Juniper Networks Junos OS Cross-Site Scripting Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS that originates from a vulnerability that could...

PT-2024-1307 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on SRX Series and EX Series versions earlier than 20.4R3-S10 Juniper Networks Junos OS on SRX Series and EX Series 21.2 versions earlier than 21.2R3-S8 Juniper Networks Junos OS on SRX Series and EX Series 21.4...

Juniper Junos OS Vulnerability (JSA75758)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA75758 advisory. - An Incomplete Cleanup vulnerability in Nonstop active routing NSR component of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause memory leak...

Juniper Networks NSD Buffer Overflow DoS

The vulnerability of the Network Services Daemon NSD in the Juniper Networks Junos operating system is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure...

Juniper Networks Junos OS DHCP Daemon DoS

The vulnerability of the DHCP Daemon jdhcpd on Juniper Networks Junos OS operating systems is related to improper handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Juniper Networks’ Junos Packet Forwarding Engine DoS

The vulnerability of the packet forwarding engine PFE in Juniper Networks’ Junos routers of the MX series is related to memory release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Demon Routing Protocol Daemon RCE

The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to improper memory release. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Juniper Networks’ Junos OS Evolved Object Flooding Protocol DoS

The vulnerability of the Object Flooding Protocol OFP in Juniper Networks’ Junos OS Evolved operating systems is related to improper handling of syntactically incorrect structures. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted TCP...

Juniper Networks Junos OS DoS

The vulnerability of Juniper Networks Junos OS routers in the MX series is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Juniper Networks Non-Stop Routing DoS

The vulnerability of the Non-Stop Routing NSR routing mechanism in Juniper Networks’ Junos OS lies in the incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow a malicious actor to trigger service interruptions...

Packet Forwarding Engine DoS

The vulnerability of the Packet Forwarding Engine PFE module in JunOS operating systems for MX and SRX series routers is related to errors in syntax validation during the processing of SIP packets. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Juniper Networks’ Junos Packet Forwarding Engine Confidential Data Access

The vulnerability of the packet forwarding engine PFE in Juniper Networks’ Junos operating system is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

Juniper’s Critical RCE Vulnerability Shakes Network Security

Summary: Juniper Networks has a critical remote code execution RCE vulnerability, CVE-2024-21591, which affects SRX Series firewalls and EX Series switches. This flaw enables attackers to trigger a Denial-of-Service condition and potentially execute remote code with root privileges. Threat Level ...

Critical RCE Vulnerability Uncovered in Juniper SRX Firewalls and EX Switches

Juniper Networks has released updates to fix a critical remote code execution RCE vulnerability in its SRX Series firewalls and EX Series switches. The issue, tracked as CVE-2024-21591, is rated 9.8 on the CVSS scoring system. "An out-of-bounds write vulnerability in J-Web of Juniper Networks Jun...

CVE-2024-21616

An Improper Validation of Syntactic Correctness of Input vulnerability in Packet Forwarding Engine PFE of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service DoS. On all Junos OS MX Series and SRX Series platforms, when SIP ALG is enabled, and a...

CVE-2024-21617

An Incomplete Cleanup vulnerability in Nonstop active routing NSR component of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause memory leak leading to Denial of Service DoS. On all Junos OS platforms, when NSR is enabled, a BGP flap will cause memory leak. A manual...

CVE-2024-21611

A Missing Release of Memory after Effective Lifetime vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. In a Juniper Flow Monitoring jflow scenario route churn that...

CVE-2024-21613

A Missing Release of Memory after Effective Lifetime vulnerability in Routing Protocol Daemon RPD of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause an rpd crash, leading to Denial of Service DoS. On all Junos OS and Junos OS Evolved platforms,...

CVE-2024-21607

An Unsupported Feature in the UI vulnerability in Juniper Networks Junos OS on MX Series and EX9200 Series allows an unauthenticated, network-based attacker to cause partial impact to the integrity of the device. If the "tcp-reset" option is added to the "reject" action in an IPv6 filter which...

CVE-2024-21612

An Improper Handling of Syntactically Invalid Structure vulnerability in Object Flooding Protocol OFP service of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. On all Junos OS Evolved platforms, when specific TCP packets are...