PT-2019-3478

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 12.3X48-D61 Juniper Networks Junos OS versions prior to 15.1X49-D130 Juniper Networks Junos OS versions prior to 17.3R3 Juniper Networks Junos OS versions prior to 17.4R2 Description A vulnerability ...

Juniper Junos CVE-2019-0066 Denial of Service Vulnerability

Description Juniper Junos is prone to a denial-of-service vulnerability. An attacker may exploit this issue to cause denial-of-service conditions. Technologies Affected Juniper Junos 15.1 Juniper Junos 15.1A2 Juniper Junos 15.1F1 Juniper Junos 15.1F2 Juniper Junos 15.1F2-S14 Juniper Junos...

CVE-2019-0056: Insufficient Resource Pool

This issue only affects devices with three 3 or more MPC10's installed in a single chassis with OSPF enabled and configured on the device. An Insufficient Resource Pool weakness allows an attacker to cause the device's Open Shortest Path First OSPF states to transition to Down, resulting in a...

PT-2019-3867

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on SRX5000 Series versions 12.3X48 through 12.3X48-D84 Juniper Networks Junos OS on SRX5000 Series versions 15.1X49 through 15.1X49-D179 Juniper Networks Junos OS on SRX5000 Series versions 17.3 through 17.3R3-S6...

PT-2019-3486

Name of the Vulnerable Software and Affected Versions Junos OS versions 12.3 through 12.3R12-S15 Junos OS versions 12.3X48 through 12.3X48-D85 Junos OS versions 14.1X53 through 14.1X53-D51 Junos OS versions 15.1 through 15.1F6-S13 Junos OS versions 15.1 through 15.1R7-S5 Junos OS versions 15.1X49...

Juniper Junos CVE-2019-0061 Local Privilege Escalation Vulnerability

Description Juniper Junos is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. The following versions of Juniper Junos are affected: Junper Junos 15.1X49 versions prior to 15.1X49-D171 and 15.1X49-D180 Junper Junos 15.1X53...

Juniper Junos CVE-2019-0075 Denial of Service Vulnerability

Description Juniper Junos is prone to a denial-of-service vulnerability. An attacker may exploit this issue to cause denial-of-service conditions. Technologies Affected Juniper Junos 12.3X48 Juniper Junos 12.3X48-D10 Juniper Junos 12.3X48-D15 Juniper Junos 12.3X48-D20 Juniper Junos 12.3X48-D25...

PT-2019-3488

Name of the Vulnerable Software and Affected Versions Junos OS versions 18.2R3 through 19.2R1 on SRX 5000 Series Description The issue is related to resource release errors in the Junos OS, which can be exploited by a remote attacker to cause a denial of service DoS by sending specially crafted T...

CVE-2019-0063: Undefined Security Weakness

When an MX Series Broadband Remote Access Server BRAS is configured as a Broadband Network Gateway BNG with DHCPv6 enabled, jdhcpd might crash when receiving a specific crafted DHCP response message on a subscriber interface. The daemon automatically restarts without intervention, but continuous...

PT-2019-3492

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.3X48-D90 Junos OS versions prior to 15.1X49-D180 Junos OS version 17.3 Junos OS versions prior to 17.4R2-S5 Junos OS versions prior to 17.4R3 Junos OS versions prior to 18.1R3-S6 Junos OS versions prior to 18.2R2-...

Juniper Junos CVE-2019-0062 Session Fixation Vulnerability

Description Juniper Junos is prone to a session-fixation vulnerability. An attacker can hijack an arbitrary session and gain unauthorized access to the affected application. The following versions of Juniper Junos are affected: Junper Junos 12.3 versions prior to 12.3R12-S15 for Juniper EX Series...

PT-2019-3482

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 12.3X48-D80 on SRX Series. Description A vulnerability in the Veriexec subsystem of Juniper Networks Junos OS allows an attacker to fully compromise the host system. A local authenticated user can...

CVE-2019-0068: Improper Check for Unusual or Exceptional Conditions

The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending the specific multicast packets, an attacker can repeatedly crash the flowd process causing a sustained Denial of Service. This issue affects Juniper...

Juniper Junos CVE-2019-0059 Memory Leak Denial of Service Vulnerability

Description Juniper Junos is prone to a denial-of-service vulnerability. Attackers can exploit this issue to cause a process crash, denying service to legitimate users. The following versions of Juniper Junos are affected: Juniper Junos 18.1 versions prior to 18.1R2-S4, 18.1R3-S1 are vulnerable...

CVE-2019-0075: Undefined Security Weakness

A vulnerability in the srxpfe process on Protocol Independent Multicast PIM enabled SRX series devices may lead to crash of the srxpfe process and an FPC reboot while processing PIM messages. Sustained receipt of these packets may lead to an extended denial of service condition. Affected releases...

PT-2019-3479

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 15.1X49-D120 on SRX Series devices. Description The issue is related to an Improper Certificate Validation weakness in the SRX Series Application Identification app-id signature update client, allowi...

Juniper Junos J-Web CVE-2019-0047 HTML Injection Vulnerability

Description Juniper Junos is prone to an HTML-injection vulnerability. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or control how the site is...

CVE-2019-0071: Improper Verification of Cryptographic Signature

Veriexec is a kernel-based file integrity subsystem in Junos OS that ensures only authorized binaries are able to be executed. Due to a flaw in specific versions of Junos OS, affecting specific EX Series platforms, the Veriexec subsystem will fail to initialize, in essence disabling file integrit...

CVE-2019-0070: Improper Input Validation

An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions to take control of other portions of the NFX platform they should not be able to access, and execute commands outside their authorized scope of control. This leads to the attacker being able to ta...

CVE-2019-0067: Undefined Security Weakness

Receipt of a specific link-local IPv6 packet destined to the RE may cause the system to crash and restart vmcore. By continuously sending a specially crafted IPv6 packet, an attacker can repeatedly crash the system causing a prolonged Denial of Service DoS. This issue affects Juniper Networks Jun...