CVE-2018-0018

On SRX Series devices during compilation of IDP policies, an attacker sending specially crafted packets may be able to bypass firewall rules, leading to information disclosure which an attacker may use to gain control of the target device or other internal devices, systems or services protected b...

CVE-2018-0002

On SRX Series and MX Series devices with a Service PIC with any ALG enabled, a crafted TCP/IP response packet processed through the device results in memory corruption leading to a flowd daemon crash. Sustained crafted response packets lead to repeated crashes of the flowd daemon which results in...

Junos OS Denial of Service Vulnerability in Multiple Juniper Networks Products

Juniper SRX1400 and others are firewall appliances from Juniper Networks, Inc.Junos OS is the operating system that runs on them. A security vulnerability exists in the high availability cluster configuration mode of Junos OS versions 12.3X48 and 15.1X49 in various Juniper Networks products. An...

Juniper SSG Series Appliance ScreenOS Cross-Site Scripting Vulnerability

The Juniper SSG Series is a family of firewall appliances from Juniper Networks.ScreenOS is one of the operating systems. A cross-site scripting vulnerability exists in Firewall+VPN in ScreenOS on Juniper SSG Series devices. A remote attacker can exploit this vulnerability to inject HTML/JavaScri...

CVE-2017-2304

Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53-D40, 15.1X53 prior to 15.1X53-D40, 15.1 prior to 15.1R2, do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from...

CVE-2017-2312

On Juniper Networks devices running Junos OS affected versions and with LDP enabled, a specific LDP packet destined to the RE Routing Engine will consume a small amount of the memory allocated for the rpd routing protocol daemon process. Over time, repeatedly receiving this type of LDP packets wi...