CVE-2021-0215

The CVE-2021-0215 issue is a memory leak in Juniper Junos OS on EX/QFX/MX/SRX devices triggered when the 802.1X authenticator port interface flaps. The pfex process (packet forwarding) can crash and restart as memory grows. Several Junos OS releases are affected across multiple lines and versions...

CVE-2021-0211

CVE-2021-0211 describes an improper check in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon (RPD) that allows an attacker to inject a valid BGP FlowSpec message, causing unexpected changes to route advertisements in the BGP FlowSpec domain and leading to a DoS condition. A...

CVE-2021-0210 Junos OS: Privilege escalation in J-Web due to arbitrary command and code execution via information disclosure from another users active session

An Information Exposure vulnerability in J-Web of Juniper Networks Junos OS allows an unauthenticated attacker to elevate their privileges over the target system through opportunistic use of an authenticated users session. This issue affects: Juniper Networks Junos OS 12.3 versions prior to...

CVE-2021-0209 Junos OS Evolved: Receipt of certain valid BGP update packets from BGP peers may cause RPD to core when using REGEX.

In Juniper Networks Junos OS Evolved an attacker sending certain valid BGP update packets may cause Junos OS Evolved to access an uninitialized pointer causing RPD to core leading to a Denial of Service DoS. Continued receipt of these types of valid BGP update packets will cause an extended Denia...

CVE-2021-0209

CVE-2021-0209 affects Juniper Networks Junos OS Evolved (RPD daemon) where processing certain valid BGP update packets can lead to an uninitialized pointer dereference, causing RPD to core and a Denial of Service. The DoS can persist with continued receipt of such packets and requires an RPD rest...

CVE-2021-0210

CVE-2021-0210 affects Juniper Networks Junos OS and specifically the J-Web interface. The vulnerability is an information exposure flaw that enables an unauthenticated attacker to leverage an authenticated user session to elevate privileges. Affected versions include multiple release tracks acros...

CVE-2021-0208

Technical details beyond the initial description are not provided in the connected documents; monitor for updates on CVE-2021-0208 via Juniper/NCSC pages.

CVE-2021-0207 NFX250, NFX350, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series: Certain genuine traffic received by the Junos OS device will be discarded instead of forwarded.

An improper interpretation conflict of certain data between certain software components within the Juniper Networks Junos OS devices does not allow certain traffic to pass through the device upon receipt from an ingress interface filtering certain specific types of traffic which is then being...

CVE-2021-0206

CVE-2021-0206 is a NULL pointer dereference in Juniper Junos OS that can crash the Packet Forwarding Engine (PFE) on NFX/SRX platforms when SSL Proxy is enabled, causing a DoS. Exploitation requires sending specific packets over the network. Affected ranges include Junos OS on NFX/SRX: 18.3 befor...

CVE-2021-0206 Junos OS: NFX Series, SRX Series: PFE may crash upon receipt of specific packet when SSL Proxy is configured.

A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to send a specific packet causing the packet forwarding engine PFE to crash and restart, resulting in a Denial of Service DoS. By continuously sending these specific packets, an attacker can repeatedly disabl...

CVE-2021-0207

CVE-2021-0207 describes a DoS in Juniper Networks Junos OS caused by an improper interpretation conflict of certain data between software components, where specific traffic received on an ingress interface is filtered and redirected to a different VLAN, preventing forwarding. The issue affects IP...

CVE-2021-0205

CVE-2021-0205 concerns Juniper Junos OS on MX Series when IDS is configured with a dynamic firewall filter using IPv6 prefixes. The issue causes the prefix to be incorrectly matched as /32, potentially blocking legitimate traffic. Affects MX Series devices with MS-MPC/MS-MIC/MS-SPC3 cards and IDS...

CVE-2021-0205 Junos OS: MX Series: Dynamic filter fails to match IPv6 prefix

When the "Intrusion Detection Service" IDS feature is configured on Juniper Networks MX series with a dynamic firewall filter using IPv6 source or destination prefix, it may incorrectly match the prefix as /32, causing the filter to block unexpected traffic. This issue affects only IPv6 prefixes...

CVE-2021-0204

CVE-2021-0204 is a local privilege escalation in Juniper Networks Junos OS, affecting the delta-export configuration utility (dexp). The issue arises because dexp is shipped with setuid root ownership, allowing a locally authenticated shell user to run dexp with root privileges and access sensiti...

CVE-2021-0203

The CVE-2021-0203 entry concerns Juniper Junos OS on EX Series and QFX5K Series where a Storm Control profile on the Redundant Trunk Group interface may not activate when the threshold is reached. Affected: EX Series and QFX5K Series; not affecting EX2200, EX3300, EX4200, or EX9200. Vulnerable so...

CVE-2021-0203 Junos OS: EX and QFX5K Series: Storm Control does not work as expected when Redundant Trunk Group is configured

On Juniper Networks EX and QFX5K Series platforms configured with Redundant Trunk Group RTG, Storm Control profile applied on the RTG interface might not take affect when it reaches the threshold condition. Storm Control enables the device to monitor traffic levels and to drop broadcast, multicas...

CVE-2021-0204 Junos OS: dexp Local Privilege Escalation vulnerabilities in SUID binaries

A sensitive information disclosure vulnerability in delta-export configuration utility dexp of Juniper Networks Junos OS may allow a locally authenticated shell user the ability to create and read database files generated by the dexp utility, including password hashes of local users. Since dexp i...

CVE-2021-0202

CVE-2021-0202 affects Juniper Junos OS on MX Series and EX9200 Series with Trio-based MPC when an Integrated Routing and Bridging (IRB) interface is mapped to a VPLS instance or a Bridge-Domain. The issue is a memory leak in the Modular Port Concentrator (MPC) caused by certain CE device events, ...

CVE-2021-0202 Junos OS: MX Series, EX9200 Series: Trio-based MPC memory leak when Integrated Routing and Bridging (IRB) interface is mapped to a VPLS instance or a Bridge-Domain

On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPC Modular Port Concentrator where Integrated Routing and Bridging IRB interface is configured and it is mapped to a VPLS instance or a Bridge-Domain, certain network events at Customer Edge CE device may cause memory leak...

Juniper Networks Releases Security Updates for Multiple Products

Juniper Networks has released security updates to address vulnerabilities affecting multiple products. An attacker could exploit some of these vulnerabilities to cause take control of an affected system. CISA encourages users and administrators to review the Juniper Networks security advisories...