PT-2018-8576

Name of the Vulnerable Software and Affected Versions: Junos OS versions 15.1 through 17.4 Description: The system can crash and restart when the fxp0 interface is placed into promiscuous mode via the 'monitor traffic interface fxp0' command during a broadcast storm. This issue affects both singl...

CVE-2018-0034: Improper Input Validation

A Denial of Service vulnerability exists in the Juniper Networks Junos OS JDHCPD daemon which allows an attacker to core the JDHCPD daemon by sending a crafted IPv6 packet to the system. This issue is limited to systems which receives IPv6 DHCP packets on a system configured for DHCP processing...

CVE-2018-0032: Improper Input Validation

The receipt of a crafted BGP UPDATE can lead to a routing process daemon RPD crash and restart. Repeated receipt of the same crafted BGP UPDATE can result in an extended denial of service condition for the device. This issue only affects the specific versions of Junos OS listed within this...

CVE-2018-0031: Uncontrolled Resource Consumption

Receipt of specially crafted UDP/IP packets over MPLS may be able to bypass a stateless firewall filter. The crafted UDP packets must be encapsulated and meet a very specific packet format to be classified in a way that bypasses IP firewall filter rules. The packets themselves do not cause a...

CVE-2018-0027: Improper Input Validation

Receipt of a crafted or malformed RSVP PATH message may cause the routing protocol daemon RPD to hang or crash. When RPD is unavailable, routing updates cannot be processed which can lead to an extended network outage. If RSVP is not enabled on an interface, then the issue cannot be triggered via...

CVE-2018-0029: Uncontrolled Resource Consumption

While experiencing a broadcast storm, placing the fxp0 interface into promiscuous mode via the 'monitor traffic interface fxp0' can cause the system to crash and restart vmcore. This issue only affects Junos OS 15.1 and later releases, and affects both single core and multi-core REs. Releases pri...

PT-2018-8575

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 16.1R3 Description: The issue is caused by the receipt of a crafted or malformed RSVP PATH message, which may cause the routing protocol daemon RPD to hang or crash. This can lead to an extended network outage becau...

PT-2018-8580

Name of the Vulnerable Software and Affected Versions: Junos OS versions 15.1X53-D21 through 15.1X53-D60 Description: The issue allows a superuser to reboot to an unintended additional Open Network Install Environment ONIE partition, which wipes out the content of the Junos partition and its...

PT-2018-8577

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 15.1F6-S10 Junos OS versions prior to 15.1R4-S9 Junos OS versions prior to 15.1R6-S6 Junos OS versions prior to 15.1R7 Junos OS versions prior to 16.1R3-S8 Junos OS versions prior to 16.1R4-S9 Junos OS versions prio...

PT-2018-8579

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 12.3R12-S10 on EX Series Juniper Networks Junos OS versions prior to 12.3X48-D70 on SRX Series Juniper Networks Junos OS versions prior to 14.1X53-D47 on EX2200/VC, EX3200, EX3300/VC, EX4200, EX4300...

PT-2018-8578

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 12.1X46-D76 Junos OS versions prior to 12.3R12-S10 Junos OS versions prior to 12.3X48-D66 Junos OS versions prior to 12.3X48-D70 Junos OS versions prior to 14.1X53-D47 Junos OS versions prior to 15.1F6-S10 Junos OS...

PT-2018-2499

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 16.1X65-D47 Junos OS versions prior to 17.2X75-D91 Junos OS versions prior to 17.2X75-D110 Junos OS versions prior to 17.3R1-S4 Junos OS versions prior to 17.3R2 Junos OS versions prior to 17.4R1-S3 Junos OS versions...

CVE-2018-0024: Improper Privilege Management

An Improper Privilege Management vulnerability in a shell session of Juniper Networks Junos OS allows an authenticated unprivileged attacker to gain full control of the system. Affected releases are Juniper Networks Junos OS: 12.1X46 versions prior to 12.1X46-D45 on SRX Series; 12.3X48 versions...

CVE-2018-0026: Undefined Security Weakness

After Junos OS device reboot or upgrade, the stateless firewall filter configuration may not take effect. This issue can be verified by running the command: user@re0 show interfaces extensive | match filters" CAM destination filters: 0, CAM source filters: 0 Note: when the issue occurs, it does n...

PT-2018-8574

Name of the Vulnerable Software and Affected Versions: Junos OS versions 15.1R4 through 15.1R6 Junos OS versions 15.1X8 prior to 15.1X8.3 Description: The stateless firewall filter configuration may not take effect after a Junos OS device reboot or upgrade. This issue affects firewall filters for...

CVE-2018-0037: Improper Input Validation

Junos OS routing protocol daemon RPD process may crash and restart or may lead to remote code execution while processing specific BGP NOTIFICATION messages. By continuously sending crafted BGP NOTIFICATION messages, an attacker can repeatedly crash the RPD process causing a sustained Denial of...

Moderate: Red Hat Security Advisory: ansible security and bug fix update

An update for ansible is now available for Ansible Engine 2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link...

The vulnerability of the MySQL server of Juniper Networks’ Junos Space network management platform allows a hacker to gain access with administrator privileges.

The vulnerability of the MySQL server of the Juniper Networks Junos Space network resource management platform is related to the use of pre-installed user accounts. Exploiting this vulnerability can allow a malicious actor to gain access with administrator privileges remotely...

The vulnerability of the Junos operating system, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure.

The vulnerability of the Junos operating system is related to an uncontrolled consumption of resources when processing certain MPLS Multiprotocol Label Switching packets. Exploiting this vulnerability allows a malicious actor to cause service failures by using specially crafted MPLS packets...

The vulnerability of the Junos operating system, related to packet processing errors in CLNP, allows a attacker to execute arbitrary code or trigger a kernel error.

The vulnerability of the Junos operating system is related to errors in packet processing within the CLNP protocol. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a kernel error by using specially crafted CLNP packets...