EvoSharedObjStore Unauthorized Access

The vulnerability of the EvoSharedObjStore component in the JunOS Evolved operating system is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

ev.ops configuration file JunOS Evolved Unauthorized Access

The vulnerability of the ev.ops configuration file in the JunOS Evolved operating system is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

JunOS Evolved configd Trace Handler Unauthorized Access

The vulnerability of the configd Trace Handler component in the JunOS Evolved operating system is related to insufficient protection for registration data. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information...

JunOS Evolved Configuration File Unauthorized Access

The vulnerability of the JunOS Evolved operating system’s configuration file objmon is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

pfemand DoS

The vulnerability of the pfemand process in the JunOS Evolved operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions...

FPC Module DoS

The vulnerability of the FPC module in JunOS and JunOS Evolved operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2020-1648

On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific BGP packet can lead to a routing process daemon RPD crash and restart. This issue can occur even before the BGP session with the peer is established. Repeated receipt of this specific BGP packet can result in an...

CVE-2020-1644

On Juniper Networks Junos OS and Junos OS Evolved devices, the receipt of a specific BGP UPDATE packet causes an internal counter to be incremented incorrectly, which over time can lead to the routing protocols process RPD crash and restart. This issue affects both IBGP and EBGP multihop deployme...

Code injection

On Juniper Networks Junos OS and Junos OS Evolved devices, the receipt of a specific BGP UPDATE packet causes an internal counter to be incremented incorrectly, which over time can lead to the routing protocols process RPD crash and restart. This issue affects both IBGP and EBGP multihop deployme...

Design/Logic Flaw

On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific BGP packet can lead to a routing process daemon RPD crash and restart. This issue can occur even before the BGP session with the peer is established. Repeated receipt of this specific BGP packet can result in an...

Design/Logic Flaw

On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific UPDATE for an EBGP peer can lead to a routing process daemon RPD crash and restart. This issue occurs only when the device is receiving and processing the BGP UPDATE for an EBGP peer. This issue does not occur when t...

CVE-2020-1648 Junos OS and Junos OS Evolved: RPD crash when processing a specific BGP packet

On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific BGP packet can lead to a routing process daemon RPD crash and restart. This issue can occur even before the BGP session with the peer is established. Repeated receipt of this specific BGP packet can result in an...

CVE-2020-1646

CVE-2020-1646 affects Juniper Networks Junos OS and Junos OS Evolved. The issue arises when processing a specific BGP UPDATE for an EBGP peer, causing the routing process daemon (RPD) to crash and restart. The crash occurs only for EBGP UPDATE processing toward an EBGP peer; an EBGP-originating u...

CVE-2020-1648: Improper Handling of Invalid Use of Special Elements

On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific BGP packet can lead to a routing process daemon RPD crash and restart. This issue can occur even before the BGP session with the peer is established. Repeated receipt of this specific BGP packet can result in an...

CVE-2020-1644: Improper Check or Handling of Exceptional Conditions

On Juniper Networks Junos OS and Junos OS Evolved devices, the receipt of a specific BGP UPDATE packet causes an internal counter to be incremented incorrectly, which over time can lead to the routing protocols process RPD crash and restart. This issue affects both IBGP and EBGP multihop deployme...

PT-2020-5898

Name of the Vulnerable Software and Affected Versions: Junos OS versions 17.2X75 through 17.2X75-D105.18 Junos OS versions 17.3 through 17.3R3-S7 Junos OS versions 17.4 through 17.4R2-S9 Junos OS versions 18.1 through 18.1R3-S9 Junos OS versions 18.2 through 18.2R2-S6 Junos OS versions 18.2X75...

PT-2020-5901

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 18.2X75-D50.8 through 18.2X75-D52.7, 18.2X75-D60 and later versions prior to 18.2X75-D60.2, 18.2X75-D65.1, 18.2X75-D70; versions 19.4R1 and 19.4R1-S1; versions prior to 20.1R1-S2, 20.1R2 Juniper Networks Jun...

CVE-2020-1632

In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evolved devices to advertise an invalid BGP UPDATE message to other peers, causing the other peers to terminate the established BGP session, creating a Denial of Service DoS...

Design/Logic Flaw

In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evolved devices to advertise an invalid BGP UPDATE message to other peers, causing the other peers to terminate the established BGP session, creating a Denial of Service DoS...

CVE-2020-1632: Improper Handling of Exceptional Conditions

In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evolved devices to advertise an invalid BGP UPDATE message to other peers, causing the other peers to terminate the established BGP session, creating a Denial of Service DoS...