9649 matches found
CVE-2017-2303
On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D50, 12.1X47 prior to 12.1X47-D40, 12.3 prior to 12.3R13, 12.3X48 prior to 12.3X48-D30, 13.2X51 prior to 13.2X51-D40, 13.3 prior to 13.3R10, 14.1 prior to 14.1R8, 14.1X53 prior to 14.1X53-D35, 14.1X55 prior to...
CVE-2017-2304
Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53-D40, 15.1X53 prior to 15.1X53-D40, 15.1 prior to 15.1R2, do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from...
CVE-2017-2305
On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can create privileged users, allowing privilege escalation...
Design/Logic Flaw
On Juniper Networks SRX Series Services Gateways chassis clusters running Junos OS 12.1X46 prior to 12.1X46-D65, 12.3X48 prior to 12.3X48-D40, 12.3X48 prior to 12.3X48-D60, flowd daemon on the primary node of an SRX Series chassis cluster may crash and restart when attempting to synchronize a...
CVE-2017-2302
On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D55, 12.1X47 prior to 12.1X47-D45, 12.3R13 prior to 12.3R13, 12.3X48 prior to 12.3X48-D35, 13.3 prior to 13.3R10, 14.1 prior to 14.1R8, 14.1X53 prior to 14.1X53-D40, 14.1X55 prior to 14.1X55-D35, 14.2 prior to...
CVE-2017-2303
On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D50, 12.1X47 prior to 12.1X47-D40, 12.3 prior to 12.3R13, 12.3X48 prior to 12.3X48-D30, 13.2X51 prior to 13.2X51-D40, 13.3 prior to 13.3R10, 14.1 prior to 14.1R8, 14.1X53 prior to 14.1X53-D35, 14.1X55 prior to...
CVE-2017-2305
On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can create privileged users, allowing privilege escalation...
CVE-2017-2306
On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can execute code on the device...
CVE-2017-2307
A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions prior to 16.1R1 may allow remote attackers to steal sensitive information or perform certain administrative actions on Junos Space...
CVE-2017-2308
An XML External Entity Injection vulnerability in Juniper Networks Junos Space versions prior to 16.1R1 may allow an authenticated user to read arbitrary files on the device...
CVE-2017-2309
On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is enabled for the Junos Space cluster, some restricted web services are accessible over the network. This represents an information leak risk...
CVE-2017-2310
A firewall bypass vulnerability in the host based firewall of Juniper Networks Junos Space versions prior to 16.1R1 may permit certain crafted packets, representing a network integrity risk...
CVE-2017-2311
On Juniper Networks Junos Space versions prior to 16.1R1, an unauthenticated remote attacker with network access to Junos space device can easily create a denial of service condition...
CVE-2017-2300
The CVE-2017-2300 issue affects Juniper Networks SRX Series chassis clusters running Junos OS where the flowd daemon on the primary node crashes during multicast session synchronization. Affected versions are Junos OS 12.1X46 before 12.1X46-D65, and 12.3X48 before 12.3X48-D40 and before 12.3X48-D...
CVE-2017-2301
CVE-2017-2301 affects Juniper Networks Junos OS (various releases listed) where the DHCPv6-capable jdhcpd daemon crashes and restarts upon receiving crafted DHCPv6 packets from a subscriber. Repeated crashes may cause an extended denial of service for subscribers attempting to obtain IPv6 address...
CVE-2017-2302
CVE-2017-2302 affects Junos OS with BGP add-path enabled (send or both send/receive) across multiple releases (e.g., 12.1X46–D55, 12.1X47–D45, 12.3R13–, 12.3X48–D35, 13.3–R10, 14.1–R8, 14.1X53–D40, 14.1X55–D35, 14.2–R6, 15.1–F2/R1, 15.1X49–D20). A network-based attacker can cause the rpd daemon t...
CVE-2017-2303
CVE-2017-2303 affects Juniper Junos OS when RIP is enabled. The vulnerability arises from how RIP advertisements are processed by the routing protocol daemon (rpd), allowing certain crafted RIP updates to crash rpd and cause a denial-of-service condition. Affected Junos versions include 12.1X46 b...
CVE-2017-2304
CVE-2017-2304 affects Juniper Junos OS on QFX3500/3600/5100/5200 and EX4300/EX4600 devices. The root cause is that Ethernet packets are not padded with zeros, allowing packets to reveal fragments of system memory or data from previous packets (Etherleak). Impact is information disclosure via netw...
CVE-2017-2305
CVE-2017-2305 concerns Juniper Networks Junos Space prior to 16.1R1, where an insufficient authorization check in the administrative web interface lets readonly users create privileged accounts, enabling privilege escalation. The vulnerability path and impact are described in the NVD entry as a u...
CVE-2017-2306
CVE-2017-2306 affects Juniper Networks Junos Space: versions prior to 16.1R1 suffer from an insufficient authorization check in the administrative web interface, allowing readonly users to execute code on the device. This is described in the NVD entry for CVE-2017-2306, which notes remote code ex...