CVE-2019-0008

CVE-2019-0008 describes a stack-based buffer overflow in the Junos OS Packet Forwarding Engine manager (FXPC) on QFX5000-series, EX4300, and EX4600 devices. A sequence of valid BGP or IPv6 BFD packets may crash the fxpc daemon or potentially enable remote code execution. Affected Junos OS release...

PT-2019-1970

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 16.1R7 Junos OS versions 16.1X65 prior to 16.1X65-D48 Junos OS versions 16.2 prior to 16.2R2-S8 Junos OS versions 17.1 prior to 17.1R2-S7, 17.1R3 Junos OS versions 17.2 prior to 17.2R1-S7, 17.2R3 Junos OS versions...

PT-2019-1972

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 12.1X46-D25 through 12.1X46-D70 Juniper Networks Junos OS version 12.1X46-D73 Juniper Networks Junos OS versions 12.3X48 prior to 12.3X48-D50 Juniper Networks Junos OS versions 15.1X49 prior to 15.1X49-D75...

PT-2019-1975

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1F6-S12 Junos OS versions prior to 15.1R7-S3 Junos OS versions prior to 15.1X49-D171 Junos OS versions prior to 15.1X49-D180 Junos OS versions prior to 15.1X53-D236 Junos OS versions prior to 15.1X53-D496 Junos OS...

PT-2019-2079

Name of the Vulnerable Software and Affected Versions Junos OS versions 15.1 through 15.1F6-S11 Junos OS versions 15.1X53 through 15.1X53-D235 Junos OS versions 16.1 through 16.1R7 Junos OS versions 16.2 through 16.2R2-S8 Junos OS versions 17.1 through 17.1R2 Junos OS versions 17.2 through...

CVE-2019-0038: Uncontrolled Resource Consumption

Crafted packets destined to the management interface fxp0 of an SRX340 or SRX345 services gateway may create a denial of service DoS condition due to buffer space exhaustion. This issue only affects the SRX340 and SRX345 services gateways. No other products or platforms are affected by this...

CVE-2019-0036: Improper Access Control

When configuring a stateless firewall filter in Junos OS, terms named using the format "internal-n" e.g. "internal-1", "internal-2", etc. are silently ignored. No warning is issued during configuration, and the config is committed without error, but the filter criteria will match all packets...

CVE-2019-0037: Undefined Security Weakness

In a Dynamic Host Configuration Protocol version 6 DHCPv6 environment, the jdhcpd daemon may crash and restart upon receipt of certain DHCPv6 solicit messages received from a DHCPv6 client. By continuously sending the same crafted packet, an attacker can repeatedly crash the jdhcpd process causin...

PT-2019-2078

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 18.2R1-S2 Junos OS version 18.2R2 Description The issue is related to errors in security settings, allowing a remote attacker to impact the integrity and availability of protected information. On EX4300-MP Series...

PT-2019-1971

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 16.1R7-S4, 16.1R7-S5 Junos OS versions prior to 16.2R2-S9, 16.2R3 Junos OS versions prior to 17.1R3 Junos OS versions prior to 17.2R3-S1 Junos OS versions prior to 17.3R3-S3, 17.3R3-S4, 17.3R4 Junos OS versions prior...

CVE-2019-0019: Improper Resource Shutdown or Release

When BGP tracing is enabled an incoming BGP message may cause the Junos OS routing protocol daemon rpd process to crash and restart. While rpd restarts after a crash, repeated crashes can result in an extended DoS condition. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to...

CVE-2019-0040: Exposure of Sensitive Information to an Unauthorized Actor

On Junos OS, rpcbind should only be listening to port 111 on the internal routing instance IRI. External packets destined to port 111 should be dropped. Due to an information leak vulnerability, responses were being generated from the source address of the management interface e.g. fxp0 thus...

PT-2019-2085 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 14.1X53-D49 Junos OS versions prior to 15.1F6-S12 Junos OS versions prior to 15.1R7-S3 Junos OS versions prior to 15.1X49-D160 Junos OS versions prior to 15.1X53-D236 Junos OS versions prior to 15.1X53-D495 Junos OS...

PT-2019-1967

Name of the Vulnerable Software and Affected Versions Junos OS versions 14.1X53; 15.1X53 prior to 15.1X53-D235; 17.1 prior to 17.1R3; 17.2 prior to 17.2R3; 17.3 prior to 17.3R3-S2, 17.3R4; 17.4 prior to 17.4R2-S1, 17.4R3; 18.1 prior to 18.1R3-S1, 18.1R4; 18.2 prior to 18.2R2; 18.2X75 prior to...

PT-2019-1973

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.1X46-D82 Junos OS versions prior to 12.3X48-D80 Junos OS versions prior to 15.1X49-D160 Description The issue exists due to insufficient input validation in the implementation of the fxp0 interface. Exploitation o...

CVE-2019-0039: Improper Restriction of Excessive Authentication Attempts

If REST API is enabled, the Junos OS login credentials are vulnerable to brute force attacks. The high default connection limit of the REST API may allow an attacker to brute-force passwords using advanced scripting techniques. Additionally, administrators who do not enforce a strong password...

CVE-2019-0008: Stack-based Buffer Overflow

A certain sequence of valid BGP or IPv6 BFD packets may trigger a stack based buffer overflow in the Junos OS Packet Forwarding Engine manager FXPC process on QFX5000 series, EX4300, EX4600 devices. This issue can result in a crash of the fxpc daemon or may potentially lead to remote code...

CVE-2019-0033: Uncontrolled Resource Consumption

A firewall bypass vulnerability in the proxy ARP service of Juniper Networks Junos OS allows an attacker to cause a high CPU condition leading to a Denial of Service DoS. This issue affects only IPv4. Affected releases are Juniper Networks Junos OS: 12.1X46 versions above and including 12.1X46-D2...

CVE-2019-0041: Improper Access Control

On EX4300-MP Series devices with any lo0 filters applied, transit network traffic may reach the control plane via loopback interface lo0. The device may fail to forward such traffic. This issue affects Juniper Networks Junos OS 18.2 versions prior to 18.2R1-S2, 18.2R2 on EX4300-MP Series. This...

Juniper Junos CVE-2019-0043 Denial of Service Vulnerability

Description Juniper Junos is prone to a denial-of-service vulnerability. An attacker may exploit this issue to cause denial-of-service conditions. Technologies Affected Juniper ACX Series Juniper EX Series Juniper EX2300 Series Juniper EX3400 Series Juniper JUNOS 12.1X46-D25 Juniper JUNOS 12.3...