PT-2018-8595

Name of the Vulnerable Software and Affected Versions: Junos OS version 17.3R3 Description: A flood of ARP requests sent to the management interface may exhaust the private Internal routing interfaces IRIs next-hop limit, leading to a sustained denial of service DoS condition. This issue is...

CVE-2018-0058: Improper Input Validation

Receipt of a specially crafted IPv6 exception packet may be able to trigger a kernel crash vmcore, causing the device to reboot. The issue is specific to the processing of Broadband Edge BBE client route processing on MX Series subscriber management platforms, introduced by the Tomcat Next...

CVE-2018-0043: Improper Input Validation

Receipt of a specific MPLS packet may cause the routing protocol daemon RPD process to crash and restart or may lead to remote code execution. By continuously sending specific MPLS packets, an attacker can repeatedly crash the RPD process causing a sustained Denial of Service. This issue affects...

CVE-2018-0052: Improper Authentication

If RSH service is enabled on Junos OS and if the PAM authentication is disabled, a remote unauthenticated attacker can obtain root access to the device. RSH service is disabled by default on Junos. There is no documented CLI command to enable this service. However, an undocumented CLI command...

CVE-2018-0050: Improper Input Validation

An error handling vulnerability in Routing Protocols Daemon RPD of Juniper Networks Junos OS allows an attacker to cause RPD to crash. Continued receipt of this malformed MPLS RSVP packet will cause a sustained Denial of Service condition. Affected releases are Juniper Networks Junos OS: 14.1...

CVE-2018-0054: Uncontrolled Resource Consumption

On QFX5000 Series and EX4600 switches, a high rate of Ethernet pause frames or an ARP packet storm received on the management interface fxp0 can cause egress interface congestion, resulting in routing protocol packet drops, such as BGP, leading to peering flaps. The following log message may also...

CVE-2018-0044: Improper Authentication

An insecure SSHD configuration in Juniper Device Manager JDM and host OS on Juniper NFX Series devices may allow remote unauthenticated access if any of the passwords on the system are empty. The affected SSHD configuration has the PermitEmptyPasswords option set to "yes". Affected releases are...

CVE-2018-0047: Improper Neutralization of Input During Web Page Generation

A persistent cross-site scripting vulnerability in the UI framework used by Junos Space Security Director may allow authenticated users to inject persistent and malicious scripts. This may allow stealing of information or performing actions as a different user when other users access the Security...

CVE-2018-0046: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting vulnerability in OpenNMS included with Juniper Networks Junos Space may allow the stealing of sensitive information or session credentials from Junos Space administrators or perform administrative actions. This issue affects Juniper Networks Junos Space versions...

CVE-2018-0049: NULL Pointer Dereference

A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to cause the Junos OS kernel to crash. Continued receipt of this specifically crafted malicious MPLS packet will cause a sustained Denial of Service condition. This issue require it to be received on an...

CVE-2018-0048: Uncontrolled Resource Consumption

A vulnerability in the Routing Protocols Daemon RPD with Juniper Extension Toolkit JET support can allow a network based unauthenticated attacker to cause a severe memory exhaustion condition on the device. This can have an adverse impact on the system performance and availability. This issue onl...

CVE-2018-0062: Improper Input Validation

A Denial of Service vulnerability in J-Web service may allow a remote unauthenticated user to cause Denial of Service which may prevent other users to authenticate or to perform J-Web operations. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D77 on SRX Series;...

PT-2018-1751

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 14.1R8-S5 Junos OS versions prior to 14.1R9 Junos OS 14.1X53 versions prior to 14.1X53-D48 on QFX Switching Junos OS 14.1X53 versions prior to 14.1X53-D130 on QFabric System Junos OS 14.2 versions prior to 14.2R4...

PT-2018-8590

Name of the Vulnerable Software and Affected Versions: Junos OS versions 15.1 through 15.1R7-S1 Junos OS versions 15.1R8 on MX Series Junos OS versions 16.1 through 16.1R4-S10 Junos OS versions 16.1R7 through 16.1R7-S1 Junos OS versions 16.1R8 on MX Series Junos OS versions 16.2 through 16.2R2...

PT-2018-1760

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.1X46-D77 Junos OS versions prior to 12.3R12-S10 Junos OS versions prior to 12.3X48-D70 Junos OS versions prior to 15.1R4-S9 Junos OS versions prior to 15.1R6-S6 Junos OS versions prior to 15.1R7 Junos OS version...

Juniper Networks Releases Security Updates

Juniper Networks has released security updates to address vulnerabilities affecting multiple Junos OS versions. An attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC encourages users and administrators to review the Juniper Security Advisories websit...

PT-2018-1750

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 12.1X46-D76 through 12.1X46-D80 Juniper Networks Junos OS version 12.3R12-S10 Juniper Networks Junos OS versions 12.3X48-D66 through 12.3X48-D74 Juniper Networks Junos OS version 14.1X53-D47 Juniper Networks...

PT-2018-1753

Name of the Vulnerable Software and Affected Versions Junos OS versions 12.1X46 prior to 12.1X46-D77 Junos OS versions 12.3 prior to 12.3R12-S10 Junos OS versions 12.3X48 prior to 12.3X48-D75 Junos OS versions 14.1X53 prior to 14.1X53-D47 Junos OS versions 15.1 prior to 15.1R4-S9, 15.1R6-S6, 15.1...

PT-2018-1754

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 15.1X49-D30 on vSRX. Description An authentication bypass issue in the initial boot sequence of Juniper Networks Junos OS on vSRX Series may allow an attacker to gain full control of the system witho...

PT-2018-1758

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 12.1X46-D77 on SRX Series Junos OS versions prior to 12.3R12-S10 Junos OS versions prior to 12.3X48-D75 on SRX Series Junos OS versions prior to 14.1X53-D47 on QFX/EX Series Junos OS versions prior to 14.1X53-D130 on...