CVE-2021-0280: Improper Initialization

Due to an Improper Initialization vulnerability in Juniper Networks Junos OS on PTX platforms and QFX10K Series with Paradise PE chipset-based line cards, ddos-protection configuration changes made from the CLI will not take effect as expected beyond the default DDoS Distributed Denial of Service...

CVE-2021-0279: Use of Hard-coded Credentials

Juniper Networks Contrail Cloud CC releases prior to 13.6.0 have RabbitMQ service enabled by default with hardcoded credentials. The messaging services of RabbitMQ are used when coordinating operations and status information among Contrail services. An attacker with access to an administrative...

CVE-2021-0276: Stack-based Buffer Overflow

A stack-based Buffer Overflow vulnerability in Juniper Networks SBR Carrier with EAP Extensible Authentication Protocol authentication configured, allows an attacker sending specific packets causing the radius daemon to crash resulting with a Denial of Service DoS or leading to remote code...

Vulnerabilities fixed in Juniper products

Juniper has fixed vulnerabilities in Junos OS, Junos OS Evolved and PTX, QTX, MX, EX9200 and SRX4600 devices. The vulnerabilities potentially enable a malicious party to launch attacks leading to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Remote...

CVE-2021-0292

An Uncontrolled Resource Consumption vulnerability in the ARP daemon arpd and Network Discovery Protocol ndp process of Juniper Networks Junos OS Evolved allows a malicious attacker on the local network to consume memory resources, ultimately resulting in a Denial of Service DoS condition...

CVE-2021-0278

An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated attacker to escalate their privileges to root over the target device. junos:18.3R3-S5 junos:18.4R3-S9 junos:19.1R3-S6 junos:19.3R2-S6 junos:19.3R3-S3 junos:19.4R1-S4 junos:19.4R3-S4...

CVE-2021-0280

Due to an Improper Initialization vulnerability in Juniper Networks Junos OS on PTX platforms and QFX10K Series with Paradise PE chipset-based line cards, ddos-protection configuration changes made from the CLI will not take effect as expected beyond the default DDoS Distributed Denial of Service...

CVE-2021-0287

In a Segment Routing ISIS SR-ISIS/MPLS environment, on Juniper Networks Junos OS and Junos OS Evolved devices, configured with ISIS Flexible Algorithm for Segment Routing and sensor-based statistics, a flap of a ISIS link in the network, can lead to a routing process daemon RPD crash and restart,...

CVE-2021-0290

Improper Handling of Exceptional Conditions in Ethernet interface frame processing of Juniper Networks Junos OS allows an attacker to send specially crafted frames over the local Ethernet segment, causing the interface to go into a down state, resulting in a Denial of Service DoS condition. The...

CVE-2021-0294

A vulnerability in Juniper Networks Junos OS, which only affects the release 18.4R2-S5, where a function is inconsistently implemented on Juniper Networks Junos QFX5000 Series and EX4600 Series, and if "storm-control enhanced" is configured, can lead to the enhanced storm control filter group not...

CVE-2021-0286

A vulnerability in the handling of exceptional conditions in Juniper Networks Junos OS Evolved EVO allows an attacker to send specially crafted packets to the device, causing the Advanced Forwarding Toolkit manager evo-aftmand-bt or evo-aftmand-zx process to crash and restart, impacting all traff...

CVE-2021-0276

A stack-based Buffer Overflow vulnerability in Juniper Networks SBR Carrier with EAP Extensible Authentication Protocol authentication configured, allows an attacker sending specific packets causing the radius daemon to crash resulting with a Denial of Service DoS or leading to remote code...

PT-2021-3986

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on QFX5000 Series and EX4600 Series versions prior to 15.1R7-S9 Juniper Networks Junos OS on QFX5000 Series and EX4600 Series versions prior to 17.3R3-S11 Juniper Networks Junos OS on QFX5000 Series and EX4600 Series...

Juniper Junos OS Vulnerability (JSA11177)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11177 advisory. - An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability, where named paths are globally scoped, meaning a process located in one jail...

Juniper Junos OS Vulnerability (JSA11181)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11181 advisory. - An Out-of-bounds Read vulnerability in the processing of specially crafted LLDP frames by the Layer 2 Control Protocol Daemon l2cpd of Juniper Networks Junos OS and Junos ...

Juniper Junos OS Vulnerability (JSA11193)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11193 advisory. - An Exposure of System Data vulnerability in Juniper Networks Junos OS and Junos OS Evolved, where a sensitive system-level resource is not being sufficiently protected,...

Juniper Junos OS Vulnerability (JSA11195)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11195 advisory. - vulnerability in Juniper Networks Junos OS caused by Missing Release of Memory after Effective Lifetime leads to a memory leak each time the CLI command 'show system...

Juniper Junos OS Vulnerability (JSA11179)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11179 advisory. - On Juniper Networks Junos OS Evolved devices where ntp is enabled a crafted malicious authenticated mode 6 packet from a permitted network address can trigger a NULL point...

Juniper Junos OS Vulnerability (JSA11190)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11190 advisory. - A vulnerability in the processing of specific MPLS packets in Juniper Networks Junos OS on MX Series, EX9200 Series with Trio-based MPC Modular Port Concentrator may cause...

Juniper Junos OS Vulnerability (JSA11208)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11208 advisory. - A vulnerability in the Distance Vector Multicast Routing Protocol DVMRP of Juniper Networks Junos OS on the QFX10K Series switches allows an attacker to trigger a packet...