260 matches found
CVE-2021-31351: Improper Check for Unusual or Exceptional Conditions
An Improper Check for Unusual or Exceptional Conditions in packet processing on the MS-MPC/MS-MIC utilized by Juniper Networks Junos OS allows a malicious attacker to send a specific packet, triggering the MS-MPC/MS-MIC to reset, causing a Denial of Service DoS. Continued receipt and processing o...
CVE-2021-31369: Allocation of Resources Without Limits or Throttling
On MX Series platforms with MS-MPC/MS-MIC, an Allocation of Resources Without Limits or Throttling vulnerability in Juniper Networks Junos OS allows an unauthenticated network attacker to cause a partial Denial of Service DoS with a high rate of specific traffic. If a Class of Service CoS rule is...
PT-2021-19267
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on MX Series with MS-MPC/MS-MIC versions prior to 17.4R3-S5 Juniper Networks Junos OS on MX Series with MS-MPC/MS-MIC 18.3 versions prior to 18.3R3-S5 Juniper Networks Junos OS on MX Series with MS-MPC/MS-MIC 18.4...
CVE-2021-31379
An Incorrect Behavior Order vulnerability in the MAP-E automatic tunneling mechanism of Juniper Networks Junos OS allows an attacker to send certain malformed IPv4 or IPv6 packets to cause a Denial of Service DoS to the PFE on the device which is disabled as a result of the processing of these...
PT-2021-5119
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 17.2R1 and later versions; Juniper Networks Junos OS versions 17.3 prior to 17.3R3-S9; Juniper Networks Junos OS versions 17.4 prior to 17.4R2-S12, 17.4R3-S3; Juniper Networks Junos OS versions 18.1 prior to...
PT-2021-5114
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 17.3R3-S11 through 17.4R3 prior to 17.4R3-S5 Juniper Networks Junos OS versions 18.1R3-S12 Juniper Networks Junos OS versions 18.2R2-S8 through 18.2R3-S8 Juniper Networks Junos OS versions 18.3R3-S4 Juniper...
Juniper Junos OS Vulnerability (JSA11231)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11231 advisory. - On MX Series platforms with MS-MPC/MS-MIC, an Allocation of Resources Without Limits or Throttling vulnerability in Juniper Networks Junos OS allows an unauthenticated...
imagemagick:encoder_mpc_fuzzer: Use-of-uninitialized-value in AcquireUniqueFileResource
Detailed Report: https://oss-fuzz.com/testcase?key=6751133677780992 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermpcfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: AcquireUniqueFileResource...
Juniper Junos DoS (JSA11148)
The version of Junos OS installed on the remote host is affected by a denial of service vulnerability as referenced in the JSA11148 advisory. On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPCs Modular Port Concentrators where Integrated Routing and Bridging IRB...
CVE-2021-0264
A vulnerability in the processing of traffic matching a firewall filter containing a syslog action in Juniper Networks Junos OS on MX Series with MPC10/MPC11 cards installed, PTX10003 and PTX10008 Series devices, will cause the line card to crash and restart, creating a Denial of Service DoS...
CVE-2021-0257
On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPCs Modular Port Concentrators where Integrated Routing and Bridging IRB interfaces are configured and mapped to a VPLS instance or a Bridge-Domain, certain Layer 2 network events at Customer Edge CE devices may cause memo...
CVE-2021-0257
On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPCs Modular Port Concentrators where Integrated Routing and Bridging IRB interfaces are configured and mapped to a VPLS instance or a Bridge-Domain, certain Layer 2 network events at Customer Edge CE devices may cause memo...
CVE-2021-0228
An improper check for unusual or exceptional conditions vulnerability in Juniper Networks MX Series platforms with Trio-based MPC Modular Port Concentrator deployed in Ethernet VPN EVPN-Virtual Extensible LAN VXLAN configuration, may allow an attacker sending specific Layer 2 traffic to cause...
CVE-2021-0228
An improper check for unusual or exceptional conditions vulnerability in Juniper Networks MX Series platforms with Trio-based MPC Modular Port Concentrator deployed in Ethernet VPN EVPN-Virtual Extensible LAN VXLAN configuration, may allow an attacker sending specific Layer 2 traffic to cause...
Input validation
An improper check for unusual or exceptional conditions vulnerability in Juniper Networks MX Series platforms with Trio-based MPC Modular Port Concentrator deployed in Ethernet VPN EVPN-Virtual Extensible LAN VXLAN configuration, may allow an attacker sending specific Layer 2 traffic to cause...
CVE-2021-0257 Junos OS: MX Series, EX9200 Series: Trio-based MPCs memory leak in VPLS with integrated routing and bridging (IRB) interface
On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPCs Modular Port Concentrators where Integrated Routing and Bridging IRB interfaces are configured and mapped to a VPLS instance or a Bridge-Domain, certain Layer 2 network events at Customer Edge CE devices may cause memo...
CVE-2021-0257
CVE-2021-0257 affects Juniper Junos OS on MX Series and EX9200 Series with Trio-based MPCs where IRB interfaces are mapped to a VPLS or Bridge-Domain. The issue is a memory leak in the MPC that can lead to an out-of-memory condition and an MPC restart, causing temporary traffic interruptions. Aff...
CVE-2021-0251 Junos OS: MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC: The BRAS Subscriber Services service activation portal is vulnerable to a Denial of Service (DoS) via malformed HTTP packets
A NULL Pointer Dereference vulnerability in the Captive Portal Content Delivery CPCD services daemon cpcd of Juniper Networks Junos OS on MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC allows an attacker to send malformed HTTP packets to the device thereby causing a Denial of Service DoS,...
CVE-2021-0228 Junos OS: MX Series: DDoS LACP violation upon receipt of specific layer 2 frames in EVPN-VXLAN deployment
An improper check for unusual or exceptional conditions vulnerability in Juniper Networks MX Series platforms with Trio-based MPC Modular Port Concentrator deployed in Ethernet VPN EVPN-Virtual Extensible LAN VXLAN configuration, may allow an attacker sending specific Layer 2 traffic to cause...
CVE-2021-0228
CVE-2021-0228 affects Juniper Networks Junos OS on MX Series with Trio-based MPC in EVPN-VXLAN deployments. The issue is an improper check for unusual conditions that allows a specific Layer 2 traffic pattern to trigger DoS protection unexpectedly, sustaining a DoS condition through continued rec...