CVE-2023-28964

CVE-2023-28964 affects Juniper Networks Junos OS and Junos OS Evolved. The vulnerability arises from an improper handling of a length parameter in the routing protocol daemon (RPD) that processes BGP flowspec updates. A network-based, unauthenticated attacker can send malformed BGP flowspec data ...

CVE-2023-28970

Technical details about CVE-2023-28970 are not publicly available in the provided connected documents. Monitor for updates; no new information on affected versions, root cause specifics, exploitation status, or remediation is present here.

CVE-2023-28962

The CVE-2023-28962 issue is a Junos OS J-Web vulnerability (upload-file.php) caused by improper authentication, enabling an unauthenticated, network-based attacker to upload arbitrary files to temporary folders. Affected products/versions include Juniper Networks Junos OS prior to 19.4R3-S11; 20....

CVE-2023-28963

Summary: CVE-2023-28963 is an Improper Authentication vulnerability in cert-mgmt.php of Juniper Networks Junos OS J-Web component. An unauthenticated, network-based attacker can read arbitrary files from temporary folders on affected devices. Affected software: Juniper Networks Junos OS running J...

CVE-2023-28975

CVE-2023-28975 affects Juniper Networks Junos OS: an Un Unexpected Status Code or Return Value vulnerability in the kernel can cause a DoS when certain USB devices are plugged into the routing-engine (RE). An unauthenticated attacker with physical access can crash the kernel, forcing reboots and ...

CVE-2023-1697

The CVE-2023-1697 issue is an Improper Handling of Missing Values in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS . It causes a crash of the dcpfe process and a sustained Denial of Service (DoS) when a specific malformed ethernet frame is received. Affected products/versions in...

CVE-2023-28980 Junos OS and Junos OS Evolved: In a BGP rib sharding scenario an rpd crash will happen shortly after a specific CLI command is issued

A Use After Free vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause Denial of Service DoS. In a rib sharding scenario the rpd process will crash shortly after specific CLI command is...

CVE-2023-28961 Junos OS: ACX Series: IPv6 firewall filter is not installed in PFE when "from next-header ah" is used

An Improper Handling of Unexpected Data Type vulnerability in IPv6 firewall filter processing of Juniper Networks Junos OS on the ACX Series devices will prevent a firewall filter with the term 'from next-header ah' from being properly installed in the packet forwarding engine PFE. There is no...

Juniper Networks Releases Security Updates

Juniper Networks has released security updates to address vulnerabilities affecting Junos OSlink is external, Paragon Active Assurance PAAlink is external, and Juniper Secure Analytics JSA Serieslink is external. An attacker could exploit some of these vulnerabilities to take control of an affect...

Juniper Junos OS Vulnerability (JSA70606)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70606 advisory. - A Use After Free vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges...

Juniper Junos OS Vulnerability (JSA70585)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70585 advisory. - An Incorrect Permission Assignment for Critical Resource vulnerability in Juniper Networks Junos OS Evolved allows a local, authenticated low-privileged attacker to copy...

Juniper Junos OS Vulnerability (JSA70601)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70601 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine pfe of Juniper Networks Junos OS on MX Series allows an...

Juniper Junos OS Vulnerability (JSA70588)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70588 advisory. - An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a network...

Juniper Junos OS Vulnerability (JSA70604)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70604 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the kernel of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to bypass an...

Juniper Junos OS Vulnerability (JSA70610)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70610 advisory. - A Use After Free vulnerability in the Layer 2 Address Learning Manager l2alm of Juniper Networks Junos OS on QFX Series allows an adjacent attacker to cause the Packet...

Juniper Junos OS Vulnerability (JSA70599)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70599 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the bbe-smgd of Juniper Networks Junos OS allows an unauthenticated, adjacent attacker to cause a...

Juniper Junos OS Vulnerability (JSA70608)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70608 advisory. - A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows an...

Juniper Junos OS Vulnerability (JSA70589)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70589 advisory. - An Improper Check or Handling of Exceptional Conditions within the storm control feature of Juniper Networks Junos OS allows an attacker sending a high rate of traffic to...

PT-2023-3394 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.1R3-S10 Juniper Networks Junos OS 19.2 versions prior to 19.2R3-S7 Juniper Networks Junos OS 19.3 versions prior to 19.3R3-S8 Juniper Networks Junos OS 19.4 versions prior to 19.4R3-S11 Juniper...

Juniper Junos OS Multiple Vulnerabilities (JSA69999)

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA69999 advisory. - A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain...