CVE-2023-28981

CVE-2023-28981 describes an improper input validation in the kernel of Juniper Networks Junos OS and Junos OS Evolved. An unauthenticated, adjacent attacker can trigger memory corruption by sending malformed IPv6 router-advertisement packets after router advertisements are enabled on an interface...

CVE-2023-28981 Junos OS and Junos OS Evolved: If malformed IPv6 router advertisements are received, memory corruption will occur which causes an rpd crash

An Improper Input Validation vulnerability in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. If the receipt of router advertisements is enabled on an interface and a specifically malformed RA packet is...

CVE-2023-28980

CVE-2023-28980 affects Juniper Networks Junos OS and Junos OS Evolved. A Use-After-Free in the routing protocol daemon (rpd) can crash the rpd in a BGP rib sharding scenario, allowing a locally authenticated, low-privileged attacker to cause DoS, especially with large routing tables (>1M). Con...

CVE-2023-28968

CVE-2023-28968 : An Improperly Controlled Sequential Memory Allocation in the JDPI-Decoder Application Signature (part of Junos OS AppID) can cause the JDPI-Decoder to stop identifying dynamic application traffic, allowing unauthenticated network-based traffic to pass through. Affected components...

CVE-2023-28974

CVE-2023-28974 affects Juniper Networks Junos OS on MX Series. The vulnerability is in the bbe-smgd process and stems from an improper check for unusual or exceptional conditions, allowing an unauthenticated adjacent attacker to crash bbe-smgd by sending a specifically malformed ICMP packet. Impa...

CVE-2023-28966

CVE-2023-28966 describes an "Incorrect Default Permissions" vulnerability in Juniper Networks Junos OS Evolved. The root cause is improper file and directory permissions on certain system files, enabling a local, low-privileged attacker with shell access to inject CLI commands or modify files as ...

CVE-2023-28972

CVE-2023-28972 affects Juniper Networks Junos OS on NFX Series. The vulnerability is caused by an improper link resolution before file access in console port access, allowing an attacker with physical console access to bypass login controls and change the root password via set system root-authent...

CVE-2023-28967

The CVE describes a Use of Uninitialized Resource vulnerability in Juniper Networks Junos OS and Junos OS Evolved BGP software that allows an unauthenticated network-based attacker to crash the Routing Protocol Daemon (rpd) by sending specific genuine BGP packets before a BGP session is establish...

MGASA-2023-0138 Updated tomcat packages fix security vulnerability

Information disclosure due to concurrency bug CVE-2021-43980 Fix for CVE-2020-9484 introduced a time of check, time of use vulnerability CVE-2022-23181 Correct documentation to warn of use over untrusted networks. CVE-2022-29885 Correct documentation showing use of XSS vulnerability. CVE-2022-343...

F5 Networks BIG-IP : BIG-IP AFM vulnerability (K46048342)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5.3 / 15.1.8 / 16.1.3.3 / 17.0.0.2 / 17.1.0. It is, therefore, affected by a vulnerability as referenced in the K46048342 advisory. - On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8,...

F5 Networks BIG-IP : BIG-IP Edge Client for Windows vulnerability (K76964818)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.8.2 / 16.1.3.4 / 17.0.0.2 / 17.1.0. It is, therefore, affected by a vulnerability as referenced in the K76964818 advisory. A DLL hijacking vulnerability exists in the BIG-IP Edge Client Windows Installer.CVE-2023-2235...

F5 Networks BIG-IP : BIG-IP Edge Client for Windows vulnerability (K07143733)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5.4 / 15.1.8.2 / 16.1.3.4 / 17.0.0.2 / 17.1.0. It is, therefore, affected by a vulnerability as referenced in the K07143733 advisory. - On versions beginning in 7.1.5 to before 7.2.3.1, a DLL hijacking vulnerability...

Juniper Networks Releases Security Updates

Juniper Networks has released security updates to address vulnerabilities affecting Junos OSlink is external, Paragon Active Assurance PAAlink is external, and Juniper Secure Analytics JSA Serieslink is external. An attacker could exploit some of these vulnerabilities to take control of an affect...

Juniper Junos OS Vulnerability (JSA70588)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70588 advisory. - An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a network...

Juniper Junos OS Vulnerability (JSA70610)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70610 advisory. - A Use After Free vulnerability in the Layer 2 Address Learning Manager l2alm of Juniper Networks Junos OS on QFX Series allows an adjacent attacker to cause the Packet...

Juniper Junos OS Vulnerability (JSA70585)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70585 advisory. - An Incorrect Permission Assignment for Critical Resource vulnerability in Juniper Networks Junos OS Evolved allows a local, authenticated low-privileged attacker to copy...

Juniper Junos OS Vulnerability (JSA70601)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70601 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine pfe of Juniper Networks Junos OS on MX Series allows an...

CVE-2023-0004

A local file deletion vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to delete files from the local file system with elevated privileges. These files can include logs and system components that impact the integrity and availability of PAN-OS software...

CVE-2023-0004

A local file deletion vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to delete files from the local file system with elevated privileges. These files can include logs and system components that impact the integrity and availability of PAN-OS software...

CVE-2023-0005

A vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to expose the plaintext values of secrets stored in the device configuration and encrypted API keys...