Juniper Junos Unspecified DoS (PSN-2013-01-818)

According to its self-reported version number, the remote Junos device has an unspecified denial of service vulnerability. A remote, unauthenticated attacker could exploit this by sending a specially crafted TCP packet, causing the host to crash. C Tenable Network Security, Inc...

Juniper Junos IPv6报文处理MBUF耗竭拒绝服务漏洞

Juniper Networks JUNOS是一款Juniper网络公司的系列边界路由器等所运行的操作系统 Juniper Junos存在一个缺陷可导致拒绝服务攻击，在处理某些IPv6报文过程中，检查与应用于lo0接口上IPv6 egress过滤器丢弃或者拒绝术语是否匹配时可触发此漏洞，允许远程攻击者利用漏洞耗竭MBUF，造成内核崩溃 0 Juniper JUNOS 10.4R11 Juniper JUNOS 11.4R5 Juniper JUNOS 12.1R4 Juniper JUNOS 12.2R1 厂商解决方案 Juniper JUNOS 10.4R12, 11.4R5-S3,...

Juniper's Junos Could Open Routers to TCP Attacks

UPDATE Some systems running older versions of Juniper Networks’ Junos OS software could be vulnerable to a transmission control protocol TCP flaw that can enable a hacker to crash and reboot certain routers. According to Australia’s IT News, an attacker could send a specially crafted TCP packet t...

Juniper Junos J-Web URL Encoding Heap-Based Buffer Overflow (PSN-2013-01-807)

According to its self-reported version number, the remote Junos device has a heap-based buffer overflow in the J-Web component. Sending an unspecified request related to URL encoding can corrupt heap memory. A remote, unauthenticated attacker could exploit this to execute arbitrary code. C Tenabl...

Juniper Junos PIM Join Flood DoS (PSN-2013-01-808)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. Receiving a large number of specially crafted IPv4 or IPv6 PIM join messages in a Next-Generation Multicast VPN NGEN MVPN environment can cause the routing daemon to crash. C Tenable...

Juniper Junos Compliance Checks

Binary data junipercompliancecheck.nbin...

Juniper Junos ttymodem() DoS (PSN-2012-08-699)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. A timing issue in ttymodem can cause the Junos kernel to crash whenever the device is accessed remotely e.g., telnet, SSH. C Tenable Network Security, Inc. include"compat.inc"; if...

Juniper Junos web-authentication Policy Not Enforced (PSN-2012-10-735)

According to its self-reported version number, the remote Junos device stops enforcing a web-authentication policy if its client-match statement is removed. This would allow unauthenticated access to resources that are assumed to be protected by web-authentication. C Tenable Network Security, Inc...

Juniper Junos PIM Hello DoS (PSN-2012-10-732)

According to its self-reported version number, the remote Junos device could crash when processing a malformed PIM message. A remote, unauthenticated attacker could exploit this to cause a denial of service. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62712;...

Juniper Junos BGP UPDATE DoS (PSN-2012-10-733)

According to its self-reported version number, the remote Junos device could crash when processing a BGP UPDATE message containing a specially crafted flow specification NLRI. A remote attacker could exploit this to cause a denial of service. C Tenable Network Security, Inc. include"compat.inc"; ...

Juniper Junos IS-IS hello DoS (PSN-2012-07-647)

According to its self-reported version number, the rpd daemon on remote Junos router may crash when processing malformed IS-IS hello messages. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59991; scriptversion"1.8"; scriptcvsdate"Date: 2018/08/08 12:52:14";...

Juniper Junos ICMPv6 DoS (PSN-2012-07-644)

According to its self-reported version number, the remote Junos router has a denial of service vulnerability. Receiving an ICMPv6 packet with a corrupted payload within an IPv6 L3VPN can result in a kernel panic. Only VPNv6 configurations without the 'vrf-table-label' statement in the routing...

Juniper Junos J-Web Hash Collision DoS (PSN-2012-07-650)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability in the J-Web component. It is possible to send requests to the web server that result in hash collisions, resulting in CPU consumption. C Tenable Network Security, Inc. include"compat.inc"...

Juniper Junos OpenSSL ASN.1 Memory Corruption (PSN-2012-07-645)

According to its self-reported version number, the remote Junos router is using an outdated version of OpenSSL. Parsing malformed ASN.1 encoded data can result in memory corruption. This vulnerability can be triggered by attempting to parse untrusted data e.g., an X.509 certificate. C Tenable...

Juniper Junos lo0 Firewall Bypass (PSN-2012-07-651)

According to its self-reported version number, the remote Junos router has a firewall bypass vulnerability. This issue is present when log or syslog actions are used along with discard within a firewall filter term deployed on the lo0 loopback interface. When the receive rate is very high, some...

Juniper Junos J-Web XSS (PSN-2012-07-649)

According to its self-reported version number, the remote Junos device has a cross-site scripting vulnerability in the J-Web component. Unspecified input to index.php can result in cross-site scripting. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59993;...

Juniper Junos load factory-default Privilege Escalation (PSN-2012-07-646)

According to its self-reported version number, the remote Junos device has a privilege escalation vulnerability. When the 'load factory-default' command fails in exclusive edit mode, the user is no longer subject to any command or configuration restrictions. C Tenable Network Security, Inc...

Juniper Junos PIM DoS (PSN-2012-07-648)

According to its self-reported version number, the remote router has a denial of service vulnerability. Sending a specially crafted broadcast storm of corrupt packets to the data multicast distribution tree port of a Junos router can cause the rpd daemon to hang. Only routers with PIM enabled in ...

Juniper Junos SYN Cookie Protection DoS (PSN-2012-07-643)

According to its self-reported version number, the SYN cookie protection implementation of the remote Junos system has a denial of service vulnerability. If SYN flood protection is enabled and the SYN cookie protection threshold is exceeded, the server responds to connections with an RST, causing...

Juniper Junos UDP/IP DoS (PSN-2012-07-652)

According to its self-reported version number, the remote Junos device has a denial of service vulnerability. The flowd process may crash when reassembling UDP/IP fragments. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59996; scriptversion"1.8"; scriptcvsdate"Date:...