Juniper Junos SRX Series 'set system ports console insecure' Local Privilege Escalation (JSA10683)

According to its self-reported version number, the remote Juniper Junos SRX Series device is affected by a privilege escalation vulnerability related to the 'set system ports console insecure' feature. A local attacker can exploit this vulnerability by using access to a console port to gain full...

Juniper Junos BGP-VPLS Advertisements RPD DoS (JSA10687)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to improper handling of BGP-VPLS advertisements with updated BGP local preference values. A remote attacker can exploit this to crash RDP with a NULL pointer deferen...

Juniper Junos LAST_ACK State DoS (JSA10686)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to the improper handling of TCP connection transitions to the LASTACK state when the device has more data to send. A remote attacker can exploit this cause the socke...

Juniper NSM < 2012.2R9 Apache HTTP Server Multiple Vulnerabilities (JSA10685)

The remote host is running a version of NSM Network and Security Manager Server that is prior to 2012.2R9. It is, therefore, affected by multiple vulnerabilities in the bundled version of Apache HTTP Server : - A flaw exists due to improper escaping of filenames in 406 and 300 HTTP responses. A...

Juniper NSM < 2012.2R9 Apache HTTP Server Multiple Vulnerabilities (JSA10685) (credentialed check)

The remote host is running a version of NSM Network and Security Manager Server that is prior to 2012.2R9. It is, therefore, affected by multiple vulnerabilities in the bundled version of Apache HTTP Server : - A flaw exists due to improper escaping of filenames in 406 and 300 HTTP responses. A...

Juniper Junos IPv6 SEND Handling Denial of Service Vulnerability

Juniper Networks JUNOS is an operating system that runs on Juniper Networks' line of border routers and more. A denial of service vulnerability exists in IPv6 sendd in Juniper Networks Junos. When the program is configured with the 'set protocols neighbor-discovery secure security-level default'...

CVE-2015-5363

The SRX Network Security Daemon nsd in Juniper SRX Series services gateways with Junos 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, and 12.3X48 before 12.3X48-D15 allows remote DNS servers to cause a denial of service crash via a crafted DNS response...

CVE-2015-5360

IPv6 sendd in Juniper Junos 12.1X44 before 12.1X44-D51, 12.1X46 before 12.1X46-D36, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R8, 13.3 before 13.3R6, 14.1 before 14.1R5, 14.2 before 14.2R3, 15.1 before 15.1R1, and...

CVE-2015-5357

The Juniper EX4600, QFX3500, QFX3600, and QFX5100 switches with Junos 13.2X51-D15 through 13.2X51-D25, 13.2X51 before 13.2X51-D30, and 14.1X53 before 14.1X53-D10 allows remote attackers to cause a denial of service CPU consumption via unspecified vectors...

Design/Logic Flaw

The Juniper EX4600, QFX3500, QFX3600, and QFX5100 switches with Junos 13.2X51-D15 through 13.2X51-D25, 13.2X51 before 13.2X51-D30, and 14.1X53 before 14.1X53-D10 allows remote attackers to cause a denial of service CPU consumption via unspecified vectors...

Code injection

The SRX Network Security Daemon nsd in Juniper SRX Series services gateways with Junos 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, and 12.3X48 before 12.3X48-D15 allows remote DNS servers to cause a denial of service crash via a crafted DNS response...

Default configuration

IPv6 sendd in Juniper Junos 12.1X44 before 12.1X44-D51, 12.1X46 before 12.1X46-D36, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R8, 13.3 before 13.3R6, 14.1 before 14.1R5, 14.2 before 14.2R3, 15.1 before 15.1R1, and...

CVE-2015-5360

Juniper Junos IPv6 SEND handling DoS (CVE-2015-5360) affects Junos with SEND security-level default enabled. A remote attacker can craft SEND Protocol packets to trigger CPU exhaustion, impacting CLI responsiveness and IPv6 packet processing. Exploitation details are described in multiple sources...

CVE-2015-5360

IPv6 sendd in Juniper Junos 12.1X44 before 12.1X44-D51, 12.1X46 before 12.1X46-D36, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R8, 13.3 before 13.3R6, 14.1 before 14.1R5, 14.2 before 14.2R3, 15.1 before 15.1R1, and...

CVE-2015-5357

The Juniper EX4600, QFX3500, QFX3600, and QFX5100 switches with Junos 13.2X51-D15 through 13.2X51-D25, 13.2X51 before 13.2X51-D30, and 14.1X53 before 14.1X53-D10 allows remote attackers to cause a denial of service CPU consumption via unspecified vectors...

CVE-2015-5357

This CVE affects Juniper Junos-operated switches: EX4600, QFX3500, QFX3600, and QFX5100. In the vulnerable software, Junos 13.2X51-D15 to -D25, 13.2X51 before -D30, and 14.1X53 before -D10, allow remote attackers to cause a denial of service by consuming CPU resources via unspecified vectors. The...

CVE-2015-5363

CVE-2015-5363 affects Juniper Networks Junos SRX Series, specifically the SRX Network Security Daemon (nsd). The vulnerability allows a remote DNS server to trigger a denial of service (crash) in nsd by sending a crafted DNS response. Affected releases include Junos 12.1X44 before 12.1X44-D50, 12...

Juniper Junos BFD Remote Denial of Service Vulnerability

Juniper Networks JUNOS is an operating system that runs on Juniper Networks' line of border routers and more. A security vulnerability exists in Juniper Networks JUNOS that allows remote attackers to exploit the vulnerability by sending specially crafted BFD messages that can crash the BFD backen...

Juniper SRX Series services gateways privilege acquisition vulnerability

The Juniper SRX Series is a family of Juniper Networks SRX devices running the Junos operating system. A component vulnerability in Juniper SRX Series services gateways with Junos OS versions 12.1X46 prior to 12.1X46-D35, 12.1X47 prior to 12.1X47-D25, and 12.3X48 prior to 12.3X48-D15 could allow ...

Juniper Junos BGP-VPLS Handling Denial of Service Vulnerability

Juniper Networks JUNOS is an operating system that runs on Juniper Networks' line of border routers and more. A security vulnerability in Juniper Junos allows a remote attacker to send a large number of BGP-VPLS notices containing updated BGP local reference values, crashing the target RPD backen...