Memory corruption

Juniper Junos OS 9.1 through 11.4 before 11.4R11, 12.1 before R10, 12.1X44 before D40, 12.1X46 before D30, 12.1X47 before D11 and 12.147-D15, 12.1X48 before D41 and D62, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4-S2, 13.1X49 before D49, 13.1X50 before 30, 13.2 before R4,...

Design/Logic Flaw

The Juniper SRX Series devices with Junos 11.4 before 11.4R12-S4, 12.1X44 before 12.1X44-D40, 12.1X45 before 12.1X45-D30, 12.1X46 before 12.1X46-D25, and 12.1X47 before 12.1X47-D10, when an Application Layer Gateway ALG is enabled, allows remote attackers to cause a denial of service flowd crash...

CVE-2014-6379

The CVE-2014-6379 entry applies to Juniper Networks Junos OS. When a RADIUS accounting server is configured as the system accounting destination radius, Junos may create an entry in /var/etc/pam_radius.conf, enabling an authentication bypass via unspecified vectors. Affected versions include 11.4...

CVE-2014-3818

CVE-2014-3818 affects Juniper Junos OS versions listed in the description; the flaw is in handling BGP UPDATE messages with 4-byte AS numbers, leading to memory corruption and a DoS in the rpd process (causing a crash/restart). Connected sources confirm a BGP UPDATE DoS condition and provide the ...

CVE-2014-3825

The Juniper SRX Series devices with Junos 11.4 before 11.4R12-S4, 12.1X44 before 12.1X44-D40, 12.1X45 before 12.1X45-D30, 12.1X46 before 12.1X46-D25, and 12.1X47 before 12.1X47-D10, when an Application Layer Gateway ALG is enabled, allows remote attackers to cause a denial of service flowd crash...

CVE-2014-6378

Juniper Junos 11.4 before R12-S4, 12.1X44 before D35, 12.1X45 before D30, 12.1X46 before D25, 12.1X47 before D10, 12.2 before R9, 12.2X50 before D70, 12.3 before R7, 13.1 before R4 before S3, 13.1X49 before D55, 13.1X50 before D30, 13.2 before R5, 13.2X50 before D20, 13.2X51 before D26 and D30,...

CVE-2014-6379

Juniper Junos 11.4 before R12, 12.1 before R10, 12.1X44 before D35, 12.1X45 before D25, 12.1X46 before D20, 12.1X47 before D10, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4-S3, 13.1X49 before D55, 13.1X50 before D30, 13.2 before R4, 13.2X50 before D20, 13.2X51 before D26 and...

CVE-2014-6380

Juniper Junos 11.4 before R11, 12.1 before R9, 12.1X44 before D30, 12.1X45 before D20, 12.1X46 before D15, 12.1X47 before D10, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4, 13.1X49 before D55, 13.1X50 before D30, 13.2 before R4, 13.2X50 before D20, 13.2X51 before D15, 13.2X5...

CVE-2014-6380

Juniper Networks Junos OS is affected by a DoS vulnerability (CVE-2014-6380) involving the em interface when connecting to an internal network. Affected versions include 11.4 before R11, 12.1 before R9, 12.1X44 before D30, 12.1X45 before D20, 12.1X46 before D15, 12.1X47 before D10, 12.2 before R8...

CVE-2014-3818

Juniper Junos OS 9.1 through 11.4 before 11.4R11, 12.1 before R10, 12.1X44 before D40, 12.1X46 before D30, 12.1X47 before D11 and 12.147-D15, 12.1X48 before D41 and D62, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4-S2, 13.1X49 before D49, 13.1X50 before 30, 13.2 before R4,...

CVE-2014-3825

CVE-2014-3825 affects Juniper SRX Series devices running Junos 11.4 before 11.4R12-S4, 12.1X44 before 12.1X44-D40, 12.1X45 before 12.1X45-D30, 12.1X46 before 12.1X46-D25, and 12.1X47 before 12.1X47-D10. When an Application Layer Gateway (ALG) is enabled, remote attackers can cause a denial of ser...

CVE-2014-6378

CVE-2014-6378 affects Juniper Networks Junos OS. The vulnerability arises in RSVP processing where RSVP PATH messages are improperly handled, allowing a remote attacker to cause denial of service by crashing the router protocol daemon (rpd). Affected Junos releases include versions listed in the ...

CVE-2014-6379: Improper Authentication

Juniper Junos 11.4 before R12, 12.1 before R10, 12.1X44 before D35, 12.1X45 before D25, 12.1X46 before D20, 12.1X47 before D10, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4-S3, 13.1X49 before D55, 13.1X50 before D30, 13.2 before R4, 13.2X50 before D20, 13.2X51 before D26 and...

CVE-2014-6380: Undefined Security Weakness

Juniper Junos 11.4 before R11, 12.1 before R9, 12.1X44 before D30, 12.1X45 before D20, 12.1X46 before D15, 12.1X47 before D10, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4, 13.1X49 before D55, 13.1X50 before D30, 13.2 before R4, 13.2X50 before D20, 13.2X51 before D15, 13.2X5...

CVE-2014-3825: Improper Input Validation

The Juniper SRX Series devices with Junos 11.4 before 11.4R12-S4, 12.1X44 before 12.1X44-D40, 12.1X45 before 12.1X45-D30, 12.1X46 before 12.1X46-D25, and 12.1X47 before 12.1X47-D10, when an Application Layer Gateway ALG is enabled, allows remote attackers to cause a denial of service flowd crash...

Juniper Junos BGP UPDATE 'rpd' Remote DoS (JSA10653)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to improper handling of BGP UPDATE messages using 4-byte AS numbers. A remote attacker can exploit this issue, by sending a specially crafted BGP UPDATE packet, to...

Juniper Junos SRX Series ALG 'flowd' Remote DoS (JSA10650)

According to its self-reported version number, the remote Juniper Junos SRX series device is affected by a denial of service vulnerability related to ALG Application Layer Gateway. A remote attacker can exploit this issue by sending a specially crafted SIP packet to an SRX series device, resultin...

PT-2014-7199

Name of the Vulnerable Software and Affected Versions Juniper Junos versions 11.4 through 12.1X44 before D35 Juniper Junos versions 12.1X45 through 12.1X45 before D30 Juniper Junos versions 12.1X46 through 12.1X46 before D25 Juniper Junos versions 12.1X47 through 12.1X47 before D10 Juniper Junos...

PT-2014-7201

Name of the Vulnerable Software and Affected Versions Juniper Junos versions 11.4 before R11 Juniper Junos versions 12.1 before R9 Juniper Junos versions 12.1X44 before D30 Juniper Junos versions 12.1X45 before D20 Juniper Junos versions 12.1X46 before D15 Juniper Junos versions 12.1X47 before D1...

PT-2014-7200

Name of the Vulnerable Software and Affected Versions Juniper Junos versions 11.4 through 14.1 before R1 Juniper Junos version 12.1 before R10 Juniper Junos version 12.1X44 before D35 Juniper Junos version 12.1X45 before D25 Juniper Junos version 12.1X46 before D20 Juniper Junos version 12.1X47...