CVE-2020-1651: Missing Release of Memory after Effective Lifetime

On Juniper Networks MX series, receipt of a stream of specific Layer 2 frames may cause a memory leak resulting in the packet forwarding engine PFE on the line card to crash and restart, causing traffic interruption. By continuously sending this stream of specific layer 2 frame, an attacker...

Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2020-49039)

Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. A denial-of-service vulnerability exists in Juniper Networks Junos OS's handling of fractional reorganization, which can be exploited by an attacker to cause the Packet Forwarding Engine P...

Juniper Networks Junos OS Code Issue Vulnerability (CNVD-2020-51515)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A code issue vulnerability exists in Juniper Networks Junos OS MX Series. An attacker could exploit this vulnerability to...

Juniper Networks Junos OS Resource Management Error Vulnerability (CNVD-2020-50489)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in the Juniper Networks Junos OS MX Series. An attacker could exploit the vulnerability by...

PT-2020-5895

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 17.2R3-S4 Junos OS versions prior to 17.3R3-S8 Junos OS versions prior to 17.4R2-S10 Junos OS versions prior to 17.4R3-S2 Junos OS versions prior to 18.1R3-S10 Junos OS versions prior to 18.2R3-S3 Junos OS versions...

PT-2020-5897

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 17.2R3-S4 on MX Series Juniper Networks Junos OS versions prior to 17.3R3-S8 on MX Series Juniper Networks Junos OS versions prior to 17.4R2-S9, 17.4R3-S1 on MX Series Juniper Networks Junos OS...

Juniper JSA10930

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a stack based overflow vulnerability in the Junos OS Packet Forwarding Engine manager FXPC process on QFX5000 series. A remote attacker can exploit it which can lead to a remote co...

PT-2019-1967

Name of the Vulnerable Software and Affected Versions Junos OS versions 14.1X53; 15.1X53 prior to 15.1X53-D235; 17.1 prior to 17.1R3; 17.2 prior to 17.2R3; 17.3 prior to 17.3R3-S2, 17.3R4; 17.4 prior to 17.4R2-S1, 17.4R3; 18.1 prior to 18.1R3-S1, 18.1R4; 18.2 prior to 18.2R2; 18.2X75 prior to...

JunOS Code Execution

The vulnerability of the JunOS operating system arises from an uninitialized function pointer in the Packet Forwarding Engine manager fxpc. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and trigger a service failure using a specially crafted HTTP packet...

CVE-2019-0006

A certain crafted HTTP packet can trigger an uninitialized function pointer deference vulnerability in the Packet Forwarding Engine manager fxpc on all EX, QFX and MX Series devices in a Virtual Chassis configuration. This issue can result in a crash of the fxpc daemon or may potentially lead to...

CVE-2019-0009

On EX2300 and EX3400 series, high disk I/O operations may disrupt the communication between the routing engine RE and the packet forwarding engine PFE. In a virtual chassis VC deployment, this issue disrupts communication between the VC members. This issue does not affect other Junos platforms...

CVE-2019-0009

Technical details about CVE-2019-0009 are not publicly available in the provided Connected documents. Monitor for updates from the sources referenced (e.g., Juniper JSA/JPD, CVE feeds) for new information or fixes.

CVE-2019-0006

Summary of CVE-2019-0006 (Juniper Junos FXPC): A crafted HTTP packet can trigger an uninitialized function pointer dereference in the Packet Forwarding Engine manager (FXPC) on EX, QFX and MX Series devices in a Virtual Chassis. This can crash the fxpc daemon or potentially allow remote code exec...

CVE-2019-0006: Use of Uninitialized Resource

A certain crafted HTTP packet can trigger an uninitialized function pointer deference vulnerability in the Packet Forwarding Engine manager fxpc on all EX, QFX and MX Series devices in a Virtual Chassis configuration. This issue can result in a crash of the fxpc daemon or may potentially lead to...

Juniper Junos Packet Forwarding Engine Potential RCE (JSA10906)

According to its self-reported version number, the remote Junos device is affected by a potential remote code execution vulnerability due to how the Packet Forwarding Engine manager FXPC handles HTTP packets. An attacker could potentially crash the fxpc daemon or execute code. C Tenable Network...

Juniper Networks Junos OS Input Validation Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. A vulnerability exists in the IPv6 ND packet processing in Juniper Networks Junos OS versions 15.1 and 16.1 on th...

Juniper Networks PFE Freeze Crash

The vulnerability of Juniper Networks’ Junos operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause the Packet Forwarding Engine to become unresponsive or crash remotely...

PT-2017-1993

Name of the Vulnerable Software and Affected Versions Junos OS versions 15.1R3 through 15.1R4 Junos OS version 16.1 prior to 16.1R3 Description The issue exists due to insufficient input validation in a component of the Juniper Networks Junos operating system. This can be exploited by a remote...

Juniper Junos for M/MX Series Routers IPv6 Neighbor Discovery DoS (JSA10786)

According to its self-reported version and configuration, the remote Juniper Junos M/MX Series device is affected by a denial of service vulnerability in a Packet Forwarding Engine PFE when processing IPv6 neighbor discovery ND packets that originate from subscribers and are destined to M/MX seri...

Juniper Networks Junos OS PFE DoS Vulnerabilities

Junos OS is prone to a denial of service vulnerability while handling IPv6 ND advertisements. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...