The vulnerability in the J-Web web interface of the Junos operating system, which allows a hacker to elevate their privileges to the root level.

The vulnerability in the J-Web web interface of the Junos operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to elevate their privileges to the root level...

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS-based routers of the PTX and QFX10K series allows a hacker to induce a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS-based routers of the PTX and QFX10K series is related to initialization errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the Junos operating system arises from an operation that goes beyond the buffer boundaries in memory, allowing a attacker to trigger a service failure.

The vulnerability of the Junos operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause a service failure by sending a specific sequence of packets to the device...

The vulnerability of the ARP Policer implementation on Juniper Networks’ Junos OS allows a perpetrator to circumvent traffic restrictions.

The vulnerability of the ARP Policer traffic filtering technology implemented in Juniper Networks’ Junos OS is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to circumvent traffic restrictions...

The vulnerability of Juniper Networks Junos OS routers of the MX and EX9200 series lies in insufficient checking of unusual or exceptional states, allowing a hacker to trigger a service failure.

The vulnerability of Juniper Networks’ Junos OS routers of the MX and EX9200 series lies in insufficient checking of unusual or exceptional states during packet processing in MPLS. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the Junos operating system lies in the insufficient checking of unusual or exceptional states, which allows a perpetrator to trigger an emergency failure and restart the device.

The vulnerability of the Junos operating system is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause an emergency failure and restart the device through the routing of the event management...

The vulnerability of Juniper Networks Junos OS routers of the MX, EX9200, and SRX4600 series lies in deficiencies in handling exceptional states, which allows an attacker to trigger a service failure.

The vulnerability of Juniper Networks Junos OS routers of the MX, EX9200, and SRX4600 series is related to deficiencies in handling exceptional states during packet processing. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

The vulnerability of the Advanced Forwarding Toolkit Manager process on the JunOS Evolved operating system allows a hacker to trigger a system failure and restart the device.

The vulnerability of the Advanced Forwarding Toolkit Manager process on the JunOS Evolved operating system is related to improper handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to trigger an emergency shutdown and restart of the device using a specially...

The vulnerability of JunOS Evolved and Junos operating systems lies in the insufficient checking of unusual or exceptional states, which allows attackers to trigger an emergency failure and restart the device.

The vulnerability of JunOS Evolved and Junos operating systems is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to trigger an emergency failure and restart the device through the routing process of the event management...

CVE-2021-0294

A vulnerability in Juniper Networks Junos OS, which only affects the release 18.4R2-S5, where a function is inconsistently implemented on Juniper Networks Junos QFX5000 Series and EX4600 Series, and if "storm-control enhanced" is configured, can lead to the enhanced storm control filter group not...

CVE-2021-0293

A vulnerability in Juniper Networks Junos OS caused by Missing Release of Memory after Effective Lifetime leads to a memory leak each time the CLI command 'show system connections extensive' is executed. The amount of memory leaked on each execution depends on the number of TCP connections from a...

CVE-2021-0285

An uncontrolled resource consumption vulnerability in Juniper Networks Junos OS on QFX5000 Series and EX4600 Series switches allows an attacker sending large amounts of legitimate traffic destined to the device to cause Interchassis Control Protocol ICCP interruptions, leading to an unstable...

CVE-2021-0290

Improper Handling of Exceptional Conditions in Ethernet interface frame processing of Juniper Networks Junos OS allows an attacker to send specially crafted frames over the local Ethernet segment, causing the interface to go into a down state, resulting in a Denial of Service DoS condition. The...

CVE-2021-0287

In a Segment Routing ISIS SR-ISIS/MPLS environment, on Juniper Networks Junos OS and Junos OS Evolved devices, configured with ISIS Flexible Algorithm for Segment Routing and sensor-based statistics, a flap of a ISIS link in the network, can lead to a routing process daemon RPD crash and restart,...

CVE-2021-0288

A vulnerability in the processing of specific MPLS packets in Juniper Networks Junos OS on MX Series and EX9200 Series devices with Trio-based MPCs Modular Port Concentrators may cause FPC to crash and lead to a Denial of Service DoS condition. Continued receipt of this packet will sustain the...

CVE-2021-0283

A buffer overflow vulnerability in the TCP/IP stack of Juniper Networks Junos OS allows an attacker to send specific sequences of packets to the device thereby causing a Denial of Service DoS. By repeatedly sending these sequences of packets to the device, an attacker can sustain the Denial of...

CVE-2021-0289

When user-defined ARP Policer is configured and applied on one or more Aggregated Ethernet AE interface units, a Time-of-check Time-of-use TOCTOU Race Condition vulnerability between the Device Control Daemon DCD and firewall process dfwd daemons of Juniper Networks Junos OS allows an attacker to...

CVE-2021-0282

On Juniper Networks Junos OS devices with Multipath or add-path feature enabled, processing a specific BGP UPDATE can lead to a routing process daemon RPD crash and restart, causing a Denial of Service DoS. Continued receipt and processing of this UPDATE message will create a sustained Denial of...

CVE-2021-0280

Due to an Improper Initialization vulnerability in Juniper Networks Junos OS on PTX platforms and QFX10K Series with Paradise PE chipset-based line cards, ddos-protection configuration changes made from the CLI will not take effect as expected beyond the default DDoS Distributed Denial of Service...

Vulnerabilities fixed in Juniper products

Juniper has fixed vulnerabilities in Junos OS, Junos OS Evolved and PTX, QTX, MX, EX9200 and SRX4600 devices. The vulnerabilities potentially enable a malicious party to launch attacks leading to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Remote...