CVE-2023-22402

A Use After Free vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. In a Non Stop Routing NSR scenario, an unexpected kernel restart might be observed if "bgp auto-discovery" is enabled and if there ...

CVE-2023-22402

A Use After Free vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. In a Non Stop Routing NSR scenario, an unexpected kernel restart might be observed if "bgp auto-discovery" is enabled and if there ...

CVE-2023-22398

An Access of Uninitialized Pointer vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service DoS. When an MPLS ping is performed on BGP LSPs, the RPD might crash...

CVE-2023-22393

An Improper Check for Unusual or Exceptional Conditions vulnerability in BGP route processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause Routing Protocol Daemon RPD crash by sending a BGP route with invalid next-hop resulting in a Denial of Service DoS. Continue...

CVE-2023-22391

A vulnerability in class-of-service CoS queue management in Juniper Networks Junos OS on the ACX2K Series devices allows an unauthenticated network-based attacker to cause a Denial of Service DoS. Specific packets are being incorrectly routed to a queue used for other high-priority traffic such a...

Design/Logic Flaw

An Improper Check for Unusual or Exceptional Conditions vulnerability in BGP route processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause Routing Protocol Daemon RPD crash by sending a BGP route with invalid next-hop resulting in a Denial of Service DoS. Continue...

Null pointer dereference

An Access of Uninitialized Pointer vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service DoS. When an MPLS ping is performed on BGP LSPs, the RPD might crash...

Race condition

A Use After Free vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. In a Non Stop Routing NSR scenario, an unexpected kernel restart might be observed if "bgp auto-discovery" is enabled and if there ...

Design/Logic Flaw

A vulnerability in class-of-service CoS queue management in Juniper Networks Junos OS on the ACX2K Series devices allows an unauthenticated network-based attacker to cause a Denial of Service DoS. Specific packets are being incorrectly routed to a queue used for other high-priority traffic such a...

CVE-2023-22402 Junos OS Evolved: The kernel might restart in a BGP scenario where "bgp auto-discovery" is enabled and such a neighbor flaps

A Use After Free vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. In a Non Stop Routing NSR scenario, an unexpected kernel restart might be observed if "bgp auto-discovery" is enabled and if there ...

CVE-2023-22393 Junos OS and Junos OS Evolved: RPD crash upon receipt of BGP route with invalid next-hop

An Improper Check for Unusual or Exceptional Conditions vulnerability in BGP route processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause Routing Protocol Daemon RPD crash by sending a BGP route with invalid next-hop resulting in a Denial of Service DoS. Continue...

CVE-2023-22398 Junos OS and Junos OS Evolved: RPD might crash when MPLS ping is performed on BGP LSPs

An Access of Uninitialized Pointer vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service DoS. When an MPLS ping is performed on BGP LSPs, the RPD might crash...

CVE-2023-22398

CVE-2023-22398 affects Juniper Networks Junos OS and Junos OS Evolved: an Access of Uninitialized Pointer in the Routing Protocol Daemon (rpd). When an MPLS ping is performed on BGP LSPs, RPD may crash, leading to a DoS with repeated executions. Affected versions include: Junos OS 15.1 (prior to ...

CVE-2023-22402 Junos OS Evolved: The kernel might restart in a BGP scenario where "bgp auto-discovery" is enabled and such a neighbor flaps

A Use After Free vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. In a Non Stop Routing NSR scenario, an unexpected kernel restart might be observed if "bgp auto-discovery" is enabled and if there ...

CVE-2023-22393

CVE-2023-22393 affects Juniper Networks Junos OS and Junos OS Evolved. The issue is an improper check during BGP route processing that allows an attacker to trigger a crash of the Routing Protocol Daemon (RPD) by sending a BGP route with an invalid next-hop, causing a Denial of Service (DoS). The...

CVE-2023-22393 Junos OS and Junos OS Evolved: RPD crash upon receipt of BGP route with invalid next-hop

An Improper Check for Unusual or Exceptional Conditions vulnerability in BGP route processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause Routing Protocol Daemon RPD crash by sending a BGP route with invalid next-hop resulting in a Denial of Service DoS. Continue...

PT-2023-3054 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 21.1 through 21.1R3-S4 Juniper Networks Junos OS versions 21.2 through 21.2R3-S3 Juniper Networks Junos OS versions 21.3 through 21.3R3-S2 Juniper Networks Junos OS versions 21.4 through 21.4R2-S2, 21.4R3...

Hughes Satellite Router Remote File Inclusion Cross Frame Scripting Vulnerability

Hughes Satellite Router contains a cross-frame scripting via remote file inclusion vulnerability that may potentially be exploited by malicious users to compromise an affected system. This vulnerability may allow an unauthenticated malicious user to misuse frames, include JS/HTML code and steal...

CVE-2022-22184 Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute in version 22.3R1

An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial of Service DoS. If a BGP update message is received over an established BGP session, and that message...

CVE-2022-22184 Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute in version 22.3R1

An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial of Service DoS. If a BGP update message is received over an established BGP session, and that message...