CVE-2018-0014

Summary: CVE-2018-0014 is an Etherleak-related information disclosure in Juniper ScreenOS. Affected products/versions: Juniper ScreenOS prior to 6.3.0r25 (all versions affected before the fixed release). Root cause: Ethernet frames are not padded with zeros, causing fragments of system memory or ...

CVE-2018-0003

CVE-2018-0003 covers a kernel crash/DoS in Junos OS caused by processing specially crafted MPLS packets on MPLS-configured interfaces. Affected are many Junos OS branches (e.g., 12.1X46 <12.1X46-D71; 12.3 <12.3R12-S7; 12.3X48 <12.3X48-D55; 14.1 <14.1R8-S5/14.1R9; 14.1X53 <14.1X53-D...

CVE-2018-0001 Junos: Unauthenticated Remote Code Execution through J-Web interface

A remote, unauthenticated attacker may be able to execute code by exploiting a use-after-free defect found in older versions of PHP through injection of crafted data via specific PHP URLs within the context of the J-Web process. Affected releases are Juniper Networks Junos OS: 12.1X46 versions...

CVE-2018-0013 Junos Space: Local File Inclusion Vulnerability

A local file inclusion vulnerability in Juniper Networks Junos Space Network Management Platform may allow an authenticated user to retrieve files from the system...

CVE-2018-0013

CVE-2018-0013 affects Juniper Networks Junos Space Network Management Platform. The vulnerability is a local file inclusion that may allow an authenticated user to retrieve files from the system. Public data lists CVSS v3.0 base score 6.5 (MEDIUM) with network attack vector, low complexity, and p...

CVE-2018-0002 MX series, SRX series: Junos OS: Denial of service vulnerability in Flowd on devices with ALG enabled.

On SRX Series and MX Series devices with a Service PIC with any ALG enabled, a crafted TCP/IP response packet processed through the device results in memory corruption leading to a flowd daemon crash. Sustained crafted response packets lead to repeated crashes of the flowd daemon which results in...

CVE-2018-0014 ScreenOS: Etherleak vulnerability found on ScreenOS device

Juniper Networks ScreenOS devices do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is often detected as CVE-2003-0001. The issue affects all versions of Juniper Networks ScreenOS prior to 6.3.0r25...

Randy Bias joins Wallarm board of advisers

Menlo Park, California — December 5, 2017 — Wallarm today announced that Randy Bias, Vice President of Technology and Strategy, Cloud Software at Juniper and founder of Cloudscaling acquired by EMC, has joined Wallarm’s board of advisers. “Randy is an agile cloud pioneer and a thought leader in...

The vulnerability of Juniper Networks’ Junos Space Network Management Platform, related to authentication procedures that lack sufficient safeguards, allows attackers to gain access to the system with privileged user privileges.

The vulnerability of Juniper Networks’ Junos Space Network Management Platform relates to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain access to the system with privileged user privileges from a remote location...

Juniper Junos Remote Execution Vulnerability (JSA10818)

According to its self-reported version number, the remote Junos device is affected by a vulnerability in the pluggable authentication module PAM of Juniper Networks Junos OS that may allow an unauthenticated network based attacker to potentially execute arbitrary code or crash daemons such as...

Juniper Junos OS Denial of Service Vulnerability (CNVD-2017-33970)

Juniper Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. pluggable authentication module PAM is one of the authentication modules. A security vulnerability exists in the PAM in...

CVE-2017-10622

An authentication bypass vulnerability in Juniper Networks Junos Space Network Management Platform may allow a remote unauthenticated network based attacker to login as any privileged user. This issue only affects Junos Space Network Management Platform 17.1R1 without Patch v1 and 16.1 releases...

CVE-2017-10624

Insufficient verification of node certificates in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to make unauthorized modifications to Space database or add nodes. Affected releases are Juniper Networks Junos Space all versions prior to 17.1R1...

CVE-2017-10623

Lack of authentication and authorization of cluster messages in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to intercept, inject or disrupt Junos Space cluster operations between two nodes. Affected releases are Juniper Networks Junos Space all versions prior to...

Authorization

Lack of authentication and authorization of cluster messages in Juniper Networks Junos Space may allow a man-in-the-middle type of attacker to intercept, inject or disrupt Junos Space cluster operations between two nodes. Affected releases are Juniper Networks Junos Space all versions prior to...

Design/Logic Flaw

By flooding a Juniper Networks router running Junos OS with specially crafted IPv6 traffic, all available resources can be consumed, leading to the inability to store next hop information for legitimate traffic. In extreme cases, the crafted IPv6 traffic may result in a total resource exhaustion...

Information disclosure

An incorrect permissions vulnerability in Juniper Networks Junos OS on vMX may allow local unprivileged users on a host system read access to vMX or vPFE images and obtain sensitive information contained in them such as private cryptographic keys. This issue was found during internal product...

CVE-2016-4921

By flooding a Juniper Networks router running Junos OS with specially crafted IPv6 traffic, all available resources can be consumed, leading to the inability to store next hop information for legitimate traffic. In extreme cases, the crafted IPv6 traffic may result in a total resource exhaustion...

CVE-2016-4923

Insufficient cross site scripting protection in J-Web component in Juniper Networks Junos OS may potentially allow a remote unauthenticated user to inject web script or HTML and steal sensitive data and credentials from a J-Web session and to perform administrative actions on the Junos device...

CVE-2016-4924

An incorrect permissions vulnerability in Juniper Networks Junos OS on vMX may allow local unprivileged users on a host system read access to vMX or vPFE images and obtain sensitive information contained in them such as private cryptographic keys. This issue was found during internal product...