Design/Logic Flaw

On Juniper Networks EX Series Ethernet Switches running affected Junos OS versions, a vulnerability in IPv6 processing has been discovered that may allow a specially crafted IPv6 Neighbor Discovery ND packet destined to an EX Series Ethernet Switch to cause a slow memory leak. A malicious...

Code injection

On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15.1R4, 16.1 prior to 16.1R3, on M/MX platforms where Enhanced Subscriber Management for DHCPv6 subscribers is configured, a vulnerability in processing IPv6 ND packets originating from subscribers and destined to M/MX series routers can...

Information disclosure

An information disclosure vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, network-based attacker to replicate the underlying Junos OS VM and all data it maintains to their local system for future...

Design/Logic Flaw

On Juniper Networks devices running Junos OS affected versions and with LDP enabled, a specific LDP packet destined to the RE Routing Engine will consume a small amount of the memory allocated for the rpd routing protocol daemon process. Over time, repeatedly receiving this type of LDP packets wi...

CVE-2017-2340

On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15.1R4, 16.1 prior to 16.1R3, on M/MX platforms where Enhanced Subscriber Management for DHCPv6 subscribers is configured, a vulnerability in processing IPv6 ND packets originating from subscribers and destined to M/MX series routers can...

CVE-2017-2312

On Juniper Networks devices running Junos OS affected versions and with LDP enabled, a specific LDP packet destined to the RE Routing Engine will consume a small amount of the memory allocated for the rpd routing protocol daemon process. Over time, repeatedly receiving this type of LDP packets wi...

CVE-2017-2313

Juniper Networks devices running affected Junos OS versions may be impacted by the receipt of a crafted BGP UPDATE which can lead to an rpd routing process daemon crash and restart. Repeated crashes of the rpd daemon can result in an extended denial of service condition. The affected Junos OS...

CVE-2017-2312

On Juniper Networks devices running Junos OS affected versions and with LDP enabled, a specific LDP packet destined to the RE Routing Engine will consume a small amount of the memory allocated for the rpd routing protocol daemon process. Over time, repeatedly receiving this type of LDP packets wi...

CVE-2017-2315

On Juniper Networks EX Series Ethernet Switches running affected Junos OS versions, a vulnerability in IPv6 processing has been discovered that may allow a specially crafted IPv6 Neighbor Discovery ND packet destined to an EX Series Ethernet Switch to cause a slow memory leak. A malicious...

CVE-2017-2340

On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15.1R4, 16.1 prior to 16.1R3, on M/MX platforms where Enhanced Subscriber Management for DHCPv6 subscribers is configured, a vulnerability in processing IPv6 ND packets originating from subscribers and destined to M/MX series routers can...

CVE-2017-2312

CVE-2017-2312 affects Juniper Networks Junos OS devices with LDP enabled (IPv4 or IPv6) where a targeted LDP packet to the Routing Engine consumes incremental memory in the rpd daemon, leading to memory exhaustion and a crash/restart of rpd. Affected Junos versions include 13.3 before 13.3R10; 14...

CVE-2017-2313

CVE-2017-2313 affects Juniper Networks Junos OS. A crafted BGP UPDATE can trigger an rpd (routing process daemon) crash and restart, potentially causing extended DoS through repeated rpd crashes. Affected Junos OS versions include 15.1 family (before 15.1F2-S15, 15.1F5-S7, 15.1F6-S5, 15.1F7, 15.1...

CVE-2017-2340

CVE-2017-2340 affects Juniper Networks Junos OS on M/MX platforms with Enhanced Subscriber Management for DHCPv6 enabled. A vulnerability in IPv6 Neighbor Discovery processing can cause the Packet Forwarding Engine (PFE) to hang or crash. Affected releases include Junos OS 15.1R3–15.1R4 and 16.1 ...

CVE-2017-2312: Missing Release of Resource after Effective Lifetime

On Juniper Networks devices running Junos OS affected versions and with LDP enabled, a specific LDP packet destined to the RE Routing Engine will consume a small amount of the memory allocated for the rpd routing protocol daemon process. Over time, repeatedly receiving this type of LDP packets wi...

CVE-2017-2340: Improper Input Validation

On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15.1R4, 16.1 prior to 16.1R3, on M/MX platforms where Enhanced Subscriber Management for DHCPv6 subscribers is configured, a vulnerability in processing IPv6 ND packets originating from subscribers and destined to M/MX series routers can...

CVE-2017-2326: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unprivileged, authenticated, network-based attacker to replicate the underlying Junos OS VM and all data it maintains to their local system for future...

CVE-2017-2315: Missing Release of Resource after Effective Lifetime

On Juniper Networks EX Series Ethernet Switches running affected Junos OS versions, a vulnerability in IPv6 processing has been discovered that may allow a specially crafted IPv6 Neighbor Discovery ND packet destined to an EX Series Ethernet Switch to cause a slow memory leak. A malicious...

CVE-2017-2313: Improper Input Validation

Juniper Networks devices running affected Junos OS versions may be impacted by the receipt of a crafted BGP UPDATE which can lead to an rpd routing process daemon crash and restart. Repeated crashes of the rpd daemon can result in an extended denial of service condition. The affected Junos OS...

PT-2017-1974

Name of the Vulnerable Software and Affected Versions Junos OS versions 13.3 prior to 13.3R10 Junos OS versions 14.1 prior to 14.1R8 Junos OS versions 14.2 prior to 14.2R7-S6 or 14.2R8 Junos OS versions 15.1 prior to 15.1F2-S14, 15.1F6-S4, 15.1F7, 15.1R4-S7, 15.1R5 Junos OS versions 15.1X49 befor...

PT-2017-1972

Name of the Vulnerable Software and Affected Versions Junos OS versions 12.3 prior to 12.3R12-S4, 12.3R13 Junos OS versions 13.3 prior to 13.3R10 Junos OS versions 14.1 prior to 14.1R8-S3, 14.1R9 Junos OS versions 14.1X53 prior to 14.1X53-D12, 14.1X53-D40 Junos OS versions 14.1X55 prior to...