CVE-2019-0041: Improper Access Control

On EX4300-MP Series devices with any lo0 filters applied, transit network traffic may reach the control plane via loopback interface lo0. The device may fail to forward such traffic. This issue affects Juniper Networks Junos OS 18.2 versions prior to 18.2R1-S2, 18.2R2 on EX4300-MP Series. This...

Juniper Junos CVE-2019-0043 Denial of Service Vulnerability

Description Juniper Junos is prone to a denial-of-service vulnerability. An attacker may exploit this issue to cause denial-of-service conditions. Technologies Affected Juniper ACX Series Juniper EX Series Juniper EX2300 Series Juniper EX3400 Series Juniper JUNOS 12.1X46-D25 Juniper JUNOS 12.3...

CVE-2019-0035: Trust Boundary Violation

When "set system ports console insecure" is enabled, root login is disallowed for Junos OS as expected. However, the root password can be changed using "set system root-authentication plain-text-password" on systems booted from an OAM Operations, Administration, and Maintenance volume, leading to...

CVE-2019-0043: Improper Resource Shutdown or Release

In MPLS environments, receipt of a specific SNMP packet may cause the routing protocol daemon RPD process to crash and restart. By continuously sending a specially crafted SNMP packet, an attacker can repetitively crash the RPD process causing prolonged denial of service. No other Juniper Network...

PT-2019-2080

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1X49-D160 on SRX340/SRX345 Junos OS version 17.3 on SRX340/SRX345 Junos OS versions prior to 17.4R2-S3, 17.4R3 on SRX340/SRX345 Junos OS versions prior to 18.1R3-S1 on SRX340/SRX345 Junos OS versions prior to 18.2...

PT-2019-1974

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to and including 12.3 Junos OS 14.1X53 versions prior to 14.1X53-D130, 14.1X53-D49 Junos OS 15.1 versions prior to 15.1F6-S12, 15.1R7-S4 Junos OS 15.1X49 versions prior to 15.1X49-D161, 15.1X49-D170 Junos OS 15.1X53...

CVE-2019-0040: Exposure of Sensitive Information to an Unauthorized Actor

On Junos OS, rpcbind should only be listening to port 111 on the internal routing instance IRI. External packets destined to port 111 should be dropped. Due to an information leak vulnerability, responses were being generated from the source address of the management interface e.g. fxp0 thus...

CVE-2019-0031: Uncontrolled Resource Consumption

Specific IPv6 DHCP packets received by the jdhcpd daemon will cause a memory resource consumption issue to occur on a Junos OS device using the jdhcpd daemon configured to respond to IPv6 requests. Once started, memory consumption will eventually impact any IPv4 or IPv6 request serviced by the...

Junos OS: SRX5000 series: Kernel crash (vmcore) upon receipt of a specific packet on fxp0 interface

Receipt of a specific packet on the out-of-band management interface fxp0 may cause the system to crash and restart vmcore. By continuously sending a specially crafted packet to the fxp0 interface, an attacker can repetitively crash the rpd process causing prolonged Denial of Service DoS. Affecte...

Security Bulletin: IBM API Connect is impacted by multiple open source software vulnerabilities.

Summary IBM API Connect has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2017-0268 DESCRIPTION: Microsoft Server Message Block 1.0 SMBv1 could allow a remote attacker to obtain sensitive information, caused by improper handling of incoming requests. By sending...

The vulnerability of the Junos operating system, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of the Junos operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Junos OS, related to errors in the token caching mechanisms of dynamic VPN connections, allows a hacker to gain access to the device.

The vulnerability of the Junos OS is related to errors in the token caching mechanisms of dynamic VPN connections. Exploiting this vulnerability can allow an attacker to remotely gain access to the device...

The vulnerability of Juniper Networks Junos Space, a platform for managing network resources, related to insufficient access control, allows attackers to delete information from the internal database.

The vulnerability of Juniper Networks’ Junos Space network resource management platform is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to delete information from the internal database using specially crafted Ajax requests...

The vulnerability of JunOS operating system’s network firewall filter, which allows a hacker to gain access to the device

The vulnerability of JunOS’s network firewall filter is related to a malfunction of the policer technology, combined with other technologies. Exploiting this vulnerability can allow an attacker operating remotely to gain access to the device...

The vulnerability of Juniper Networks’ Junos Space platform, related to the unlimited loading of malicious files, allows attackers to upload malware-infected files.

The vulnerability of the Juniper Networks Junos Space network resource management platform is related to the ability to load files of a malicious nature without limitation. Exploiting this vulnerability allows a remote attacker to load malicious files into the system...

The vulnerability of the JunOS operating system, related to errors in input/output operations, allows a perpetrator to trigger a service failure.

The vulnerability of the JunOS operating system is related to errors in input/output operations. Exploiting this vulnerability can allow an attacker to cause a service failure due to a disruption in communication between the routing engine RE and the packet forwarding engine PFE...

The vulnerability of JunOS operating system’s network firewall filter, allowing a hacker to execute arbitrary code

The vulnerability of JunOS’s network firewall filter is related to errors in the processing of IPv6 packets. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted IPv6 packet...

Junos OS: Stateless firewall filter ignores IPv6 extension headers (JSA10905)

According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability which may allow IPv6 packets that should have been blocked to be forwarded. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid122241; scriptversion"1.3";...

Junos OS: Multiple vulnerabilities in libxml2 (JSA10902)

According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability. When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, a reachable assertion...

Juniper Junos MX Malformed Packet - DOS (JSA10900)

Receipt of a malformed packet on MX Series devices with dynamic vlan configuration can trigger an uncontrolled recursion loop in the Broadband Edge subscriber management daemon bbe-smgd, and lead to high CPU usage and a crash of the bbe-smgd service. Repeated receipt of the same packet can result...