Junos OS: FPC process crashes after J-Flow processes a malformed packet (JSA10914)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability. By continuously sending the offending packet, an attacker can repeatedly crash the FPC process causing a sustained Denial of Service DoS. This issue affects both IPv4 a...

Juniper Junos vMX Predictable IP ID Sequence Numbers (JSA10903)

According to its self-reported version number, the remote Junos device uses a predictable IP ID sequence number. It is, therefore, vulnerable to a family of attacks that rely on this property, including a susceptibility to being used as a 'zombie' host in an 'idle scan' blind port scan of another...

Junos OS: Multiple vulnerabilities in libxml2 (JSA10916)

According to its self-reported version number, the remote Juniper Junos device is affected by a Multiple vulnerabilities in libxml2: - Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.CVE-2016-4448 - Th...

Juniper Junos Packet Forwarding Engine Potential RCE (JSA10906)

According to its self-reported version number, the remote Junos device is affected by a potential remote code execution vulnerability due to how the Packet Forwarding Engine manager FXPC handles HTTP packets. An attacker could potentially crash the fxpc daemon or execute code. C Tenable Network...

Juniper Junos Space < 18.3R1 Multiple Vulnerabilities (JSA10917)

According to its self-reported version number, the remote Junos Space version is prior to 18.3R1. It is, therefore, affected by multiple vulnerabilities: - A use after free vulnerability exists in the dogetmempolicy function. An local attacker can exploit this to cause a denial of service...

Juniper Junos Space 18.4.x < 18.4R1 Multiple Vulnerabilities (JSA10917)

According to its self-reported version number, the remote Junos Space version is 18.4.x prior to 18.4R1. It is, therefore, affected by multiple vulnerabilities : - An integer overflow issue exists in procps-ng. This is related to CVE-2018-1124. CVE-2018-1126 - A directory traversal issue exits in...

PT-2019-1361

Name of the Vulnerable Software and Affected Versions Junos OS on EX2300 and EX3400 series versions 15.1X53 prior to 15.1X53-D590 Junos OS on EX2300 and EX3400 series versions 18.1 prior to 18.1R2-S2, 18.1R3 Junos OS on EX2300 and EX3400 series versions 18.2 prior to 18.2R2 Description The issue ...

PT-2019-1182

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 14.1X53-D47 on EX and QFX Virtual Chassis Platforms Juniper Networks Junos OS versions prior to 15.1R7-S3 on all Virtual Chassis Platforms Juniper Networks Junos OS versions prior to 15.1X53-D50 on E...

PT-2019-1177

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 17.2R1-S7, 17.2R3 Juniper Networks Junos OS versions prior to 17.3R3-S3 Juniper Networks Junos OS versions prior to 17.4R1-S4, 17.4R2 Juniper Networks Junos OS versions prior to 17.2X75-D110 Juniper...

PT-2019-1360

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 14.1X53-D47 Junos OS versions prior to 15.1R7 Junos OS versions prior to 15.1X53-D234 on QFX5200/QFX5110 series Junos OS versions prior to 15.1X53-D591 on EX2300/EX3400 series Junos OS versions prior to 16.1R7 Junos ...

PT-2019-1147

Name of the Vulnerable Software and Affected Versions: Junos versions prior to 17.2X75-D91 Junos versions prior to 17.2X75-D100 Junos versions prior to 17.4R2-S1 Junos versions prior to 17.4R3 Junos versions prior to 18.1R3-S1 Junos versions prior to 18.2R1-S3 Junos versions prior to 18.2R2...

PT-2019-1145

Name of the Vulnerable Software and Affected Versions: Junos OS on SRX Series versions prior to 12.1X46-D81 Junos OS on SRX Series versions prior to 12.3X48-D77 Junos OS on SRX Series versions prior to 15.1X49-D101 Junos OS on SRX Series versions prior to 15.1X49-D110 Description: The issue is...

PT-2019-1178

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.1X46-D77 Junos OS versions prior to 12.3X48-D77 Junos OS versions prior to 15.1F6-S10 Junos OS versions prior to 15.1R6-S6 Junos OS versions prior to 15.1R7 Junos OS versions prior to 15.1X49-D150 Junos OS version...

PT-2019-1183

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1F5 on vMX Series Description The issue is related to the predictability of sequential IP ID in the Junos operating system. This predictability can be exploited by a remote attacker to perform attacks that rely on...

PT-2019-1144

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 12.1X46-D77 Junos OS versions prior to 12.3R12-S10 Junos OS versions prior to 12.3X48-D70 Junos OS versions prior to 14.1X53-D47 Junos OS versions prior to 15.1R3 Junos OS versions prior to 15.1F3 Junos OS versions...

PT-2019-1359

Name of the Vulnerable Software and Affected Versions Junos OS on EX2300 and EX3400 series versions prior to 15.1X53-D590 Junos OS on EX2300 and EX3400 series versions 18.1 prior to 18.1R3 Junos OS on EX2300 and EX3400 series versions 18.2 prior to 18.2R2 Description The issue is related to a...

PT-2019-1146

Name of the Vulnerable Software and Affected Versions: Junos versions prior to 12.1X46-D81 Junos versions prior to 12.3R12-S12 Junos versions prior to 12.3X48-D76 Junos versions prior to 14.1X53-D48 Junos versions prior to 15.1F6-S12 Junos versions prior to 15.1R7-S2 Junos versions prior to...

PT-2019-1143

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 16.1R7-S1 Juniper Networks Junos OS versions prior to 16.2R2-S7 Juniper Networks Junos OS versions prior to 17.1R2-S10 Juniper Networks Junos OS versions prior to 17.1R3 Juniper Networks Junos OS...

The vulnerability in the web interface of the Juniper Networks Junos Space Security Director arises from insufficient protection of the web page structure, allowing attackers to disclose sensitive information or perform actions on behalf of other users.

The vulnerability of the Juniper Networks Junos Space Security Director administrative interface arises due to insufficient protection of the web page structure. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or perform actions on behalf of other users...

The vulnerability of Junos Operating System’s Routing Protocol Daemon (RPD) allows a hacker to execute arbitrary code.

The vulnerability of the Junos operating system’s Routing Protocol Daemon RPD arises from errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending multiple specially crafted MPLS packets within a short period of time...