Input validation

Juniper Junos 11.4 before 11.4R8, 12.1 before 12.1R5, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.1X46 before 12.1X46-D10, and 12.1X47 before 12.1X47-D10 on SRX Series devices, allows remote attackers to cause a denial of service flowd crash via a malformed packet, related to...

CVE-2014-3815

Juniper Junos 12.1X46 before 12.1X46-D20 and 12.1X47 before 12.1X47-D10 on SRX Series devices allows remote attackers to cause a denial of service flowd crash via a crafted SIP packet...

CVE-2014-3816

Juniper Junos 11.4 before 11.4R12, 12.1 before 12.1R11, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D30, 12.1X46 before 12.1X46-D20, 12.1X47 before 12.1X47-D10, 12.2 before 12.2R8-S2, 12.3 before 12.3R7, 13.1 before 13.1R4-S2, 13.2 before 13.2R5, 13.3 before 13.3R2-S2, and 14.1 before 14.1...

CVE-2014-3819

Juniper Junos 11.4 before 11.4R12, 12.1 before 12.1R10, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.1X47 before 12.1X47-D10, 12.2 before 12.2R8, 12.3 before 12.3R7, 13.1 before 13.1R4, 13.2 before 13.2R4, 13.3 before 13.3R2, and 14.1 before 14.1R1, when...

CVE-2014-3821

Cross-site scripting XSS vulnerability in SRX Web Authentication webauth in Juniper Junos 11.4 before 11.4R11, 12.1X44 before 12.1X44-D34, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, and 12.1X47 before 12.1X47-D10 allows remote attackers to inject arbitrary web script or HTML via...

CVE-2014-3822

Juniper Junos 11.4 before 11.4R8, 12.1 before 12.1R5, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.1X46 before 12.1X46-D10, and 12.1X47 before 12.1X47-D10 on SRX Series devices, allows remote attackers to cause a denial of service flowd crash via a malformed packet, related to...

CVE-2014-3815

CVE-2014-3815 affects Juniper Junos SRX Series devices, where SIP ALG processing allows remote attackers to crash the flowd daemon via a crafted SIP packet. Impact described as denial of service with affected versions: Junos 12.1X46 before 12.1X46-D20 and 12.1X47 before 12.1X47-D10. Public contex...

CVE-2014-3816

CVE-2014-3816 covers Juniper Junos OS privilege-escalation where remote authenticated users can gain privileges via unspecified CLI command/argument combinations. Affected releases include multiple branches across 11.4, 12.x, 13.x, and 14.x, with versions listed in the initial description. The co...

CVE-2014-3817

CVE-2014-3817 affects Juniper Networks Junos OS on SRX Series devices, where NAT protocol translation from IPv6 to IPv4 enabled allows remote attackers to cause a denial of service by sending a crafted IPv6→IPv4 packet that can hang or crash the flowd process. The issue impacts Junos versions lis...

CVE-2014-3819

CVE-2014-3819 affects Juniper Junos OS RPD when Auto-RP is enabled. A remote attacker can crash the RPD routing process by sending a malformed PIM packet, causing a denial of service. Affected Junos versions include 11.4 before 11.4R12, 12.1 before 12.1R10, 12.1X44 before 12.1X44-D35, 12.1X45 bef...

CVE-2014-3822

Summary: CVE-2014-3822 affects Juniper Junos SRX Series devices and relates to the IPv6-to-IPv4 translation path. The issue can be triggered by a malformed packet, causing a denial of service via the flowd process crash. Affected software/versions (as provided): Junos OS on SRX Series with 11.4 b...

CVE-2014-3821

The CVE-2014-3821 entry describes a Cross-site scripting (XSS) vulnerability in Juniper Junos SRX Web Authentication (webauth) across multiple releases (11.4 before 11.4R11; 12.1X44 before 12.1X44-D34; 12.1X45 before 12.1X45-D25; 12.1X46 before 12.1X46-D20; 12.1X47 before 12.1X47-D10). The issue ...

CVE-2014-3817

Juniper Junos 11.4 before 11.4R12, 12.1X44 before 12.1X44-D32, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, and 12.1X47 before 12.1X47-D10 on SRX Series devices, when NAT protocol translation from IPv4 to IPv6 is enabled, allows remote attackers to cause a denial of service flowd hang ...

PT-2014-5528

Name of the Vulnerable Software and Affected Versions Juniper Junos versions 11.4 through 11.4R8 Juniper Junos versions 12.1 through 12.1R5 Juniper Junos versions 12.1X44 through 12.1X44-D20 Juniper Junos versions 12.1X45 through 12.1X45-D15 Juniper Junos versions 12.1X46 through 12.1X46-D10...

CVE-2014-3822: Improper Input Validation

Juniper Junos 11.4 before 11.4R8, 12.1 before 12.1R5, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.1X46 before 12.1X46-D10, and 12.1X47 before 12.1X47-D10 on SRX Series devices, allows remote attackers to cause a denial of service flowd crash via a malformed packet, related to...

CVE-2014-3816: Undefined Security Weakness

Juniper Junos 11.4 before 11.4R12, 12.1 before 12.1R11, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D30, 12.1X46 before 12.1X46-D20, 12.1X47 before 12.1X47-D10, 12.2 before 12.2R8-S2, 12.3 before 12.3R7, 13.1 before 13.1R4-S2, 13.2 before 13.2R5, 13.3 before 13.3R2-S2, and 14.1 before 14.1...

CVE-2014-3821: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in SRX Web Authentication webauth in Juniper Junos 11.4 before 11.4R11, 12.1X44 before 12.1X44-D34, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, and 12.1X47 before 12.1X47-D10 allows remote attackers to inject arbitrary web script or HTML via...

CVE-2014-3815: Improper Input Validation

Juniper Junos 12.1X46 before 12.1X46-D20 and 12.1X47 before 12.1X47-D10 on SRX Series devices allows remote attackers to cause a denial of service flowd crash via a crafted SIP packet...

PT-2014-5522

Name of the Vulnerable Software and Affected Versions Juniper Junos versions 12.1X46 before 12.1X46-D20 Juniper Junos versions 12.1X47 before 12.1X47-D10 Description The issue allows remote attackers to cause a denial of service, resulting in a flowd crash, via a crafted SIP packet. Recommendatio...

PT-2014-5524

Name of the Vulnerable Software and Affected Versions Juniper Junos versions 11.4 before 11.4R12 Juniper Junos versions 12.1X44 before 12.1X44-D32 Juniper Junos versions 12.1X45 before 12.1X45-D25 Juniper Junos versions 12.1X46 before 12.1X46-D20 Juniper Junos versions 12.1X47 before 12.1X47-D10...