EUVD-2014-6265

Malware in sbrugna...

Junos OS Proxy ARP DoS

The vulnerability of the Junos OS operating system’s proxy-ARP service is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

CVE-2019-0033

A firewall bypass vulnerability in the proxy ARP service of Juniper Networks Junos OS allows an attacker to cause a high CPU condition leading to a Denial of Service DoS. This issue affects only IPv4. Affected releases are Juniper Networks Junos OS: 12.1X46 versions above and including 12.1X46-D2...

Design/Logic Flaw

A firewall bypass vulnerability in the proxy ARP service of Juniper Networks Junos OS allows an attacker to cause a high CPU condition leading to a Denial of Service DoS. This issue affects only IPv4. Affected releases are Juniper Networks Junos OS: 12.1X46 versions above and including 12.1X46-D2...

CVE-2019-0033

A firewall bypass vulnerability in the proxy ARP service of Juniper Networks Junos OS allows an attacker to cause a high CPU condition leading to a Denial of Service DoS. This issue affects only IPv4. Affected releases are Juniper Networks Junos OS: 12.1X46 versions above and including 12.1X46-D2...

CVE-2019-0033

CVE-2019-0033: A firewall bypass vulnerability in the proxy ARP service of Juniper Networks Junos OS can cause a high CPU condition leading to a Denial of Service (DoS). Affected products: Junos OS releases across multiple lines (e.g., 12.1X46 family with builds D25–D71, 12.1X46-D73 on SRX Series...

PT-2019-1972

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 12.1X46-D25 through 12.1X46-D70 Juniper Networks Junos OS version 12.1X46-D73 Juniper Networks Junos OS versions 12.3X48 prior to 12.3X48-D50 Juniper Networks Junos OS versions 15.1X49 prior to 15.1X49-D75...

CVE-2019-0033: Uncontrolled Resource Consumption

A firewall bypass vulnerability in the proxy ARP service of Juniper Networks Junos OS allows an attacker to cause a high CPU condition leading to a Denial of Service DoS. This issue affects only IPv4. Affected releases are Juniper Networks Junos OS: 12.1X46 versions above and including 12.1X46-D2...

CVE-2014-6381

Juniper WLC devices with WLAN Software releases 8.0.x before 8.0.4, 9.0.x before 9.0.2.11, 9.0.3.x before 9.0.3.5, and 9.1.x before 9.1.1, when "Proxy ARP" or "No Broadcast" features are enabled in a clustered setup, allows remote attackers to cause a denial of service device disconnect via...

Design/Logic Flaw

Juniper WLC devices with WLAN Software releases 8.0.x before 8.0.4, 9.0.x before 9.0.2.11, 9.0.3.x before 9.0.3.5, and 9.1.x before 9.1.1, when "Proxy ARP" or "No Broadcast" features are enabled in a clustered setup, allows remote attackers to cause a denial of service device disconnect via...

CVE-2014-6381: Improper Input Validation

Juniper WLC devices with WLAN Software releases 8.0.x before 8.0.4, 9.0.x before 9.0.2.11, 9.0.3.x before 9.0.3.5, and 9.1.x before 9.1.1, when "Proxy ARP" or "No Broadcast" features are enabled in a clustered setup, allows remote attackers to cause a denial of service device disconnect via...

PT-2014-7202

Name of the Vulnerable Software and Affected Versions Juniper WLC devices with WLAN Software versions 8.0.x through 8.0.3 Juniper WLC devices with WLAN Software versions 9.0.x through 9.0.2.10 Juniper WLC devices with WLAN Software versions 9.0.3.x through 9.0.3.4 Juniper WLC devices with WLAN...

Juniper Networks Junos OS Security Issue with Proxy ARP Enabled

New builds of Junos OS software are available from Juniper. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if...

CVE-2013-6014

Juniper Junos 10.4 before 10.4S15, 11.4 before 11.4R9, 11.4X27 before 11.4X27.44, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.2 before 12.2R6, 12.3 before 12.3R3, 13.1 before 13.1R3, and 13.2 before 13.2R1, when Proxy ARP is enabled on an unnumbered interface,...

Authentication flaw

Juniper Junos 10.4 before 10.4S15, 11.4 before 11.4R9, 11.4X27 before 11.4X27.44, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.2 before 12.2R6, 12.3 before 12.3R3, 13.1 before 13.1R3, and 13.2 before 13.2R1, when Proxy ARP is enabled on an unnumbered interface,...

CVE-2013-6014

CVE-2013-6014 describes a vulnerability in Juniper Junos where, if Proxy ARP is enabled on an unnumbered interface, remote attackers can perform ARP poisoning to obtain sensitive information, with potential for information disclosure and DoS. Affected Junos versions include 10.4 before 10.4S15, 1...

CVE-2013-6014

Juniper Junos 10.4 before 10.4S15, 11.4 before 11.4R9, 11.4X27 before 11.4X27.44, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.2 before 12.2R6, 12.3 before 12.3R3, 13.1 before 13.1R3, and 13.2 before 13.2R1, when Proxy ARP is enabled on an unnumbered interface,...

PT-2013-5922

Name of the Vulnerable Software and Affected Versions Juniper Junos versions 10.4 before 10.4S15 Juniper Junos versions 11.4 before 11.4R9 Juniper Junos versions 11.4X27 before 11.4X27.44 Juniper Junos versions 12.1 before 12.1R7 Juniper Junos versions 12.1X44 before 12.1X44-D20 Juniper Junos...

CVE-2013-6014: Exposure of Sensitive Information to an Unauthorized Actor

Juniper Junos 10.4 before 10.4S15, 11.4 before 11.4R9, 11.4X27 before 11.4X27.44, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.2 before 12.2R6, 12.3 before 12.3R3, 13.1 before 13.1R3, and 13.2 before 13.2R1, when Proxy ARP is enabled on an unnumbered interface,...

Juniper Junos Unnumbered Interface Cache Poisoning Remote DoS and Information Disclosure (JSA10595)

According to its self-reported version number, the remote Juniper Junos device is affected by denial of service and information disclosure vulnerabilities. An adjacent attacker can poison the ARP cache and create a bogus forwarding table entry for an IP address, effectively creating a denial of...