Juniper Junos CVE-2019-0056 Denial of Service Vulnerability

Description Juniper Junos is prone to a denial-of-service vulnerability. An attacker may exploit this issue to cause denial-of-service conditions. Technologies Affected Juniper Junos 18.1 Juniper Junos 18.1R1 Juniper Junos 18.1R2 Juniper Junos 18.1R2-S1 Juniper Junos 18.1R2-S2 Juniper Junos...

Cisco Extends Patch for IPv6 DoS Vulnerability

Cisco has extended its patch for a high-severity IPv6 denial-of-service DoS vulnerability that was first addressed in 2016. The bug CVE-2016-1409 is a vulnerability in the IPv6 packet processing functions of multiple Cisco products, which could allow an unauthenticated, remote attacker to cause a...

Juniper Junos Space < 17.2R2 Persistent XSS Vulnerability (JSA10881)

According to its self-reported version number, the version of Junos Space running on the remote device is 17.2R2, and is therefore affected by a persistent cross-site scripting vulnerability in the UI framework used by Junos Space Security Director. A remote authenticated attacker can exploit tha...

Juniper Junos memory consumption denial of service (JSA10920)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability in the jdhcpd daemon due to failure to handle exceptional conditions. An unauthenticated, remote attacker can exploit this, via sending specific IPv6 DHCP packets to the...

Juniper JunOS Model Detection

Binary data 700598.prm...

Juniper Junos jdhcpd crash denial of service (JSA10926)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability in the jdhcpd daemon due to failure to handle exceptional conditions. An unauthenticated, remote attacker can exploit this, via continuously sending a certain DHCPv6...

CVE-2019-0033

A firewall bypass vulnerability in the proxy ARP service of Juniper Networks Junos OS allows an attacker to cause a high CPU condition leading to a Denial of Service DoS. This issue affects only IPv4. Affected releases are Juniper Networks Junos OS: 12.1X46 versions above and including 12.1X46-D2...

CVE-2019-0040

On Junos OS, rpcbind should only be listening to port 111 on the internal routing instance IRI. External packets destined to port 111 should be dropped. Due to an information leak vulnerability, responses were being generated from the source address of the management interface e.g. fxp0 thus...

Junos OS: Multiple vulnerabilities in libxml2 (JSA10902)

According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability. When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, a reachable assertion...

Junos OS: RPD crash upon receipt of malformed PIM packet (JSA10913)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability. The routing protocol daemon RPD process will crash and restart when a specific invalid IPv4 PIM Join packet is received. While RPD restarts after a crash, repeated...

Juniper Junos Space 18.4.x < 18.4R1 Multiple Vulnerabilities (JSA10917)

According to its self-reported version number, the remote Junos Space version is 18.4.x prior to 18.4R1. It is, therefore, affected by multiple vulnerabilities : - An integer overflow issue exists in procps-ng. This is related to CVE-2018-1124. CVE-2018-1126 - A directory traversal issue exits in...

The vulnerability of the OpenNMS monitoring system, a network management platform from Juniper Networks Junos Space, arises due to insufficient protection of the website structure. This allows attackers to disclose protected information or perform actions on behalf of the administrator.

The vulnerability of OpenNMS, which is included in the Juniper Networks Junos Space network management platform, stems from insufficient protection of the website structure. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or carry out actions on behalf ...

Juniper Junos OS Denial of Service Vulnerability (CNVD-2018-21801)

Juniper Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. A denial of service vulnerability exists in Juniper Junos OS, which arises from the program's failure to restrict the IP...

Juniper Junos RPD MPLS RCE (JSA10877)

According to its self-reported version number, the remote Junos device is affected by a potential remote code execution vulnerability due to how the routing protocol daemon handles MPLS packets. An attacker could potentially crash the RDP service or execute code. TRUSTED...

OpenNMS Cross-Site Scripting Vulnerability (CNVD-2018-21611)

Juniper Junos Space is a suite of network management solutions from Juniper Networks that supports automated configuration, monitoring, and troubleshooting of devices and services throughout their lifecycle. OpenNMS is a network management system that automates the configuration, monitoring, and...

CVE-2018-0057

On MX Series and M120/M320 platforms configured in a Broadband Edge BBE environment, subscribers logging in with DHCP Option 50 to request a specific IP address will be assigned the requested IP address, even if there is a static MAC to IP address binding in the access profile. In the problem...

Juniper Junos HTTP/HTTPS Firewall User Authentication Remote Information Disclosure (JSA10858)

According to its self-reported version number, the remote Junos device is affected by a remote information disclosure vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111205; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate",...

Juniper Junos Privilege Escalation (JSA10857)

According to its self-reported version number, the remote Junos device is affected by a privilege escalation vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid111204; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2018-0030

Receipt of a specific MPLS packet may cause MPC7/8/9, PTX-FPC3 FPC-P1, FPC-P2 line cards or PTX1K to crash and restart. By continuously sending specific MPLS packets, an attacker can repeatedly crash the line cards or PTX1K causing a sustained Denial of Service. Affected releases are Juniper...

Juniper Junos SNMP MIB-II Subagent Daemon (mib2d) Unspecified Remote DoS (JSA10847)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by an unspecified flaw in the SNMP MIB-II subagent daemon, mib2d, that allows a remote attacker to cause the daemon to crash, resulting in a denial of service for the SNMP subsystem. No...