CVE-2020-1677 Juniper Networks Mist Cloud UI: SAML authentication attribute elements handling vulnerability.

When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle child elements in SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating its cryptographic signature to bypass SAML authentication security controls. This issue...

CVE-2020-1677

The CVE-2020-1677 entry concerns Juniper Networks Mist Cloud UI where, when SAML authentication is enabled, the implementation may incorrectly process sub-elements in SAML responses. This could allow a remote attacker to modify a valid SAML response without invalidating its cryptographic signatur...

CVE-2020-1678 Junos OS and Junos OS Evolved: RPD can crash due to a slow memory leak.

On Juniper Networks Junos OS and Junos OS Evolved platforms with EVPN configured, receipt of specific BGP packets causes a slow memory leak. If the memory is exhausted the rpd process might crash. If the issue occurs, the memory leak could be seen by executing the "show task memory detail | match...

CVE-2020-1678

CVE-2020-1678 affects Juniper Networks Junos OS and Junos OS Evolved on devices with EVPN configured. The issue is a slow memory leak triggered by receipt of specific BGP EVPN traffic, which can exhaust memory and cause the rpd process to crash. The vulnerability is evidenced by repeated queries ...

CVE-2020-1675 Juniper Networks Mist Cloud UI: SAML authentication certificate vulnerability.

When Security Assertion Markup Language SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly process invalid authentication certificates which could allow a malicious network-based user to access unauthorized data. This issue affects all Juniper Networks Mist Cloud UI...

CVE-2020-1675

CVE-2020-1675 affects Juniper Networks Mist Cloud UI where, with SAML authentication enabled, invalid authentication certificates may be processed incorrectly, potentially allowing a network-based attacker to access unauthorized data. The issue affects Mist Cloud UI versions prior to September 2,...

CVE-2020-1676

Juniper Networks Mist Cloud UI suffers a SAML authentication handling vulnerability: when SAML is enabled, the UI may incorrectly process SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating the cryptographic signature and bypass SAML authentication cont...

CVE-2020-1676 Juniper Networks Mist Cloud UI: SAML authentication response handling vulnerability.

When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating its cryptographic signature to bypass SAML authentication security controls. This issue affects all Juniper...

CVE-2020-1673

CVE-2020-1673 is a J-Web/XSS vulnerability in Juniper Networks Junos OS where insufficient XSS protection on HTTP/HTTPS web services can allow an unauthenticated attacker to hijack a user session and impersonate the targeted user’s admin actions. Affected products are Junos OS devices with HTTP/H...

CVE-2020-1670 Junos OS: EX4300 Series: High CPU load due to receipt of specific IPv4 packets

On Juniper Networks EX4300 Series, receipt of a stream of specific IPv4 packets can cause Routing Engine RE high CPU load, which could lead to network protocol operation issue and traffic interruption. This specific packets can originate only from within the broadcast domain where the device is...

CVE-2020-1672

CVE-2020-1672 describes a DoS condition in Juniper Networks Junos OS where a crafted DHCPv6 relay packet crashes the jdhcpd daemon. The issue is triggered only by DHCPv6 traffic (not DHCPv4) when DHCPv6 relay is enabled, and the jdhcpd process restarts automatically but can be repeatedly crashed ...

CVE-2020-1671

CVE-2020-1671 affects Junos OS when JDHCPD handles malformed DHCPv6 packets on DHCPv6 local server or Relay Agent configurations, causing a crash and JDHCPD restart. Affected are Junos OS versions: 17.4 prior to 17.4R2-S12 and 17.4R3-S3; 18.1 prior to 18.1R3-S11; 18.2 prior to 18.2R3-S6; 18.2X75 ...

CVE-2020-1672 Junos OS: jdhcpd process crash when processing a specific DHCPDv6 packet in DHCPv6 relay configuration.

On Juniper Networks Junos OS devices configured with DHCPv6 relay enabled, receipt of a specific DHCPv6 packet might crash the jdhcpd daemon. The jdhcpd daemon automatically restarts without intervention, but continuous receipt of specific crafted DHCP messages will repeatedly crash jdhcpd, leadi...

CVE-2020-1670

CVE-2020-1670 affects Juniper Junos OS on EX4300 Series. A stream of specific IPv4 packets entering the IRB interface can cause Routing Engine high CPU load, potentially leading to network protocol operation issues and traffic interruption. The trigger is limited to IPv4 (IPv6 is not affected) an...

CVE-2020-1671 Junos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash.

On Juniper Networks Junos OS platforms configured as DHCPv6 local server or DHCPv6 Relay Agent, Juniper Networks Dynamic Host Configuration Protocol Daemon JDHCPD process might crash with a core dump if a malformed DHCPv6 packet is received, resulting with the restart of the daemon. This issue on...

CVE-2020-1668

CVE-2020-1668 affects Juniper Networks Junos OS on the EX2300 Series. The issue is triggered by receipt of a stream of specific multicast packets on the layer-2 interface, causing high CPU load and potential traffic interruption. Affected versions include 18.1 before 18.1R3-S11; 18.2 before 18.2R...

CVE-2020-1668 Junos OS: EX2300 Series: High CPU load due to receipt of specific multicast packets on layer 2 interface

On Juniper Networks EX2300 Series, receipt of a stream of specific multicast packets by the layer2 interface can cause high CPU load, which could lead to traffic interruption. This issue occurs when multicast packets are received by the layer 2 interface. To check if the device has high CPU load...

CVE-2020-1669

CVE-2020-1669 affects Juniper Networks Junos OS on NFX350 devices via the JDM container that stores password hashes in the world-readable /etc/passwd. Root cause: password hashes are readable by local attackers. Impact: local access could enable brute-force decryption of hashes, with confidential...

CVE-2020-1669 Junos OS: NFX350: Password hashes stored in world-readable format

The Juniper Device Manager JDM container, used by the disaggregated Junos OS architecture on Juniper Networks NFX350 Series devices, stores password hashes in the world-readable file /etc/passwd. This is not a security best current practice as it can allow an attacker with access to the local...

CVE-2020-1666

CVE-2020-1666 affects Juniper Networks Junos OS Evolved: the console logout-on-disconnect option fails to terminate an active CLI session when the console cable is disconnected. Descriptions across connected documents indicate that a physically proximate attacker could resume a prior interactive ...