Juniper Junos OS Vulnerability (JSA70187)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70187 advisory. - A vulnerability in class-of-service CoS queue management in Juniper Networks Junos OS on the ACX2K Series devices allows an unauthenticated network-based attacker to cause...

Juniper Junos OS Vulnerability (JSA70197)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70197 advisory. - An Improper Validation of Array Index vulnerability in the Advanced Forwarding Toolkit Manager daemon aftmand of Juniper Networks Junos OS and Junos OS Evolved allows an...

CVE-2023-22410 Junos OS: MX Series with MPC10/MPC11: When Suspicious Control Flow Detection (scfd) is enabled and an attacker is sending specific traffic, this causes a memory leak.

A Missing Release of Memory after Effective Lifetime vulnerability in the Juniper Networks Junos OS on MX Series platforms with MPC10/MPC11 line cards, allows an unauthenticated adjacent attacker to cause a Denial of Service DoS. Devices are only vulnerable when the Suspicious Control Flow...

CVE-2023-22409

This CVE concerns Juniper Networks Junos OS NAT functionality where an unchecked input for a loop condition in the NAT library can crash SPC3 on SRX/MX devices, causing a DoS when an inconsistent deterministic NAT configuration is used and a specific CLI command is executed. The issue is triggere...

CVE-2023-22405

CVE-2023-22405 describes a DoS in Juniper Networks Junos OS caused by an improper preservation of consistency between independent representations of shared state in the Packet Forwarding Engine (PFE). When devices run with service-provider/SP style switching and MAC limiting on an Aggregated Ethe...

CVE-2023-22409 Junos OS: SRX Series, MX Series with SPC3: When an inconsistent NAT configuration exists and a specific CLI command is issued the SPC will reboot

An Unchecked Input for Loop Condition vulnerability in a NAT library of Juniper Networks Junos OS allows a local authenticated attacker with low privileges to cause a Denial of Service DoS. When an inconsistent "deterministic NAT" configuration is present on an SRX, or MX with SPC3 and then a...

CVE-2023-22405 Junos OS: QFX5k Series, EX46xx Series: MAC limiting feature stops working after PFE restart or device reboot

An Improper Preservation of Consistency Between Independent Representations of Shared State vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS to device due to out of resources. When a device...

CVE-2023-22395 Junos OS: In an MPLS scenario the processing of specific packets to the device causes a buffer leak and ultimately a loss of connectivity

A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. In an MPLS scenario specific packets destined to an Integrated Routing and Bridging irb interface of the...

CVE-2023-22404 Junos OS: SRX Series and MX Series with SPC3: When IPsec VPN is configured iked will core when a specifically formatted payload is received

An Out-of-bounds Write vulnerability in the Internet Key Exchange Protocol daemon iked of Juniper Networks Junos OS on SRX series and MX with SPC3 allows an authenticated, network-based attacker to cause a Denial of Service DoS. iked will crash and restart, and the tunnel will not come up when a...

CVE-2023-22406 Junos OS and Junos OS Evolved: A memory leak which will ultimately lead to an rpd crash will be observed when a peer interface flaps continuously in a Segment Routing scenario using OSPF

A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS. In a segment-routing scenario with OSPF as IGP, when a peer interface continuously flap...

CVE-2023-22406 Junos OS and Junos OS Evolved: A memory leak which will ultimately lead to an rpd crash will be observed when a peer interface flaps continuously in a Segment Routing scenario using OSPF

A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS. In a segment-routing scenario with OSPF as IGP, when a peer interface continuously flap...

Juniper Networks Releases Security Updates for Multiple Products

Juniper Networks has released security updates to address vulnerabilities affecting multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Juniper Networks’ security advisories page and...

CVE-2023-22411 Junos OS: SRX Series: The flow processing daemon (flowd) will crash when Unified Policies are used with IPv6 and certain dynamic applications are rejected by the device

An Out-of-Bounds Write vulnerability in Flow Processing Daemon flowd of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service DoS. On SRX Series devices using Unified Policies with IPv6, when a specific IPv6 packet goes through a dynamic-applicatio...

CVE-2023-22395 Junos OS: In an MPLS scenario the processing of specific packets to the device causes a buffer leak and ultimately a loss of connectivity

A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. In an MPLS scenario specific packets destined to an Integrated Routing and Bridging irb interface of the...

CVE-2023-22408

CVE-2023-22408 affects Juniper Networks Junos OS on SRX 5000 Series. The vulnerability is an improper validation of an array index in the SIP ALG, triggered by specific SIP packets with malformed SDP fields. This can allow a network-based, unauthenticated attacker to cause a Denial of Service by ...

CVE-2023-22395

CVE-2023-22395 describes a Missing Release of Memory after Effective Lifetime vulnerability in Juniper Networks Junos OS. An unauthenticated, adjacent attacker can cause a Denial of Service by sending specific MPLS-scoped packets to an IRB interface, triggering a buffer (mbuf) leak. Sustained tra...

CVE-2023-22402

CVE-2023-22402 is a Use After Free in the Junos OS Evolved kernel that can cause a Denial of Service in NSR when a BGP neighbor flap occurs while bgp auto-discovery is enabled. Affected: Juniper Junos OS Evolved 21.3 before 21.3R3-EVO; 21.4 before 21.4R2-EVO; 22.1 before 22.1R2-EVO; 22.2 before 2...

CVE-2023-22411

CVE-2023-22411 – Junos OS flowd DoS via IPv6 filter path . An out-of-bounds write in the Flow Processing Daemon (flowd) on SRX Series Junos OS can crash flowd and restart the PFE, allowing a network-based attacker to induce a DoS without authentication. Affected releases (SRX Series with Unified ...

CVE-2023-22398 Junos OS and Junos OS Evolved: RPD might crash when MPLS ping is performed on BGP LSPs

An Access of Uninitialized Pointer vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause a Denial of Service DoS. When an MPLS ping is performed on BGP LSPs, the RPD might crash...

Juniper Junos OS Vulnerability (JSA70211)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70211 advisory. - An Out-of-Bounds Write vulnerability in the H.323 ALG of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service DoS...