Juniper JSA10879

The version of the tested product installed on the remote host is prior to the fixed version in the advisory. It is, therefore, affected by a denial of service vulnerability that exists in RPD daemon. An unauthenticated, remote attacker can exploit this issue, by continuously sending a specific...

CVE-2019-1010232

Juniper juniper/libslax libslax latest version as of commit 084ddf6ab4a55b59dfa9a53f9c5f14d192c4f8e5 Commits on Sep 1, 2018 is affected by: Buffer Overflow. The impact is: remote dos. The component is: slaxlexer.c:601funtion:slaxGetInput. The attack vector is: ./slaxproc --slax-to-xslt POC0...

CVE-2019-1010232

Juniper juniper/libslax libslax latest version as of commit 084ddf6ab4a55b59dfa9a53f9c5f14d192c4f8e5 Commits on Sep 1, 2018 is affected by: Buffer Overflow. The impact is: remote dos. The component is: slaxlexer.c:601funtion:slaxGetInput. The attack vector is: ./slaxproc --slax-to-xslt POC0...

Buffer overflow

Juniper juniper/libslax libslax latest version as of commit 084ddf6ab4a55b59dfa9a53f9c5f14d192c4f8e5 Commits on Sep 1, 2018 is affected by: Buffer Overflow. The impact is: remote dos. The component is: slaxlexer.c:601funtion:slaxGetInput. The attack vector is: ./slaxproc --slax-to-xslt POC0...

CVE-2019-1010232

Juniper juniper/libslax libslax latest version as of commit 084ddf6ab4a55b59dfa9a53f9c5f14d192c4f8e5 Commits on Sep 1, 2018 is affected by: Buffer Overflow. The impact is: remote dos. The component is: slaxlexer.c:601funtion:slaxGetInput. The attack vector is: ./slaxproc --slax-to-xslt POC0...

CVE-2019-1010232

CVE-2019-1010232 affects Juniper libslax (Slack SLAX engine). The vulnerability is a Buffer Overflow in libslax’s slaxlexer.c:601 (function slaxGetInput), enabling remote Denial of Service via the attack vector: ./slaxproc --slax-to-xslt POC0. Public documents consistently describe the affected c...

Juniper Junos Space < 17.2R2 Persistent XSS Vulnerability (JSA10881)

According to its self-reported version number, the version of Junos Space running on the remote device is 17.2R2, and is therefore affected by a persistent cross-site scripting vulnerability in the UI framework used by Junos Space Security Director. A remote authenticated attacker can exploit tha...

Juniper JSA10946

The version of Junos OS installed on the remote host is prior to 12.3X48-D85, 15.1X49-D181, 17.4R1-S8, 18.1R3-S6, 18.2R2-S1, 18.3R1-S2, or 18.4R1-S1. It is, therefore, affected by a vulnerability as referenced in the JSA10946 advisory. Note that Nessus has not tested for this issue but has instea...

Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2019-22785)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS EX4300 Series. An attacker could exploit the vulnerability to...

Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2019-22784)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS SRX Series. An attacker could exploit the vulnerability to...

Stack Overflow Vulnerability in Juniper Firewall System

Juniper Networks is a leading global provider of networking and security solutions. A stack overflow vulnerability exists in the Juniper firewall system that can be exploited by an attacker to cause a denial of service to a server...

Unspecified Vulnerability in Juniper Networks Junos OS (CNVD-2019-41481)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK.A security vulnerability exists in Juniper Networks Junos OS. An attacker could exploit this vulnerability to...

CVE-2019-0046

A vulnerability in the pfe-chassisd Chassis Manager CMLC daemon of Juniper Networks Junos OS allows an attacker to cause a Denial of Service DoS to the EX4300 when specific valid broadcast packets create a broadcast storm condition when received on the me0 interface of the EX4300 Series device. A...

DEBIAN-CVE-2019-0053

Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based buffer overflows, which can be exploited to bypass veriexec restrictions on Junos OS. A stack-based overflow is present in the handling of environment variables when connecting via t...

CVE-2019-0049

On Junos devices with the BGP graceful restart helper mode enabled or the BGP graceful restart mechanism enabled, a certain sequence of BGP session restart on a remote peer that has the graceful restart mechanism enabled may cause the local routing protocol daemon RPD process to crash and restart...

CVE-2019-0053

Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based buffer overflows, which can be exploited to bypass veriexec restrictions on Junos OS. A stack-based overflow is present in the handling of environment variables when connecting via t...

CVE-2019-0052

The srxpfe process may crash on SRX Series services gateways when the UTM module processes a specific fragmented HTTP packet. The packet is misinterpreted as a regular TCP packet which causes the processor to crash. This issue affects all SRX Series platforms that support URL-Filtering and have...

CVE-2019-0048

On EX4300 Series switches with TCAM optimization enabled, incoming multicast traffic matches an implicit loopback filter rule first, since it has high priority. This rule is meant for reserved multicast addresses 224.0.0.x, but incorrectly matches on 224.x.x.x. Due to this bug, when a firewall...

Design/Logic Flaw

A vulnerability in the pfe-chassisd Chassis Manager CMLC daemon of Juniper Networks Junos OS allows an attacker to cause a Denial of Service DoS to the EX4300 when specific valid broadcast packets create a broadcast storm condition when received on the me0 interface of the EX4300 Series device. A...

Stack overflow

Insufficient validation of environment variables in the telnet client supplied in Junos OS can lead to stack-based buffer overflows, which can be exploited to bypass veriexec restrictions on Junos OS. A stack-based overflow is present in the handling of environment variables when connecting via t...