Juniper Networks Releases Security Updates

Juniper Networks has released security updates to address vulnerabilities affecting Junos OSlink is external, Paragon Active Assurance PAAlink is external, and Juniper Secure Analytics JSA Serieslink is external. An attacker could exploit some of these vulnerabilities to take control of an affect...

Juniper Junos OS Vulnerability (JSA70608)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70608 advisory. - A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows an...

Juniper Junos OS Vulnerability (JSA70606)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70606 advisory. - A Use After Free vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges...

Juniper Junos OS Vulnerability (JSA70585)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70585 advisory. - An Incorrect Permission Assignment for Critical Resource vulnerability in Juniper Networks Junos OS Evolved allows a local, authenticated low-privileged attacker to copy...

Juniper Junos OS Vulnerability (JSA70599)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70599 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the bbe-smgd of Juniper Networks Junos OS allows an unauthenticated, adjacent attacker to cause a...

Juniper Junos OS Vulnerability (JSA70610)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70610 advisory. - A Use After Free vulnerability in the Layer 2 Address Learning Manager l2alm of Juniper Networks Junos OS on QFX Series allows an adjacent attacker to cause the Packet...

Juniper Junos OS Vulnerability (JSA70589)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70589 advisory. - An Improper Check or Handling of Exceptional Conditions within the storm control feature of Juniper Networks Junos OS allows an attacker sending a high rate of traffic to...

Juniper Junos OS Vulnerability (JSA70588)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70588 advisory. - An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a network...

Juniper Junos OS Vulnerability (JSA70601)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70601 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine pfe of Juniper Networks Junos OS on MX Series allows an...

Juniper Junos OS Vulnerability (JSA70604)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70604 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the kernel of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to bypass an...

PT-2023-3394 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.1R3-S10 Juniper Networks Junos OS 19.2 versions prior to 19.2R3-S7 Juniper Networks Junos OS 19.3 versions prior to 19.3R3-S8 Juniper Networks Junos OS 19.4 versions prior to 19.4R3-S11 Juniper...

Juniper Junos OS Multiple Vulnerabilities (JSA69999)

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA69999 advisory. - A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain...

Juniper Junos OS DoS (JSA70195)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70195 advisory. - When sFlow is enabled and it monitors a packet forwarded via ECMP, a buffer management vulnerability in the dcpfe process of Juniper Networks Junos OS on QFX10K Series...

Juniper Networks Junos OS Resource Management Error Vulnerability (CNVD-2023-49464)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A resource management error vulnerability exists in Juniper Networks Junos OS Evolved. An attacker could exploit this...

SUSE CVE-2016-7929

The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c:juniperparseheader...

SUSE CVE-2017-12993

The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions...

SUSE CVE-2017-13004

The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniperparseheader...

The vulnerability of Juniper Networks Junos operating systems’ HTTP/HTTPS services allows attackers to execute arbitrary code.

The vulnerability of Juniper Networks Junos operating systems’ HTTP/HTTPS services exists due to incorrect pathname restrictions for access to restricted directories. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

SA40107 - Response to Juniper ScreenOS security advisory JSA10713 (CVE-2015-7755 and CVE-2015-7756)

Edit: 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. Juniper announced a security advisory for their Netscreen Firewall ScreenOS product portfolio. The Juniper ScreenOS advisory can be found here: JSA10713 Related Links JSA10713...

The vulnerability of the NAT library in Juniper Networks Junos operating systems for Juniper Networks SRX Series and MX Series devices allows a attacker to trigger a system failure and restart of the device.

The vulnerability of the NAT library in Juniper Networks’ Junos devices from the SRX Series and MX Series is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to trigger a system failure and restart the device...