CVE-2017-2346

An MS-MPC or MS-MIC Service PIC may crash when large fragmented packets are passed through an Application Layer Gateway ALG. Repeated crashes of the Service PC can result in an extended denial of service condition. The issue can be seen only if NAT or stateful-firewall rules are configured with...

CVE-2017-2343

The Integrated User Firewall UserFW feature was introduced in Junos OS version 12.1X47-D10 on the Juniper SRX Series devices to provide simple integration of user profiles on top of the existing firewall polices. As part of an internal security review of the UserFW services authentication API,...

CVE-2017-2349

A command injection vulnerability in the IDP feature of Juniper Networks Junos OS on SRX series devices potentially allows a user with login access to the device to execute shell commands and elevate privileges. Affected releases are Juniper Networks Junos OS 12.1X44 prior to 12.1X44-D60; 12.1X46...

CVE-2017-2345

On Junos OS devices with SNMP enabled, a network based attacker with unfiltered access to the RE can cause the Junos OS snmpd daemon to crash and restart by sending a crafted SNMP packet. Repeated crashes of the snmpd daemon can result in a partial denial of service condition. Additionally, it ma...

CVE-2017-2347

A denial of service vulnerability in rpd daemon of Juniper Networks Junos OS allows a malformed MPLS ping packet to crash the rpd daemon if MPLS OAM is configured. Repeated crashes of the rpd daemon can result in an extended denial of service condition for the device. The affected releases are...

CVE-2017-2342

MACsec feature on Juniper Networks Junos OS 15.1X49 prior to 15.1X49-D100 on SRX300 series does not report errors when a secure link can not be established. It falls back to an unencrypted link. This can happen when MACsec is configured on ports that are not capable of MACsec or when a secure lin...

CVE-2017-10603

An XML injection vulnerability in Junos OS CLI can allow a locally authenticated user to elevate privileges and run arbitrary commands as the root user. This issue was found during internal product security testing. Affected releases are Juniper Networks Junos OS 15.1X53 prior to 15.1X53-D47, 15....

The vulnerability of the RPD component in the Junos operating system allows a attacker to trigger a service failure or otherwise affect the system.

The vulnerability of the RPD module in the Junos operating system is related to incorrect data processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures or otherwise affect the system through specially crafted RIP requests...

The vulnerability of the Junos operating system’s jdhcpd daemon allows a attacker to cause the application to terminate and restart, thereby triggering a service failure.

The vulnerability of the Junos operating system’s jdhcpd component is related to improper data processing. Exploiting this vulnerability can allow a remote attacker to cause the application to stop working and restart, as well as trigger a service failure using a specially crafted DHCPv6 packet...

CVE-2017-2303

On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D50, 12.1X47 prior to 12.1X47-D40, 12.3 prior to 12.3R13, 12.3X48 prior to 12.3X48-D30, 13.2X51 prior to 13.2X51-D40, 13.3 prior to 13.3R10, 14.1 prior to 14.1R8, 14.1X53 prior to 14.1X53-D35, 14.1X55 prior to...

CVE-2017-2302

On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D55, 12.1X47 prior to 12.1X47-D45, 12.3R13 prior to 12.3R13, 12.3X48 prior to 12.3X48-D35, 13.3 prior to 13.3R10, 14.1 prior to 14.1R8, 14.1X53 prior to 14.1X53-D40, 14.1X55 prior to 14.1X55-D35, 14.2 prior to...

Juniper Networks Junos OS Input Validation Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. A vulnerability exists in the IPv6 ND packet processing in Juniper Networks Junos OS versions 15.1 and 16.1 on th...

The vulnerability of the Junos operating system, which allows a hacker to trigger a service failure

The vulnerability of Juniper Networks’ Junos operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger an emergency shutdown and restart of the device, or cause a failure in service delivery through process routing...

The vulnerability of the Junos operating system allows a perpetrator to trigger a system failure and restart the device.

The vulnerability of the LDP configuration in the Junos operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to trigger an emergency shutdown and restart of the device remotely...

The vulnerability of the Juniper Networks component of the Junos operating system, which allows a hacker to cause the PFE (Packet Forwarding Engine) to freeze or crash.

The vulnerability of Juniper Networks’ Junos operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause the Packet Forwarding Engine to become unresponsive or crash remotely...

Juniper Networks NorthStar Controller Information Disclosure Vulnerability

Juniper Networks NorthStar Controller is a powerful and flexible traffic engineering solution that enables granular visualization and control of IP/MPLS flows in carrier networks. An information disclosure vulnerability exists in Juniper Networks NorthStar Controller that could allow an...

CVE-2017-2313

Juniper Networks devices running affected Junos OS versions may be impacted by the receipt of a crafted BGP UPDATE which can lead to an rpd routing process daemon crash and restart. Repeated crashes of the rpd daemon can result in an extended denial of service condition. The affected Junos OS...

CVE-2017-2340

On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15.1R4, 16.1 prior to 16.1R3, on M/MX platforms where Enhanced Subscriber Management for DHCPv6 subscribers is configured, a vulnerability in processing IPv6 ND packets originating from subscribers and destined to M/MX series routers can...

Juniper Networks EX Series Ethernet Switches Junos OS IPv6 Denial of Service Vulnerability

Junos OS is a network operating system dedicated to the company's hardware systems.Juniper Networks EX Series Ethernet Switches Juniper Networks EX Series Ethernet Switches are switching devices that use the Junos OS system. A security vulnerability exists in the Juniper Networks EX Series Ethern...

CVE-2016-1275

Juniper Junos OS before 13.3R9, 14.1R6 before 14.1R6-S1, and 14.1 before 14.1R7, when configured with VPLS routing-instances, allows remote attackers to obtain sensitive mbuf information by injecting a flood of Ethernet frames with IPv6 MAC addresses directly into a connected interface...