The vulnerability of the API subsystem of the Cisco Meeting Server platform allows a hacker to obtain server credentials for conducting audio/video calls and packet forwarding.

The vulnerability of the API subsystem of the Cisco Meeting Server platform relates to insufficient mechanisms for protecting the server’s credentials. This vulnerability allows a malicious actor to obtain the server’s credentials, enabling them to conduct audio/video calls and packet forwarding...

CVE-2020-1655

When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2TP, MAP-E, GRE, and IPIP, the packet forwarding engine PFE will become disabled upon receipt of large packets requiring fragmentation,...

CVE-2020-1651

On Juniper Networks MX series, receipt of a stream of specific Layer 2 frames may cause a memory leak resulting in the packet forwarding engine PFE on the line card to crash and restart, causing traffic interruption. By continuously sending this stream of specific layer 2 frame, an attacker...

CVE-2020-1649

When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2TP, MAP-E, GRE, and IPIP, the packet forwarding engine PFE will become disabled upon receipt of small fragments requiring reassembly,...

CVE-2020-1651: Missing Release of Memory after Effective Lifetime

On Juniper Networks MX series, receipt of a stream of specific Layer 2 frames may cause a memory leak resulting in the packet forwarding engine PFE on the line card to crash and restart, causing traffic interruption. By continuously sending this stream of specific layer 2 frame, an attacker...

Cross site scripting

A vulnerability in the API subsystem of Cisco Meetings App could allow an unauthenticated, remote attacker to retain and reuse the Traversal Using Relay NAT TURN server credentials that are configured in an affected system. The vulnerability is due to insufficient protection mechanisms for the TU...

Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2020-49039)

Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. A denial-of-service vulnerability exists in Juniper Networks Junos OS's handling of fractional reorganization, which can be exploited by an attacker to cause the Packet Forwarding Engine P...

Juniper Networks Junos OS Code Issue Vulnerability (CNVD-2020-51515)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A code issue vulnerability exists in Juniper Networks Junos OS MX Series. An attacker could exploit this vulnerability to...

Juniper Networks Junos OS Resource Management Error Vulnerability (CNVD-2020-50489)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in the Juniper Networks Junos OS MX Series. An attacker could exploit the vulnerability by...

CVE-2020-1617

CVE-2020-1617 affects Junos OS on non-AFI/AFT platforms. An improper memory initialization in the packet forwarding architecture can be triggered when a genuine packet is inspected by sFlow through a specific firewall policer, causing a reboot and, after reboot, a core file and another reboot on ...

The vulnerability of the packet forwarding dispatcher in the Junos OS operating system allows a attacker to execute arbitrary code or cause a failure in the operation of the FXPC daemon.

The vulnerability of the packet forwarding dispatcher in the Junos OS operating system is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause failures in the FXPC daemon’s operation...

Juniper JSA10930

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a stack based overflow vulnerability in the Junos OS Packet Forwarding Engine manager FXPC process on QFX5000 series. A remote attacker can exploit it which can lead to a remote co...

The vulnerability of the JunOS operating system, related to errors in input/output operations, allows a perpetrator to trigger a service failure.

The vulnerability of the JunOS operating system is related to errors in input/output operations. Exploiting this vulnerability can allow an attacker to cause a service failure due to a disruption in communication between the routing engine RE and the packet forwarding engine PFE...

The vulnerability of the JunOS operating system allows a hacker to execute arbitrary code and cause service interruptions.

The vulnerability of the JunOS operating system arises from an uninitialized function pointer in the Packet Forwarding Engine manager fxpc. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and trigger a service failure using a specially crafted HTTP packet...

CVE-2019-0009

On EX2300 and EX3400 series, high disk I/O operations may disrupt the communication between the routing engine RE and the packet forwarding engine PFE. In a virtual chassis VC deployment, this issue disrupts communication between the VC members. This issue does not affect other Junos platforms...

CVE-2019-0006

A certain crafted HTTP packet can trigger an uninitialized function pointer deference vulnerability in the Packet Forwarding Engine manager fxpc on all EX, QFX and MX Series devices in a Virtual Chassis configuration. This issue can result in a crash of the fxpc daemon or may potentially lead to...

CVE-2019-0009

Technical details about CVE-2019-0009 are not publicly available in the provided Connected documents. Monitor for updates from the sources referenced (e.g., Juniper JSA/JPD, CVE feeds) for new information or fixes.

CVE-2019-0006

Summary of CVE-2019-0006 (Juniper Junos FXPC): A crafted HTTP packet can trigger an uninitialized function pointer dereference in the Packet Forwarding Engine manager (FXPC) on EX, QFX and MX Series devices in a Virtual Chassis. This can crash the fxpc daemon or potentially allow remote code exec...

CVE-2019-0005: Allocation of Resources Without Limits or Throttling

On EX2300, EX3400, EX4600, QFX3K and QFX5K series, firewall filter configuration cannot perform packet matching on any IPv6 extension headers. This issue may allow IPv6 packets that should have been blocked to be forwarded. IPv4 packet filtering is unaffected by this vulnerability. Affected...

CVE-2019-0006: Use of Uninitialized Resource

A certain crafted HTTP packet can trigger an uninitialized function pointer deference vulnerability in the Packet Forwarding Engine manager fxpc on all EX, QFX and MX Series devices in a Virtual Chassis configuration. This issue can result in a crash of the fxpc daemon or may potentially lead to...