1350 matches found
CVE-2019-0036
When configuring a stateless firewall filter in Junos OS, terms named using the format "internal-n" e.g. "internal-1", "internal-2", etc. are silently ignored. No warning is issued during configuration, and the config is committed without error, but the filter criteria will match all packets...
CVE-2019-0028
On Junos devices with the BGP graceful restart helper mode enabled or the BGP graceful restart mechanism enabled, a BGP session restart on a remote peer that has the graceful restart mechanism enabled may cause the local routing protocol daemon RPD process to crash and restart. By simulating a...
CVE-2019-0031
Specific IPv6 DHCP packets received by the jdhcpd daemon will cause a memory resource consumption issue to occur on a Junos OS device using the jdhcpd daemon configured to respond to IPv6 requests. Once started, memory consumption will eventually impact any IPv4 or IPv6 request serviced by the...
CVE-2019-0035
When "set system ports console insecure" is enabled, root login is disallowed for Junos OS as expected. However, the root password can be changed using "set system root-authentication plain-text-password" on systems booted from an OAM Operations, Administration, and Maintenance volume, leading to...
PT-2019-2085 · Juniper Networks · Junos
Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 14.1X53-D49 Junos OS versions prior to 15.1F6-S12 Junos OS versions prior to 15.1R7-S3 Junos OS versions prior to 15.1X49-D160 Junos OS versions prior to 15.1X53-D236 Junos OS versions prior to 15.1X53-D495 Junos OS...
The vulnerability of the Junos operating system, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.
The vulnerability of the Junos operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Routing Protocols Daemon (RPD) implementation in the JunOS operating system allows a hacker to induce a service failure.
The vulnerability of the Routing Protocols Daemon RPD implementation in the JunOS operating system is related to errors in packet processing for the PIM Join protocol. Exploiting this vulnerability can allow an attacker to trigger a device reboot and a service failure...
The vulnerability of the Junos operating system, related to incorrect data processing, allows a perpetrator to trigger a service failure.
The vulnerability of the Junos operating system is related to incorrect data processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures due to a failure in the routing daemon process rpd...
The vulnerability of the Junos operating system, related to insufficient input data validation, allows attackers to trigger a service failure.
The vulnerability of the Junos operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions due to a failure in the routing daemon process rpd...
The vulnerability of the Junos operating system, related to insufficient input data validation, allows attackers to trigger a service failure.
The vulnerability of the Junos operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions due to an uncontrolled recursive cycle in the Broadband Edge Bbe-Smgd subscriber...
The vulnerability of the Junos operating system, related to insufficient input data validation, allows attackers to trigger a service failure.
The vulnerability of the Junos operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by using specially crafted HTTP traffic...
The vulnerability of the Junos operating system, related to insufficient input data validation, allows attackers to trigger a service failure.
The vulnerability of the Junos operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by triggering a process failure of FPC...
CVE-2019-0007
The vMX Series software uses a predictable IP ID Sequence Number. This leaves the system as well as clients connecting through the device susceptible to a family of attacks which rely on the use of predictable IP ID sequence numbers as their base method of attack. This issue was found during...
CVE-2019-0012
A Denial of Service DoS vulnerability in BGP in Juniper Networks Junos OS configured as a VPLS PE allows an attacker to craft a specific BGP message to cause the routing protocol daemon rpd process to crash and restart. While rpd restarts after a crash, repeated crashes can result in an extended...
CVE-2019-0014
On QFX and PTX Series, receipt of a malformed packet for J-Flow sampling might crash the FPC Flexible PIC Concentrator process which causes all interfaces to go down. By continuously sending the offending packet, an attacker can repeatedly crash the FPC process causing a sustained Denial of Servi...
CVE-2019-0006
A certain crafted HTTP packet can trigger an uninitialized function pointer deference vulnerability in the Packet Forwarding Engine manager fxpc on all EX, QFX and MX Series devices in a Virtual Chassis configuration. This issue can result in a crash of the fxpc daemon or may potentially lead to...
CVE-2019-0009
On EX2300 and EX3400 series, high disk I/O operations may disrupt the communication between the routing engine RE and the packet forwarding engine PFE. In a virtual chassis VC deployment, this issue disrupts communication between the VC members. This issue does not affect other Junos platforms...
CVE-2019-0015
A vulnerability in the SRX Series Service Gateway allows deleted dynamic VPN users to establish dynamic VPN connections until the device is rebooted. A deleted dynamic VPN connection should be immediately disallowed from establishing new VPN connections. Due to an error in token caching, deleted...
The vulnerability of Junos Operating System’s Routing Protocol Daemon (RPD) allows a hacker to execute arbitrary code.
The vulnerability of the Junos operating system’s Routing Protocol Daemon RPD arises from errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending multiple specially crafted MPLS packets within a short period of time...
The vulnerability of the SIP Application-level Gateway (ALG) component of the JunOS operating system, which allows a attacker to trigger a service failure.
The vulnerability of the SIP Application-level Gateway ALG component of the JunOS operating system is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...