500 Junos OS versions prior to 17.3R3-S7 on SRX1500 Junos OS versions prior to 17.4R2-S8, 17.4R3 on SRX1500 Junos OS versions prior to 18.1R3-S8 on SRX1500 Junos OS versions prior to 18.2R3 on...

Juniper Junos CVE-2019-0074 Local Directory Traversal Vulnerability

Description Juniper Junos is prone to a local directory-traversal vulnerability. An attacker can exploit this issue using directory-traversal characters '../' to read arbitrary files that contain sensitive information or to access files outside of the restricted directory to obtain sensitive...

Juniper Junos CVE-2019-0065 Denial of Service Vulnerability

Description Juniper Junos is prone to a denial-of-service vulnerability. An attacker may exploit this issue to cause denial-of-service conditions. The following versions of Junos on Juniper MX-Series platform are vulnerable: Juniper Junos 16.1 versions prior to 16.1R7-S5 Juniper Junos 16.2 versio...

CVE-2019-0057: Undefined Security Weakness

An improper authorization weakness in Juniper Networks Junos OS allows a local authenticated attacker to bypass regular security controls to access the Junos Device Manager JDM application and take control of the system. This issue affects: Juniper Networks Junos OS versions prior to 18.2R1,...

CVE-2019-0051: Improper Handling of Exceptional Conditions

SSL-Proxy feature on SRX devices fails to handle a hardware resource limitation which can be exploited by remote SSL/TLS servers to crash the flowd daemon. Repeated crashes of the flowd daemon can result in an extended denial of service condition. For this issue to occur, clients protected by the...