CVE-2024-21591 Junos OS: SRX Series and EX Series: Security Vulnerability in J-web allows a preAuth Remote Code Execution

An Out-of-bounds Write vulnerability in J-Web of Juniper Networks Junos OS on SRX Series and EX Series allows an unauthenticated, network-based attacker to cause a Denial of Service DoS, or Remote Code Execution RCE and obtain root privileges on the device. This issue is caused by use of an...

CVE-2024-21591

CVE-2024-21591 is an out-of-bounds write vulnerability in Juniper Networks Junos OS J-Web affecting SRX Series and EX Series. An unauthenticated, network-based attacker can cause a Denial of Service or Remote Code Execution and obtain root privileges on affected devices. The flaw stems from use o...

CVE-2024-21589

The CVE affects Juniper Networks Paragon Active Assurance Control Center. It is an Improper Access Control vulnerability that allows an unauthenticated network-based attacker to access reports (potentially exposing sensitive configuration data). Affected versions are 3.1.0, 3.2.0, 3.2.2, 3.3.0, 3...

CVE-2024-21589 Paragon Active Assurance Control Center: Information disclosure vulnerability

An Improper Access Control vulnerability in the Juniper Networks Paragon Active Assurance Control Center allows an unauthenticated network-based attacker to access reports without authenticating, potentially containing sensitive configuration information. A feature was introduced in version 3.1.0...

CVE-2024-21589 Paragon Active Assurance Control Center: Information disclosure vulnerability

An Improper Access Control vulnerability in the Juniper Networks Paragon Active Assurance Control Center allows an unauthenticated network-based attacker to access reports without authenticating, potentially containing sensitive configuration information. A feature was introduced in version 3.1.0...

CVE-2024-21587 Junos OS: MX Series: Memory leak in bbe-smgd process if BFD liveness detection for DHCP subscribers is enabled

An Improper Handling of Exceptional Conditions vulnerability in the broadband edge subscriber management daemon bbe-smgd of Juniper Networks Junos OS on MX Series allows an attacker directly connected to the vulnerable system who repeatedly flaps DHCP subscriber sessions to cause a slow memory...

CVE-2024-21587

CVE-2024-21587 affects Juniper Networks Junos OS on MX Series. The vulnerability is an Improper Handling of Exceptional Conditions in the broadband edge subscriber management daemon (bbe-smgd), which can leak memory when DHCP subscriber sessions are repeatedly flapped, potentially causing Denial ...

CVE-2024-21585 Junos OS and Junos OS Evolved: BGP session flaps on NSR-enabled devices can cause rpd crash

An Improper Handling of Exceptional Conditions vulnerability in BGP session processing of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker, using specific timing outside the attacker's control, to flap BGP sessions and cause the routing protocol daem...

CVE-2024-21585 Junos OS and Junos OS Evolved: BGP session flaps on NSR-enabled devices can cause rpd crash

An Improper Handling of Exceptional Conditions vulnerability in BGP session processing of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker, using specific timing outside the attacker's control, to flap BGP sessions and cause the routing protocol daem...

CVE-2024-21585

CVE-2024-21585 affects Juniper Networks Junos OS and Junos OS Evolved. An Improper Handling of Exceptional Conditions in BGP session processing on NSR-enabled devices can allow an unauthenticated network-based attacker to cause BGP session flaps, triggering replication of GR/LLGR state and leadin...

CVE-2023-36842

Junos OS vulnerability CVE-2023-36842 affects the DHCP daemon (jdhcpd). An improper check for unusual conditions allows an adjacent, unauthenticated attacker sending a specific DHCP packet to a non-configured interface (on devices with forward-snooped-client) to trigger an infinite loop, causing ...

CVE-2023-36842 Junos OS: jdhcpd will hang on receiving a specific DHCP packet

An Improper Check for Unusual or Exceptional Conditions vulnerability in Juniper DHCP Daemon jdhcpd of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause the jdhcpd to consume all the CPU cycles resulting in a Denial of Service DoS. On Junos OS devices with...

Juniper Networks Junos OS Security Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS due to an exception mishandling vulnerability i...

Juniper Networks Junos OS Security Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability in Juniper Networks Junos OS, which arises from an improper validation of the...

Juniper Networks Junos OS Resource Management Error Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS, which is caused by a double release...

Juniper Networks Paragon Active Assurance Security Vulnerability

Juniper Networks Paragon Active Assurance is a programmable test and service assurance solution from Juniper Networks, Inc. It can be easily used and delivered as a SaaS solution from the cloud or deployed locally in NFV environments using software-based and traffic-generating test proxies. A...

Juniper Networks Junos OS Security Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS that originates from a missing memory release...

CVE-2024-21614: Improper Check for Unusual or Exceptional Conditions

An Improper Check for Unusual or Exceptional Conditions vulnerability in Routing Protocol Daemon RPD of Juniper Networks Junos OS and Junos OS Evolved allows a network-based, unauthenticated attacker to cause rpd to crash, leading to Denial of Service DoS. On all Junos OS and Junos OS Evolved...

CVE-2024-21616: Improper Validation of Syntactic Correctness of Input

An Improper Validation of Syntactic Correctness of Input vulnerability in Packet Forwarding Engine PFE of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service DoS. On all Junos OS MX Series and SRX Series platforms, when SIP ALG is enabled, and a...

CVE-2024-21612: Improper Handling of Syntactically Invalid Structure

An Improper Handling of Syntactically Invalid Structure vulnerability in Object Flooding Protocol OFP service of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. On all Junos OS Evolved platforms, when specific TCP packets are...