CVE-2025-21600 Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash

An Out-of-Bounds Read vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, logically adjacent BGP peer sending a specifically malformed BGP packet to cause rpd to crash and restart, resulting in a Denial of Service DoS...

CVE-2025-21602 Junos OS and Junos OS Evolved: Receipt of specially crafted BGP update packet causes RPD crash

An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker sending a specific BGP update packet to cause rpd to crash and restart, resulting in a Denial of Service Do...

CVE-2025-21596 Junos OS: SRX1500,SRX4100,SRX4200: Execution of low-privileged CLI command results in chassisd crash

An Improper Handling of Exceptional Conditions vulnerability in the command-line processing of Juniper Networks Junos OS on SRX1500, SRX4100, and SRX4200 devices allows a local, low-privileged authenticated attacker executing the 'show chassis environment pem' command to cause the chassis daemon...

CVE-2025-21596

CVE-2025-21596 concerns Junos OS on SRX1500, SRX4100 and SRX4200. The issue stems from improper handling of exceptional conditions in the CLI when executing the local, low-privilege attacker’s command “show chassis environment pem,” which crashes the chassis daemon (chassisd) and restarts it, cre...

CVE-2025-21593 Junos OS and Junos OS Evolved: On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to crash

An Improper Control of a Resource Through its Lifetime vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial-of-Service DoS. On devices with SRv6 Segment Routing over IPv6 enabled, an...

CVE-2025-21593 Junos OS and Junos OS Evolved: On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to crash

An Improper Control of a Resource Through its Lifetime vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial-of-Service DoS. On devices with SRv6 Segment Routing over IPv6 enabled, an...

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved buffer error vulnerabilities

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a suite of network operating systems dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK...

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved buffer error vulnerabilities

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a suite of network operating systems dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK...

UBUNTU-CVE-2024-12084

A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths s2length in the code. When MAXDIGESTLEN exceeds the fixed SUMLENGTH 16 bytes, an attacker can write out of bounds in the sum2 buffer...

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved security vulnerabilities

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper...

Juniper Networks Junos OS security vulnerabilities

Juniper Networks Junos OS is a Juniper Networks USA network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS that originates from improper...

AZL-55349 CVE-2024-56779 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfs4openowner leak when concurrent nfsd4open occur The action force umountumount -f will attempt to kill all rpctask even umount operation may ultimately fail if some files remain open. Consequently, if an action attemp...

Juniper Junos OS Vulnerability (JSA92872)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA92872 advisory. - An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated...

PT-2025-1071

Name of the Vulnerable Software and Affected Versions Junos OS versions 21.4 through 24.2R1-S2, 24.2R2 Junos OS Evolved versions 21.4-EVO through 24.2-EVO Description The issue is related to an Out-of-Bounds Read vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and...

PT-2025-1067

Name of the Vulnerable Software and Affected Versions Junos OS versions 21.4 through 21.4R3-S9 Junos OS versions 22.2 through 22.2R3-S5 Junos OS versions 22.3 through 22.3R3-S4 Junos OS versions 22.4 through 22.4R3-S5 Junos OS versions 23.2 through 23.2R2-S3 Junos OS versions 23.4 through 23.4R2-...

PT-2025-1072

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 21.2R3-S9 Junos OS versions from 21.4 before 21.4R3-S10 Junos OS versions from 22.2 before 22.2R3-S5 Junos OS versions from 22.3 before 22.3R3-S4 Junos OS versions from 22.4 before 22.4R3-S3 Junos OS versions from 23...

PT-2025-1009 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Junos OS versions 21.2R3-S8 through 21.2R3-S9 Junos OS versions 21.4R3-S7 through 21.4R3-S9 Junos OS versions 22.2R3-S4 through 22.2R3-S5 Junos OS versions 22.3R3-S2 through 22.3R3-S4 Junos OS versions 22.4R3 through 22.4R3-S5 Junos OS versio...

libreswan: Malicious IKEv1 Aggressive Mode packets can crash libreswan

A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1 Aggressive Mode packet is received with only unacceptable crypto algorithms, and the response packet is not sent with a zero responder SPI. When a subsequent packet is received where the sender reuses the...

libreswan: Invalid IKEv2 REKEY proposal causes restart

An assertion failure flaw was found in the Libreswan package that occurs when processing IKEv2 REKEY requests. When an IKEv2 Child SA REKEY packet contains an invalid IPsec protocol ID number of 0 or 1, an error notification INVALIDSPI is sent back. The notify payload's protocol ID is copied from...

libreswan: Invalid IKEv1 repeat IKE SA delete causes crash and restart

A NULL pointer dereference vulnerability was found in the Libreswan package. When an IKEv1 ISAKMP SA Informational Exchange packet contains a Delete/Notify payload followed by further Notifies that act on the ISAKMP SA, such as a duplicated Delete/Notify message, a NULL pointer dereference on the...