Juniper Junos CVE-2019-0062 Session Fixation Vulnerability

Description Juniper Junos is prone to a session-fixation vulnerability. An attacker can hijack an arbitrary session and gain unauthorized access to the affected application. The following versions of Juniper Junos are affected: Junper Junos 12.3 versions prior to 12.3R12-S15 for Juniper EX Series...

PT-2019-3482

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 12.3X48-D80 on SRX Series. Description A vulnerability in the Veriexec subsystem of Juniper Networks Junos OS allows an attacker to fully compromise the host system. A local authenticated user can...

CVE-2019-0068: Improper Check for Unusual or Exceptional Conditions

The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending the specific multicast packets, an attacker can repeatedly crash the flowd process causing a sustained Denial of Service. This issue affects Juniper...

Juniper Junos CVE-2019-0059 Memory Leak Denial of Service Vulnerability

Description Juniper Junos is prone to a denial-of-service vulnerability. Attackers can exploit this issue to cause a process crash, denying service to legitimate users. The following versions of Juniper Junos are affected: Juniper Junos 18.1 versions prior to 18.1R2-S4, 18.1R3-S1 are vulnerable...

CVE-2019-0075: Undefined Security Weakness

A vulnerability in the srxpfe process on Protocol Independent Multicast PIM enabled SRX series devices may lead to crash of the srxpfe process and an FPC reboot while processing PIM messages. Sustained receipt of these packets may lead to an extended denial of service condition. Affected releases...

PT-2019-3487

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1R7-S5 on MX Series Junos OS versions prior to 16.1R7-S5 on MX Series Junos OS versions prior to 16.2R2-S10 on MX Series Junos OS versions prior to 17.1R3-S1 on MX Series Junos OS versions prior to 17.2R3-S2 on MX...

PT-2019-3479

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 15.1X49-D120 on SRX Series devices. Description The issue is related to an Improper Certificate Validation weakness in the SRX Series Application Identification app-id signature update client, allowi...

Juniper Junos J-Web CVE-2019-0047 HTML Injection Vulnerability

Description Juniper Junos is prone to an HTML-injection vulnerability. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or control how the site is...

CVE-2019-0070: Improper Input Validation

An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions to take control of other portions of the NFX platform they should not be able to access, and execute commands outside their authorized scope of control. This leads to the attacker being able to ta...

CVE-2019-0067: Undefined Security Weakness

Receipt of a specific link-local IPv6 packet destined to the RE may cause the system to crash and restart vmcore. By continuously sending a specially crafted IPv6 packet, an attacker can repeatedly crash the system causing a prolonged Denial of Service DoS. This issue affects Juniper Networks Jun...

CVE-2019-0074: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability in NFX150 Series and QFX10K Series, EX9200 Series, MX Series and PTX Series devices with Next-Generation Routing Engine NG-RE allows a local authenticated user to read sensitive system files. This issue only affects NFX150 Series and QFX10K Series, EX9200 Series, MX...

PT-2019-4187

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1F6-S12 Junos OS versions 16.1R6 through 16.1R6-S6 Junos OS versions 16.1R7 through 16.1R7-S3 Junos OS versions prior to 17.1R3 Junos OS versions 17.2R1-S3 through 17.2R3-S1 Junos OS versions 17.3R1-S1 through...

CVE-2019-0060: Improper Handling of Exceptional Conditions

The flowd process, responsible for forwarding traffic in SRX Series services gateways, may crash and restart when processing specific transit IP packets through an IPSec tunnel. Continued processing of these packets may result in an extended Denial of Service DoS condition. This issue only occurs...

PT-2019-3485

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1X49-D171, 15.1X49-D180 Junos OS versions prior to 15.1X53-D496, 15.1X53-D69 Junos OS versions prior to 16.1R7-S4 Junos OS versions prior to 16.2R2-S9 Junos OS versions prior to 17.1R3 Junos OS versions prior to...

Juniper Junos CVE-2019-0057 Local Authorization Bypass Vulnerability

Description Juniper Junos is prone to a local authorization-bypass vulnerability. Attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions. Versions prior to Junos OS 18.2R1, and 18.2X75-D5 are vulnerable. Technologies Affected Juniper Junos 18.2...

PT-2019-3869

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 18.2R1 on NFX Series. Description The issue is caused by insufficient input validation, allowing a malicious local attacker to elevate their permissions and execute commands outside their authorized scope of control,...

CVE-2019-0065: Undefined Security Weakness

On MX Series, when the SIP ALG is enabled, receipt of a certain malformed SIP packet may crash the MS-PIC component on MS-MIC or MS-MPC. By continuously sending a crafted SIP packet, an attacker can repeatedly bring down MS-PIC on MS-MIC/MS-MPC causing a sustained Denial of Service. This issue...

PT-2019-3491

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 15.1F6-S12 Juniper Networks Junos OS versions prior to 15.1R7-S2 Juniper Networks Junos OS versions prior to 15.1X49-D150 on SRX Series Juniper Networks Junos OS versions prior to 15.1X53-D68 Juniper...

PT-2019-3489

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 16.1R7-S5 Junos OS versions prior to 16.2R2-S11 Junos OS versions prior to 17.1R3 Junos OS versions prior to 17.2R3-S3 Junos OS versions prior to 17.3R3-S6 Junos OS versions prior to 17.4R2-S8 Junos OS versions prior...

PT-2019-3484

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1X49-D171 Junos OS versions 15.1X49-D180 on SRX Series Junos OS versions 18.2R2-S1 and later, prior to 18.2R3 on SRX Series Junos OS versions prior to 18.4R2 on SRX Series Description The issue is related to error...