Juniper Junos MX Series PFE DoS (JSA11038)

According to its self-reported version, the remote Juniper Junos device is affected by a denial of service DoS vulnerability where receipt of a stream of specific Layer 2 frames may cause a memory leak resulting in the packet forwarding engine PFE on the line card to crash and restart, causing...

Juniper Junos OpenSSL Security Advisory (JSA11025)

According to its self-reported version, the remote Juniper Junos device is affected by a vulnerability in the OpenSSL library. There is an overflow bug in the x6464 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that...

CVE-2020-1646

On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific UPDATE for an EBGP peer can lead to a routing process daemon RPD crash and restart. This issue occurs only when the device is receiving and processing the BGP UPDATE for an EBGP peer. This issue does not occur when t...

CVE-2020-1645

When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets processed by the Multiservices PIC Management Daemon mspmand process, responsible for managing "URL Filtering service", may crash, causing the...

Juniper Junos LLDP Packet DoS JSA11027

According to the self-reported version of Junos OS, the remote device is affected by a denial of service DoS vulnerability due to its implementation of LLDP. An unauthenticated attacker can exploit this, by sending crafted LLDP packets from an adjacent device, in order to cause LLDP to crash. Not...

Juniper Junos Denial of Service (DoS) JSA11030

According to the self reported version of Junos OS on the remote device it is affected by a Denial of Service DoS vulnerability. By continuously executing the same CLI commands 'show ospf interface extensive' or 'show ospf interface detail' CLI commands, a local attacker can repeatedly crash the...

Juniper Junos BGP Update DoS (JSA11033)

According to the self-reported version of Junos OS on the remote device, it is affected by a denial of service DoS vulnerability due to how it processes a specific UPDATE for an EBGP peer. An unauthenticated, remote attacker can exploit this, by sending a crafted UPDATE, in order to crash the...

Juniper Junos RCE (JSA10871)

According to the self reported version of Junos OS on the remote device it is affected by a remote code execution vulnerability in the routing protocol daemon RPD. An unauthenticated, remote attacker can exploit this, via crafted BGP NOTIFICATION messages, to crash the RPD process and potentially...

Juniper Networks Junos OS Information Disclosure Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. An information disclosure vulnerability exists in Juniper Networks Junos OS, which stems from a program that uses the...

Juniper Networks Junos OS Input Validation Error Vulnerability (CNVD-2020-42025)

Juniper Networks Junos OS is a Juniper Networks network operating system designed for use with Juniper Networks hardware devices. The operating system provides a secure programming interface and the Junos SDK.Junos OS Evolved is an upgraded version of Junos OS. A security vulnerability exists in...

CVE-2020-1638

The FPC Flexible PIC Concentrator of Juniper Networks Junos OS and Junos OS Evolved may restart after processing a specific IPv4 packet. Only packets destined to the device itself, successfully reaching the RE through existing edge and control plane filtering, will be able to cause the FPC restar...

Exploit for Stack-based Buffer Overflow in Juniper Junos

inetutils hasn't been updated in 5 years, and neither has the of...

PT-2020-7726

Name of the Vulnerable Software and Affected Versions Juniper Junos OS versions 12.1X44 through 12.1X44-D45 Juniper Junos OS versions 12.1X46 through 12.1X46-D30 Juniper Junos OS versions 12.1X47 through 12.1X47-D20 Juniper Junos OS versions 12.3 through 12.3R8 Juniper Junos OS versions 12.3X48...

CVE-2014-6447: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities exist in Juniper Junos J-Web error handling that may lead to cross site scripting XSS issues or crash the J-Web service DoS. This affects Juniper Junos OS 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D20, 12.3 before 12.3R8, 12.3X48 befor...

Junos OS: pccd DoS (JSA10980)

According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability in the path computational element protocol daemon pccd process. An unauthenticated, remote attacker can exploit this issue, by sending malformed Path Computation Element Protocol PCEP...

CVE-2014-6448

Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to bypass intended restrictions and execute arbitrary Python code via vectors involving shell access...

Code injection

Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to bypass intended restrictions and execute arbitrary Python code via vectors involving shell access...

CVE-2020-1600

In a Point-to-Multipoint P2MP Label Switched Path LSP scenario, an uncontrolled resource consumption vulnerability in the Routing Protocol Daemon RPD in Juniper Networks Junos OS allows a specific SNMP request to trigger an infinite loop causing a high CPU usage Denial of Service DoS condition...

CVE-2014-6448: Improper Privilege Management

Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to bypass intended restrictions and execute arbitrary Python code via vectors involving shell access...

Juniper Networks Junos OS JDHCPD IPv4 Command Injection Vulnerability

Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. A security vulnerability in Juniper Networks Junos OS Dynamic Host Configuration Protocol Daemon JDHCPD can be exploited by a remote attacker to submit a special IPv4 request that can be...