Juniper Junos Space 17.1 < 17.1R1 Patch v1 / 16.1 < 16.1R3 Authentication Bypass (JSA10824)

According to its self-reported version number, the version of Junos Space running on the remote device is 17.1 17.1R1.1 or 16.1 16.1R3, and is therefore affected by an authentication bypass vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104175;...

Juniper Junos Space < 17.1R1 Multiple Vulnerabilities (JSA10826)

According to its self-reported version number, the version of Junos Space running on the remote device is 17.1R1, and is therefore affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104100; scriptversion"1.7";...

Juniper Junos FPC Crash Vulnerability (JSA10814)

According to its self-reported version number, the remote Junos device is affected by a vulnerability in the extended-statistics component that can cause the FPC to crash. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104035; scriptversion"1.6";...

Juniper Junos Space Network Management Platform Authentication Bypass Vulnerability

Juniper Junos Space Network Management Platform is a network management platform from Juniper Networks. The platform supports automated configuration, monitoring and troubleshooting of devices and services throughout their lifecycle. An authentication bypass vulnerability exists in Juniper Junos...

Juniper Junos OS Denial of Service Vulnerability (CNVD-2017-33971)

Juniper Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in the telnetd service of Juniper Junos OS. A remote attacker could exploit this...

Juniper Junos OS telnetd Denial of Service Vulnerability

Juniper Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. A denial of service vulnerability exists in the telnetd service in Juniper Junos OS. A remote attacker could exploit this...

Juniper Junos OS Denial of Service Vulnerability (CNVD-2017-33972)

Juniper Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in the Juniper Junos OS in the runtime configuration of the loopback filter action command...

Juniper Junos OS Denial of Service Vulnerability

Juniper Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS contains a security vulnerability. An attacker could exploit this vulnerability to cause a denia...

Juniper Junos ALG Fragmented Traffic Handling MS-MPC / MS-MIC Service PIC DoS (JSA10794)

According to its self-reported version and model number, the remote Juniper Junos device is affected by a denial of service vulnerability in the Application Layer Gateway ALG that is triggered when handling a large amount of fragmented packets. An unauthenticated, remote attacker can exploit this...

Juniper Junos SRX MACsec Feature Secure Link Failure Silent Fallback Information Disclosure (JSA10790)

According to its self-reported version and model number, the remote Juniper Junos device is affected by an information disclosure vulnerability in the MACsec feature due to error reporting over an unencrypted link when a secure link cannot be established. An adjacent attacker can exploit this to...

Juniper Junos Multiple OpenSSL Vulnerabilities (JSA10775)

According to its self-reported version number, the remote Juniper Junos device is affected by multiple vulnerabilities : - A carry propagation error exists in the OpenSSL component in the Broadwell-specific Montgomery multiplication procedure when handling input lengths divisible by but longer th...

Juniper Junos rpd MPLS Ping Packet Handling DoS (JSA10795)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by a denial of service vulnerability in the rpd daemon due to improper handling of MPLS ping packets. An unauthenticated, remote attacker can exploit this, via a specially crafted MPLS pin...

Juniper Junos Protocol Daemon (RPD) BGP OPEN Message Handling DoS (JSA10779)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by a denial of service vulnerability in the routing protocol daemon rpd due to improper handling of BGP OPEN messages. An unauthenticated, remote attacker can exploit this, via a specially...

Juniper Junos snmpd SNMP Packet Handling RCE (JSA10793)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by a remote code execution vulnerability in the snmpd daemon due to improper handling of SNMP packets. An unauthenticated, remote attacker can exploit this, via a specially crafted SNMP...

Juniper Junos sendmsg Local Privilege Escalation (JSA10797)

According to its self-reported version number, the remote Juniper Junos device is affected by a heap-based buffer overflow condition in the sendmsg system call, specifically due to incorrect handling of arguments in the sockargs function in sys/kern/uipcsyscalls.c. A local attacker can exploit th...

Juniper Junos SRX, vSRX, and J-Series ISC BIND DoS (JSA10799)

According to its self-reported version and model number, the remote Juniper Junos device is affected by a denial of service vulnerability in ISC BIND, specifically in the queryfind function within file bin/named/query.c, when simultaneously using DNS64 and RPZ for query responses. An...

Juniper Junos SRX IDP Remote Command Injection (JSA10801)

According to its self-reported version and model number, the remote Juniper Junos device is affected by a remote command injection vulnerability in the IDP feature due to improper validation of user-supplied input. An authenticated, remote attacker can exploit this to execute arbitrary shell...

Juniper Junos User Authentication Bypass (JSA10802)

According to its self-reported version number, the remote Juniper Junos device is affected by an authentication bypass vulnerability due to a specific device configuration that can result in a commit failure condition, which allows a user to be logged in without being prompted for a password. A...

Juniper Junos PHP multiple vulnerabilities (JSA10804)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by multiple vulnerabilities in the included PHP version : - An unspecified flaw exists in the SQLite extension that allows an unauthenticated, remote attacker to bypass the 'openbasedir'...

Juniper Junos Denial of Service Vulnerability (CNVD-2017-23941)

Juniper Junos OS is a Juniper Networks network operating system designed for the company's hardware systems. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Junos OS. An attacker could exploit this vulnerability by continuously sending...