Stack overflow

A stack-based Buffer Overflow vulnerability in Juniper Networks SBR Carrier with EAP Extensible Authentication Protocol authentication configured, allows an attacker sending specific packets causing the radius daemon to crash resulting with a Denial of Service DoS or leading to remote code...

Design/Logic Flaw

Improper Handling of Exceptional Conditions in Ethernet interface frame processing of Juniper Networks Junos OS allows an attacker to send specially crafted frames over the local Ethernet segment, causing the interface to go into a down state, resulting in a Denial of Service DoS condition. The...

Buffer overflow

A buffer overflow vulnerability in the TCP/IP stack of Juniper Networks Junos OS allows an attacker to send specific sequences of packets to the device thereby causing a Denial of Service DoS. By repeatedly sending these sequences of packets to the device, an attacker can sustain the Denial of...

Race condition

When user-defined ARP Policer is configured and applied on one or more Aggregated Ethernet AE interface units, a Time-of-check Time-of-use TOCTOU Race Condition vulnerability between the Device Control Daemon DCD and firewall process dfwd daemons of Juniper Networks Junos OS allows an attacker to...

Design/Logic Flaw

A vulnerability in the processing of specific MPLS packets in Juniper Networks Junos OS on MX Series and EX9200 Series devices with Trio-based MPCs Modular Port Concentrators may cause FPC to crash and lead to a Denial of Service DoS condition. Continued receipt of this packet will sustain the...

Design/Logic Flaw

An uncontrolled resource consumption vulnerability in Juniper Networks Junos OS on QFX5000 Series and EX4600 Series switches allows an attacker sending large amounts of legitimate traffic destined to the device to cause Interchassis Control Protocol ICCP interruptions, leading to an unstable...

Design/Logic Flaw

A vulnerability in the handling of exceptional conditions in Juniper Networks Junos OS Evolved EVO allows an attacker to send specially crafted packets to the device, causing the Advanced Forwarding Toolkit manager evo-aftmand-bt or evo-aftmand-zx process to crash and restart, impacting all traff...

Design/Logic Flaw

A vulnerability in Juniper Networks Junos OS caused by Missing Release of Memory after Effective Lifetime leads to a memory leak each time the CLI command 'show system connections extensive' is executed. The amount of memory leaked on each execution depends on the number of TCP connections from a...

Design/Logic Flaw

An Exposure of System Data vulnerability in Juniper Networks Junos OS and Junos OS Evolved, where a sensitive system-level resource is not being sufficiently protected, allows a network-based unauthenticated attacker to send specific traffic which partially reaches this resource. A high rate of...

Design/Logic Flaw

On Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure RPKI receipt of a specific packet from the RPKI cache server may cause routing process daemon RPD to crash and restart, creating a Denial of Service DoS condition. Continued receipt...

Design/Logic Flaw

A vulnerability in Juniper Networks Junos OS, which only affects the release 18.4R2-S5, where a function is inconsistently implemented on Juniper Networks Junos QFX5000 Series and EX4600 Series, and if "storm-control enhanced" is configured, can lead to the enhanced storm control filter group not...

CVE-2021-0295

The CVE-2021-0295 issue affects Juniper Networks Junos OS on QFX10K Series switches (e.g., QFX10002/10008/10016). It’s caused by DVMRP packets looping on a multi-homed ESI when VXLAN is configured, leading to a packet forwarding loop that triggers a partial DoS. Affected versions include multiple...

CVE-2021-0294 Junos OS: QFX5000 Series and EX4600 Series: Enhanced storm control might not work leading to partial Denial of Service

A vulnerability in Juniper Networks Junos OS, which only affects the release 18.4R2-S5, where a function is inconsistently implemented on Juniper Networks Junos QFX5000 Series and EX4600 Series, and if "storm-control enhanced" is configured, can lead to the enhanced storm control filter group not...

CVE-2021-0294

CVE-2021-0294 affects Junos OS 18.4R2-S5 on QFX5000 Series and EX4600 Series; when storm-control enhanced is configured, the enhanced storm control filter group may not be installed, causing storm control to fail and potentially high CPU usage or packet loss from excessive broadcast/unknown unica...

CVE-2021-0293

CVE-2021-0293 describes a memory leak in Junos OS caused by Missing Release of Memory after Effective Lifetime. Repeated execution of the CLI command 'show system connections extensive' can cause memory to leak per invocation, depending on TCP connections, potentially leading to daemon memory pre...

CVE-2021-0293 Junos OS: Out-of-memory condition and crashes can occur after executing a certain CLI command repeatedly

A vulnerability in Juniper Networks Junos OS caused by Missing Release of Memory after Effective Lifetime leads to a memory leak each time the CLI command 'show system connections extensive' is executed. The amount of memory leaked on each execution depends on the number of TCP connections from a...

CVE-2021-0292

CVE-2021-0292 corresponds to a memory-leak DoS in Juniper Networks Junos OS Evolved’s arpd and ndp processes. Affected are Junos OS Evolved versions 19.4 prior to 19.4R2-S3-EVO; 20.1 prior to 20.1R2-S4-EVO; and all 20.2-EVO. The vulnerability allows a local attacker on the same network to drive u...

CVE-2021-0292 Junos OS Evolved: Memory leak in arpd or ndp processes can lead to Denial of Service (DoS)

An Uncontrolled Resource Consumption vulnerability in the ARP daemon arpd and Network Discovery Protocol ndp process of Juniper Networks Junos OS Evolved allows a malicious attacker on the local network to consume memory resources, ultimately resulting in a Denial of Service DoS condition...

CVE-2021-0291

CVE-2021-0291 affects Juniper Networks Junos OS and Junos OS Evolved. The vulnerability is an Exposure of System Data where a network-based, unauthenticated attacker can send traffic that partially reaches a sensitive system resource, potentially causing partial DoS through elevated CPU on the RE...

CVE-2021-0291 Junos OS and Junos OS Evolved: A vulnerability allows a network based unauthenticated attacker which sends a high rate of specific traffic to cause a partial Denial of Service

An Exposure of System Data vulnerability in Juniper Networks Junos OS and Junos OS Evolved, where a sensitive system-level resource is not being sufficiently protected, allows a network-based unauthenticated attacker to send specific traffic which partially reaches this resource. A high rate of...