CVE-2021-0273

The CVE-2021-0273 issue affects Juniper Networks Junos OS and Junos OS Evolved on ACX5800, EX9200, MX10000, MX240, MX480, MX960 with Trio line cards. The root cause is an always-incorrect control flow in the implicit LT filter terms of the PFE UCODE, causing an infinite loop when processing certa...

CVE-2021-0264 Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11, PTX10003, PTX10008: Line card may crash and restart when traffic is hitting a firewall filter having a term with syslog action configured

A vulnerability in the processing of traffic matching a firewall filter containing a syslog action in Juniper Networks Junos OS on MX Series with MPC10/MPC11 cards installed, PTX10003 and PTX10008 Series devices, will cause the line card to crash and restart, creating a Denial of Service DoS...

CVE-2021-0259 Junos OS and Junos OS Evolved: QFX5K Series: Underlay network traffic might not be processed upon receipt of high rate of specific genuine overlay packets in VXLAN scenario

Due to a vulnerability in DDoS protection in Juniper Networks Junos OS and Junos OS Evolved on QFX5K Series switches in a VXLAN configuration, instability might be experienced in the underlay network as a consequence of exceeding the default ddos-protection aggregate threshold. If an attacker on ...

CVE-2021-0250 Junos OS and Junos OS Evolved: An attacker sending a specific crafted BGP update message will crash RPD

In segment routing traffic engineering SRTE environments where the BGP Monitoring Protocol BMP feature is enable, a vulnerability in the Routing Protocol Daemon RPD process of Juniper Networks Junos OS allows an attacker to send a specific crafted BGP update message causing the RPD service to cor...

CVE-2021-0239 Junos OS Evolved: Denial of Service due to receipt of specific genuine layer 2 frames.

In Juniper Networks Junos OS Evolved, receipt of a stream of specific genuine Layer 2 frames may cause the Advanced Forwarding Toolkit AFT manager process Evo-aftmand, responsible for handling Route, Class-of-Service CoS, Firewall operations within the packet forwarding engine PFE to crash and...

CVE-2021-0239

In Juniper Networks Junos OS Evolved, a vulnerability (CVE-2021-0239) exists where a continuous stream of specific genuine Layer 2 frames can cause the AFT manager process (Evo-aftmand) to crash and restart the packet forwarding engine (PFE), resulting in a Denial of Service. Affected: Junos OS E...

CVE-2021-0226

CVE-2021-0226 affects Juniper Networks Junos OS Evolved IPv6 BGP sessions. A crafted IPv6 packet can terminate an established IPv6 BGP session, causing a DoS that can persist with continued traffic. Impact is limited to IPv6 IBGP/EBGP peers; IPv4 BGP is not affected. Affected releases on Junos OS...

CVE-2021-0225

CVE-2021-0225 concerns Juniper Networks Junos OS Evolved where an improper check for unusual or exceptional conditions can cause the stateless firewall filter configuration using the policer action to fail to take effect when combined with other options. Affected versions are 19.1R1-EVO and above...

CVE-2021-0239: Improper Check for Unusual or Exceptional Conditions

In Juniper Networks Junos OS Evolved, receipt of a stream of specific genuine Layer 2 frames may cause the Advanced Forwarding Toolkit AFT manager process Evo-aftmand, responsible for handling Route, Class-of-Service CoS, Firewall operations within the packet forwarding engine PFE to crash and...

CVE-2021-0273: Loop with Unreachable Exit Condition

An always-incorrect control flow implementation in the implicit filter terms of Juniper Networks Junos OS and Junos OS Evolved on ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960 devices with affected Trio line cards allows an attacker to exploit an interdependency in the PFE UCODE...

PT-2021-12939

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions 19.1R1-EVO through 20.3R1-S1-EVO Juniper Networks Junos OS Evolved version 20.3R2-EVO Description: The issue is caused by an improper check for unusual or exceptional conditions, which may prevent th...

PT-2021-12940

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions 19.4 through 19.4R2-S3-EVO Juniper Networks Junos OS Evolved versions 20.1 through 20.1R2-S3-EVO Juniper Networks Junos OS Evolved versions 20.2 through 20.2R2-S1-EVO Juniper Networks Junos OS Evolve...

PT-2021-12950

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 20.4R1-EVO Description: The issue is caused by the receipt of a specific stream of genuine Layer 2 frames, which may crash the Advanced Forwarding Toolkit AFT manager process, leading to a...

PT-2021-12968

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on QFX5K Series versions 17.3 through 17.3R3-S11 Juniper Networks Junos OS on QFX5K Series versions 17.4 through 17.4R3-S5 Juniper Networks Junos OS on QFX5K Series versions 18.1 through 18.1R3-S13 Juniper Networks...

CVE-2021-0225: Improper Check for Unusual or Exceptional Conditions

An Improper Check for Unusual or Exceptional Conditions in Juniper Networks Junos OS Evolved may cause the stateless firewall filter configuration which uses the action 'policer' in certain combinations with other options to not take effect. An administrator can use the following CLI command to s...

CVE-2021-0236: Improper Check for Unusual or Exceptional Conditions

Due to an improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved the Routing Protocol Daemon RPD service, upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, crashes and restarts causing a Denial of...

CVE-2021-0226: Improper Initialization

On Juniper Networks Junos OS Evolved devices, receipt of a specific IPv6 packet may cause an established IPv6 BGP session to terminate, creating a Denial of Service DoS condition. Continued receipt and processing of this packet will create a sustained Denial of Service DoS condition. This issue...

Juniper Networks Junos OS and Junos OS Evolved Input Validation Error Vulnerability

Juniper Networks Junos OS and Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system for the company's hardware devices. Juniper Networks Junos OS is a network operating system for the company's hardware devices that provides a secure...

CVE-2021-0236

Due to an improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved the Routing Protocol Daemon RPD service, upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, crashes and restarts causing a Denial of...

CVE-2021-0225

An Improper Check for Unusual or Exceptional Conditions in Juniper Networks Junos OS Evolved may cause the stateless firewall filter configuration which uses the action 'policer' in certain combinations with other options to not take effect. An administrator can use the following CLI command to s...