872 matches found
CVE-2020-1638
The FPC Flexible PIC Concentrator of Juniper Networks Junos OS and Junos OS Evolved may restart after processing a specific IPv4 packet. Only packets destined to the device itself, successfully reaching the RE through existing edge and control plane filtering, will be able to cause the FPC restar...
Exploit for Stack-based Buffer Overflow in Juniper Junos
inetutils hasn't been updated in 5 years, and neither has the of...
Junos OS: pccd DoS (JSA10980)
According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability in the path computational element protocol daemon pccd process. An unauthenticated, remote attacker can exploit this issue, by sending malformed Path Computation Element Protocol PCEP...
CVE-2014-6448
Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to bypass intended restrictions and execute arbitrary Python code via vectors involving shell access...
Code injection
Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to bypass intended restrictions and execute arbitrary Python code via vectors involving shell access...
CVE-2020-1600
In a Point-to-Multipoint P2MP Label Switched Path LSP scenario, an uncontrolled resource consumption vulnerability in the Routing Protocol Daemon RPD in Juniper Networks Junos OS allows a specific SNMP request to trigger an infinite loop causing a high CPU usage Denial of Service DoS condition...
Juniper Networks Junos OS JDHCPD IPv4 Command Injection Vulnerability
Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. A security vulnerability in Juniper Networks Junos OS Dynamic Host Configuration Protocol Daemon JDHCPD can be exploited by a remote attacker to submit a special IPv4 request that can be...
Juniper Junos CVE-2020-1604 Security Bypass Vulnerability
Description Juniper Junos is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. The following products are affected: Juniper Junos 14.1X53 versions prior to...
Juniper Junos CVE-2020-1608 Multiple Denial of Service Vulnerabilities
Description Juniper Junos is prone to multiple denial-of-service vulnerabilities. An attacker may exploit these issues to cause denial-of-service conditions. Technologies Affected Juniper Junos 17.2R2-S6 Juniper Junos 17.2R2-S7 Juniper Junos 17.2R2-S8 Juniper Junos 17.2R3 Juniper Junos 17.2R3-S1...
Juniper Junos CVE-2020-1603 Memory Leak Denial of Service Vulnerability
Description Juniper Junos is prone to a denial-of-service vulnerability. An attacker may exploit this issue to cause denial-of-service conditions. Technologies Affected Juniper Junos 16.1 Juniper Junos 16.1R1 Juniper Junos 16.1R2 Juniper Junos 16.1R3 Juniper Junos 16.1R3-S10 Juniper Junos 16.1R3-...
Juniper Junos and Junos Evolved JSA10981 Multiple Security Vulnerabilities
Description Juniper Junos and Junos Evolved are prone to multiple security vulnerabilities. Successfully exploiting these issues may allow an attacker to perform unauthorized actions or execute arbitrary commands with root privileges on the affected device. Technologies Affected Juniper Junos 15....
Juniper Junos CVE-2020-1600 Denial of Service Vulnerability
Description Juniper Junos is prone to a denial-of-service vulnerability. Attackers can exploit this issue to cause the device to consume excessive CPU resources, denying service to legitimate users. Technologies Affected Juniper Junos 12.3X48 Juniper Junos 12.3X48-D10 Juniper Junos 12.3X48-D15...
Juniper Junos Space < 19.2R1 Multiple Vulnerabilities (JSA10951)
According to its self-reported version number, the remote Junos Space version is prior to 19.2R1. It is, therefore, affected by multiple vulnerabilities: - A memory double free vulnerability exists in The libcurl API function called curlmaprintf before version 7.51.0 due to an unsafe sizet...
Unspecified Vulnerability in Juniper Networks Junos OS (CNVD-2019-41471)
Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS versions 18.1R3-S4 and 18.3R1-S3. An attacker could exploit t...
Junos OS: MC-LAG DoS (JSA10966)
According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service DoS vulnerability on devices configured with Multi-Chassis Link Aggregation Group MC-LAG. An unauthenticated, adjacent attacker can exploit this by continuously sending a specially...
Junos OS: J-Web Session Fixation Vulnerability (JSA10961)
According to its self-reported version number, the remote Juniper Junos device is affected by a session fixation vulnerability in J-Web. This allows an unauthenticated, remote attacker to use social engineering techniques to fix and hijack a J-Web administrator's web session and potentially gain...
Junos OS: NG-mVPN rpd DoS (JSA10965)
According to its self-reported version number, the remote Juniper Junos device is affected by an unexpected status return value weakness in the Next-Generation Multicast VPN NG-mVPN which can result in a denial of service DoS condition. An unauthenticated, remote attacker can exploit this issue, ...
Junos OS: SIP ALG flowd DoS (JSA10953)
According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability in the SIP ALG packet processing service which allows an attacker to cause a Denial of Service DoS to the device. A remote, unauthenticated attacker can exploit this by sending specific...
Junos OS: flowd DoS (JSA10963)
According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service DoS vulnerability in the flowd process on SRX 5000 devices when 'set security zones security-zone tcp-rst' is configured. An unauthenticated, remote attacker can send a crafted TCP...
Junos OS: srxpfe PIM DoS (JSA10976)
According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service DoS vulnerability in the srxpfe process on Protocol Independent Multicast PIM enabled SRX series devices. An unauthenticated, remote attacker can exploit this issue, by repeatedly...