CVE-2024-21604 Junos OS Evolved: A high rate of specific traffic will cause a complete system outage

An Allocation of Resources Without Limits or Throttling vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. If a high rate of specific valid packets are processed by the routing engine RE this will le...

CVE-2024-21603 Junos OS: MX Series: Gathering statistics in a scaled SCU/DCU configuration will lead to a device crash

An Improper Check for Unusual or Exceptional Conditions vulnerability in the kernel of Juniper Network Junos OS on MX Series allows a network based attacker with low privileges to cause a denial of service. If a scaled configuration for Source class usage SCU / destination class usage DCU more th...

CVE-2024-21603 Junos OS: MX Series: Gathering statistics in a scaled SCU/DCU configuration will lead to a device crash

An Improper Check for Unusual or Exceptional Conditions vulnerability in the kernel of Juniper Network Junos OS on MX Series allows a network based attacker with low privileges to cause a denial of service. If a scaled configuration for Source class usage SCU / destination class usage DCU more th...

CVE-2024-21603

CVE-2024-21603 affects Juniper Networks Junos OS on MX Series (MX304; MPC10/ MPC11; LC9600) with an improper check for unusual/exceptions in the kernel. When SCU/DCU uses more than 10 route classes and statistics are gathered via SNMP/CLI, a vmcore for the RE kernel can appear, causing a device r...

CVE-2024-21602 Junos OS Evolved: ACX7024, ACX7100-32C and ACX7100-48L: Traffic stops when a specific IPv4 UDP packet is received by the RE

A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS Evolved on ACX7024, ACX7100-32C and ACX7100-48L allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. If a specific IPv4 UDP packet is received and sent to the Routing Engine RE packetio crashes an...

CVE-2024-21602

CVE-2024-21602 describes a NULL Pointer Dereference in Juniper Networks Junos OS Evolved on ACX7024, ACX7100-32C and ACX7100-48L. An unauthenticated, network-based attacker can trigger a DoS by sending a specific IPv4 UDP packet to the Routing Engine, causing the RE’s packetio to crash/restart an...

CVE-2024-21602 Junos OS Evolved: ACX7024, ACX7100-32C and ACX7100-48L: Traffic stops when a specific IPv4 UDP packet is received by the RE

A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS Evolved on ACX7024, ACX7100-32C and ACX7100-48L allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. If a specific IPv4 UDP packet is received and sent to the Routing Engine RE packetio crashes an...

CVE-2024-21601

CVE-2024-21601 affects Juniper Networks Junos OS on SRX Series. A race condition in the Flow-processing Daemon (flowd) occurs when two threads simultaneously process the queue used for TCP events, causing flowd to crash. This allows an unauthenticated, network-based attacker to trigger a Denial-o...

CVE-2024-21600 Junos OS: PTX Series: In an FTI scenario MPLS packets hitting reject next-hop will cause a host path wedge condition

An Improper Neutralization of Equivalent Special Elements vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on PTX Series allows a unauthenticated, adjacent attacker to cause a Denial of Service DoS. When MPLS packets are meant to be sent to a flexible tunnel interfac...

CVE-2024-21600 Junos OS: PTX Series: In an FTI scenario MPLS packets hitting reject next-hop will cause a host path wedge condition

An Improper Neutralization of Equivalent Special Elements vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on PTX Series allows a unauthenticated, adjacent attacker to cause a Denial of Service DoS. When MPLS packets are meant to be sent to a flexible tunnel interfac...

CVE-2024-21600

CVE-2024-21600 describes an issue in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on PTX Series. An improper neutralization of equivalent special elements allows an unauthenticated, adjacent attacker to trigger a Denial of Service by causing a host path wedge when MPLS packets ...

CVE-2024-21599 Junos OS: MX Series: MPC3E memory leak with PTP configuration

A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on MX Series allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS. If an MX Series device receives PTP packets on an MPC3E that doesn't...

CVE-2024-21599

CVE-2024-21599 concerns a memory-release after lifetime issue in the PFE of Juniper Junos OS on MX Series with MPC3E. A memory leak is triggered when the device receives PTP packets on a MPC3E that does not support PTP, potentially causing unpredictable behavior and an MPC crash/restart (DoS) in ...

CVE-2024-21597

Summary: CVE-2024-21597 is a Juniper MX Series Junos OS vulnerability in the Packet Forwarding Engine (PFE) where, in an AF scenario with routing-instances, valid traffic can bypass lo0 firewall filters. This allows an unauthenticated, network-based attacker to bypass intended access restrictions...

CVE-2024-21597 Junos OS: MX Series: In an AF scenario traffic can bypass configured lo0 firewall filters

An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to bypass the intended access restrictions. In an Abstracted Fabric AF scenario if routing-instances RI are...

CVE-2024-21596 Junos OS and Junos OS Evolved: A specific BGP UPDATE message will cause a crash in the backup Routing Engine in NSR-enabled devices

A Heap-based Buffer Overflow vulnerability in the Routing Protocol Daemon RPD of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network based attacker to cause a Denial of Service DoS. If an attacker sends a specific BGP UPDATE message to the device, this will cause a...

CVE-2024-21596

CVE-2024-21596 describes a heap-based buffer overflow in the Routing Protocol Daemon (RPD) of Junos OS and Junos OS Evolved. An unauthenticated, network-based attacker capable of establishing a BGP session can craft specific BGP UPDATE messages to trigger a memory overwrite, causing an RPD crash ...

CVE-2024-21595

CVE-2024-21595 describes an issue in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS where improper validation of input syntax can be exploited by a network-based, unauthenticated attacker sending a high rate of specific ICMP traffic over a VXLAN-enabled device. This can cause a P...

CVE-2024-21594 Junos OS: SRX 5000 Series: Repeated execution of a specific CLI command causes a flowd crash

A Heap-based Buffer Overflow vulnerability in the Network Services Daemon NSD of Juniper Networks Junos OS allows authenticated, low privileged, local attacker to cause a Denial of Service DoS. On an SRX 5000 Series device, when executing a specific command repeatedly, memory is corrupted, which...

CVE-2024-21594

CVE-2024-21594 affects Juniper Networks Junos OS on the SRX 5000 Series. It is a heap-based buffer overflow in the Network Services Daemon (NSD) that, when a specific command is repeatedly executed, can corrupt memory and cause a crash of the Flow Processing Daemon (flowd), requiring an NSD resta...