CVE-2020-1603 Junos OS: Improper handling of specific IPv6 packets sent by clients eventually kernel crash (vmcore) the device.

Specific IPv6 packets sent by clients processed by the Routing Engine RE are improperly handled. These IPv6 packets are designed to be blocked by the RE from egressing the RE. Instead, the RE allows these specific IPv6 packets to egress the RE, at which point a mbuf memory leak occurs within the...

CVE-2020-1604: Improper Access Control

On EX4300, EX4600, QFX3500, and QFX5100 Series, a vulnerability in the IP firewall filter component may cause the firewall filter evaluation of certain packets to fail. This issue only affects firewall filter evaluation of certain packets destined to the device Routing Engine RE. This issue does...

CVE-2020-1603: Improper Adherence to Coding Standards

Specific IPv6 packets sent by clients processed by the Routing Engine RE are improperly handled. These IPv6 packets are designed to be blocked by the RE from egressing the RE. Instead, the RE allows these specific IPv6 packets to egress the RE, at which point a mbuf memory leak occurs within the...

PT-2020-1614

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 16.1R7-S6 Juniper Networks Junos OS 16.1 version 16.1X70-D10 and later Juniper Networks Junos OS 16.2 versions prior to 16.2R2-S11 Juniper Networks Junos OS 17.1 versions prior to 17.1R2-S11, 17.1R3-...

Juniper JSA10975

According to the self reported version of Junos OS on the remote device it is affected by a path traversal vulnerability with the Next-Generation Routing Engine. A local authenticated attacker can exploit this, to read sensitive file systems. Note that Nessus has not tested for this issue but has...

Junos OS Routing Engine DoS

The vulnerability of the Routing Engine component of the Junos OS operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted IPv6 packets...

CVE-2019-0074

A path traversal vulnerability in NFX150 Series and QFX10K Series, EX9200 Series, MX Series and PTX Series devices with Next-Generation Routing Engine NG-RE allows a local authenticated user to read sensitive system files. This issue only affects NFX150 Series and QFX10K Series, EX9200 Series, MX...

CVE-2019-0074

A path traversal vulnerability in NFX150 Series and QFX10K Series, EX9200 Series, MX Series and PTX Series devices with Next-Generation Routing Engine NG-RE allows a local authenticated user to read sensitive system files. This issue only affects NFX150 Series and QFX10K Series, EX9200 Series, MX...

Path traversal

A path traversal vulnerability in NFX150 Series and QFX10K Series, EX9200 Series, MX Series and PTX Series devices with Next-Generation Routing Engine NG-RE allows a local authenticated user to read sensitive system files. This issue only affects NFX150 Series and QFX10K Series, EX9200 Series, MX...

PT-2019-3490

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 16.1R6-S2 Junos OS versions prior to 16.1R7 Junos OS versions prior to 16.2R2-S10 Junos OS versions prior to 17.1R3 Description The issue exists due to insufficient input validation in the Routing Engine component of...

CVE-2019-0074: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability in NFX150 Series and QFX10K Series, EX9200 Series, MX Series and PTX Series devices with Next-Generation Routing Engine NG-RE allows a local authenticated user to read sensitive system files. This issue only affects NFX150 Series and QFX10K Series, EX9200 Series, MX...

JunOS DoS

The vulnerability of the JunOS operating system is related to errors in input/output operations. Exploiting this vulnerability can allow an attacker to cause a service failure due to a disruption in communication between the routing engine RE and the packet forwarding engine PFE...

CVE-2019-0009

On EX2300 and EX3400 series, high disk I/O operations may disrupt the communication between the routing engine RE and the packet forwarding engine PFE. In a virtual chassis VC deployment, this issue disrupts communication between the VC members. This issue does not affect other Junos platforms...

CVE-2019-0009

Technical details about CVE-2019-0009 are not publicly available in the provided Connected documents. Monitor for updates from the sources referenced (e.g., Juniper JSA/JPD, CVE feeds) for new information or fixes.

CVE-2017-2312

On Juniper Networks devices running Junos OS affected versions and with LDP enabled, a specific LDP packet destined to the RE Routing Engine will consume a small amount of the memory allocated for the rpd routing protocol daemon process. Over time, repeatedly receiving this type of LDP packets wi...

Juniper Junos Crafted UDP Packet Handling DoS (JSA10758)

According to its self-reported version number and architecture, the remote Juniper Junos device is affected by a denial of service vulnerability in the 64-bit routing engine. An unauthenticated, remote attacker can exploit this, via a specially crafted UDP packet sent to an interface IP address, ...

Juniper Junos IPv6 Neighbor Discovery (ND) Traffic Handling Multiple Vulnerabilities (JSA10749)

According to its self-reported version number, the remote Juniper Junos device is affected by multiple vulnerabilities : - A flaw exists due to improper handling of malformed IPv6 ND packets. An unauthenticated, remote attacker can exploit this, via specially crafted ND packets, to cause the devi...

Juniper Networks Junos OS Routing Engine Denial of Service Vulnerability

Juniper Networks Junos on SRX Series devices is a set of network operating systems that run in SRX Series service gateway devices.Routing Engine is one of the routing engine components. The Routing Engine for Juniper Networks Junos OS crashes the RPD routing process when a remote attacker submits...

Juniper Networks Junos OS LDP DoS Vulnerability

Junos OS is prone to a Denial of Service vulnerability with LDP enabled. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-1257

The Routing Engine in Juniper Junos OS 13.2R5 through 13.2R8, 13.3R1 before 13.3R8, 13.3R7 before 13.3R7-S3, 14.1R1 before 14.1R6, 14.1R3 before 14.1R3-S9, 14.1R4 before 14.1R4-S7, 14.1X51 before 14.1X51-D65, 14.1X53 before 14.1X53-D12, 14.1X53 before 14.1X53-D28, 14.1X53 before 4.1X53-D35, 14.2R...