CVE-2019-0039

CVE-2019-0039 affects Junos OS where REST API is enabled, enabling brute-force login attempts due to a high default connection limit. Publicly documented details list affected Junos OS versions (e.g., 14.1X53 before 14.1X53-D49; 15.1 family before various 15.x builds; up to 18.3R1-S1), with remed...

CVE-2019-0033 SRX Series: A remote attacker may cause a high CPU Denial of Service to the device when proxy ARP is configured.

A firewall bypass vulnerability in the proxy ARP service of Juniper Networks Junos OS allows an attacker to cause a high CPU condition leading to a Denial of Service DoS. This issue affects only IPv4. Affected releases are Juniper Networks Junos OS: 12.1X46 versions above and including 12.1X46-D2...

CVE-2019-0043

CVE-2019-0043 describes a denial-of-service vulnerability in Junos OS where receipt of a specially crafted SNMP packet can cause the RPD process to crash and restart, leading to prolonged DoS. Affected Juniper releases span multiple lines of Junos OS across SRX, EX/QFX, NFX, ACX, and other series...

CVE-2019-0042

Juniper Identity Management Service (JIMS) for Windows versions prior to 1.1.4 is affected. An input validation issue in JIMS may cause it to send an incorrect message to associated SRX services gateways, potentially allowing an attacker with physical access to bypass SRX firewall policies or tri...

CVE-2019-0028

The CVE-2019-0028 entry affects Junos OS where BGP graceful restart (helper mode or mechanism) is enabled. A remote peer with graceful restart enabled can trigger a crafted BGP session restart that crashes the local Routing Protocol Daemon (RPD), crashing and restarting it and enabling a prolonge...

CVE-2019-0019

CVE-2019-0019 describes a DoS vulnerability in Juniper Junos OS where enabling BGP tracing may cause the routing protocol daemon (rpd) to crash and restart on receipt of certain BGP messages. Repeated crashes can extend the DoS condition. Affected Junos OS releases include 16.1 (before 16.1R7-S4,...

CVE-2019-0041

CVE-2019-0041 affects Juniper Networks Junos OS on the EX4300-MP Series. With any lo0 filters applied, transit network traffic could reach the control plane via the loopback interface (lo0) and the device may fail to forward such traffic. Affected software: Junos OS 18.2 prior to 18.2R1-S2 and 18...

CVE-2019-0031

The CVE-2019-0031 issue affects Juniper Networks Junos OS, specifically the jdhcpd daemon used to respond to IPv6 requests. A crafted sequence of IPv6 DHCP packets can trigger memory resource consumption in jdhcpd, leading to a Denial of Service where subsequent IPv4/IPv6 requests may be affected...

CVE-2019-0041 Junos OS: EX4300-MP Series: IP transit traffic can reach the control plane via loopback interface.

On EX4300-MP Series devices with any lo0 filters applied, transit network traffic may reach the control plane via loopback interface lo0. The device may fail to forward such traffic. This issue affects Juniper Networks Junos OS 18.2 versions prior to 18.2R1-S2, 18.2R2 on EX4300-MP Series. This...

CVE-2019-0037 Junos OS: jdhcpd crash upon receipt of crafted DHCPv6 solicit message

In a Dynamic Host Configuration Protocol version 6 DHCPv6 environment, the jdhcpd daemon may crash and restart upon receipt of certain DHCPv6 solicit messages received from a DHCPv6 client. By continuously sending the same crafted packet, an attacker can repeatedly crash the jdhcpd process causin...

CVE-2019-0043 Junos OS: RPD process crashes upon receipt of a specific SNMP packet

In MPLS environments, receipt of a specific SNMP packet may cause the routing protocol daemon RPD process to crash and restart. By continuously sending a specially crafted SNMP packet, an attacker can repetitively crash the RPD process causing prolonged denial of service. No other Juniper Network...

CVE-2019-0035

CVE-2019-0035 describes an administrative bypass on Juniper Networks Junos OS. When the insecure console port setting is enabled, an attacker with physical access can change the root password on systems booted from an OAM volume using the command set system root-authentication plain-text-password...

CVE-2019-0037

CVE-2019-0037 describes a denial-of-service in the Juniper Junos jdhcpd daemon. A crafted DHCPv6 solicit message can cause the jdhcpd process to crash and restart, leading to sustained DoS for both IPv4 and IPv6 clients. Affected Junos OS releases are numerous, spanning 15.1 (before 15.1F6-S12, 1...

CVE-2019-0044

CVE-2019-0044 affects Juniper SRX5000 series running Junos OS: 12.1X46 before 12.1X46-D82; 12.3X48 before 12.3X48-D80; 15.1X49 before 15.1X49-D160. Root cause is a kernel crash (vmcore) triggered by processing a crafted packet on the fxp0 out-of-band management interface, leading to DoS via repea...

CVE-2019-0033

CVE-2019-0033: A firewall bypass vulnerability in the proxy ARP service of Juniper Networks Junos OS can cause a high CPU condition leading to a Denial of Service (DoS). Affected products: Junos OS releases across multiple lines (e.g., 12.1X46 family with builds D25–D71, 12.1X46-D73 on SRX Series...

CVE-2019-0028 Junos OS: RPD process crashes due to specific BGP peer restarts condition.

On Junos devices with the BGP graceful restart helper mode enabled or the BGP graceful restart mechanism enabled, a BGP session restart on a remote peer that has the graceful restart mechanism enabled may cause the local routing protocol daemon RPD process to crash and restart. By simulating a...

CVE-2019-0036

CVE-2019-0036 affects Juniper Networks Junos OS and causes stateless firewall filter terms named like internal-n (for example internal-1) to be silently ignored during configuration. The config commits without error, but the filter criteria can inadvertently match all packets, leading to unintend...

CVE-2019-0038: Uncontrolled Resource Consumption

Crafted packets destined to the management interface fxp0 of an SRX340 or SRX345 services gateway may create a denial of service DoS condition due to buffer space exhaustion. This issue only affects the SRX340 and SRX345 services gateways. No other products or platforms are affected by this...

CVE-2019-0019: Improper Resource Shutdown or Release

When BGP tracing is enabled an incoming BGP message may cause the Junos OS routing protocol daemon rpd process to crash and restart. While rpd restarts after a crash, repeated crashes can result in an extended DoS condition. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to...

CVE-2019-0040: Exposure of Sensitive Information to an Unauthorized Actor

On Junos OS, rpcbind should only be listening to port 111 on the internal routing instance IRI. External packets destined to port 111 should be dropped. Due to an information leak vulnerability, responses were being generated from the source address of the management interface e.g. fxp0 thus...