Juniper Networks Junos OS security vulnerabilities

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS that results in a denial of service due to an...

CVE-2023-22406 Junos OS and Junos OS Evolved: A memory leak which will ultimately lead to an rpd crash will be observed when a peer interface flaps continuously in a Segment Routing scenario using OSPF

A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS. In a segment-routing scenario with OSPF as IGP, when a peer interface continuously flap...

CVE-2023-22413

CVE-2023-22413 affects Juniper Networks Junos OS on MX Series with MS-MPC or MS-MIC, where an IPsec6 tunnel can trigger the Multiservices PIC Management Daemon (mspmand) to core and restart when processing specific IPv4 packets. This causes an FPC crash and impacts traffic while mspmand restarts,...

Juniper Networks Releases Security Updates for Multiple Products

Juniper Networks has released security updates to address vulnerabilities affecting multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Juniper Networks’ security advisories page and...

CVE-2023-22396 Junos OS: Receipt of crafted TCP packets destined to the device results in MBUF leak leading to a Denial of Service (DoS)

An Uncontrolled Resource Consumption vulnerability in TCP processing on the Routing Engine RE of Juniper Networks Junos OS allows an unauthenticated network-based attacker to send crafted TCP packets destined to the device, resulting in an MBUF leak that ultimately leads to a Denial of Service Do...

CVE-2023-22406

CVE-2023-22406 affects Juniper Networks Junos OS and Junos OS Evolved. It is a memory-leak/DoS issue in the kernel that manifests when a peer interface flaps in a Segment Routing scenario using OSPF, causing continuous memory growth in rpd and eventual rpd crash. Affected versions include Junos O...

CVE-2023-22415 Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash when specific H.323 packets are received

An Out-of-Bounds Write vulnerability in the H.323 ALG of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service DoS. On all MX Series and SRX Series platform, when H.323 ALG is enabled and specific H.323 packets are received simultaneously, a flow...

CVE-2023-22401 Junos OS and Junos OS Evolved: PTX10008, PTX10016: When a specific SNMP MIB is queried the FPC will crash

An Improper Validation of Array Index vulnerability in the Advanced Forwarding Toolkit Manager daemon aftmand of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. On the PTX10008 and PTX10016 platforms running Junos ...

CVE-2023-22409 Junos OS: SRX Series, MX Series with SPC3: When an inconsistent NAT configuration exists and a specific CLI command is issued the SPC will reboot

An Unchecked Input for Loop Condition vulnerability in a NAT library of Juniper Networks Junos OS allows a local authenticated attacker with low privileges to cause a Denial of Service DoS. When an inconsistent "deterministic NAT" configuration is present on an SRX, or MX with SPC3 and then a...

CVE-2023-22416 Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if SIP ALG is enabled and a malformed SIP packet is received

A Buffer Overflow vulnerability in SIP ALG of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service DoS. On all MX Series and SRX Series platform with SIP ALG enabled, when a malformed SIP packet is received, the flow processing daemon flowd will...

CVE-2023-22408

CVE-2023-22408 affects Juniper Networks Junos OS on SRX 5000 Series. The vulnerability is an improper validation of an array index in the SIP ALG, triggered by specific SIP packets with malformed SDP fields. This can allow a network-based, unauthenticated attacker to cause a Denial of Service by ...

CVE-2023-22407 Junos OS and Junos OS Evolved: An RPD crash can happen due to an MPLS TE tunnel configuration change on a directly connected router

An Incomplete Cleanup vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS. An rpd crash can occur when an MPLS TE tunnel configuration change occurs on a directly connected...

CVE-2023-22411 Junos OS: SRX Series: The flow processing daemon (flowd) will crash when Unified Policies are used with IPv6 and certain dynamic applications are rejected by the device

An Out-of-Bounds Write vulnerability in Flow Processing Daemon flowd of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service DoS. On SRX Series devices using Unified Policies with IPv6, when a specific IPv6 packet goes through a dynamic-applicatio...

Juniper Junos OS Vulnerability (JSA70197)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70197 advisory. - An Improper Validation of Array Index vulnerability in the Advanced Forwarding Toolkit Manager daemon aftmand of Juniper Networks Junos OS and Junos OS Evolved allows an...

Juniper Junos OS Vulnerability (JSA70190)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70190 advisory. - An Improper Handling of Unexpected Data Type vulnerability in the handling of SIP calls in Juniper Networks Junos OS on SRX Series and MX Series platforms allows an attack...

Juniper Junos OS Vulnerability (JSA70204)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70204 advisory. - An Improper Validation of Array Index vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX 5000 Series allows a network-based, unauthenticated attacker to caus...

Juniper Junos OS Vulnerability (JSA70181)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70181 advisory. - An Access of Uninitialized Pointer vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attack...

Juniper Junos OS Vulnerability (JSA70199)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70199 advisory. - An Allocation of Resources Without Limits or Throttling vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS allows a network-based,...

Juniper Junos OS Vulnerability (JSA70200)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70200 advisory. - An Out-of-bounds Write vulnerability in the Internet Key Exchange Protocol daemon iked of Juniper Networks Junos OS on SRX series and MX with SPC3 allows an authenticated,...

Juniper Junos OS Vulnerability (JSA70210)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70210 advisory. - A Missing Release of Memory after Effective Lifetime vulnerability in Flexible PIC Concentrator FPC of Juniper Networks Junos OS allows an adjacent, unauthenticated attack...