CVE-2021-0273

The CVE-2021-0273 issue affects Juniper Networks Junos OS and Junos OS Evolved on ACX5800, EX9200, MX10000, MX240, MX480, MX960 with Trio line cards. The root cause is an always-incorrect control flow in the implicit LT filter terms of the PFE UCODE, causing an infinite loop when processing certa...

CVE-2021-0272 Junos OS: QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016: In EVPN-VXLAN scenarios receipt of specific genuine packets by an adjacent attacker will cause a kernel memory leak in FPC.

A kernel memory leak in QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016 devices Flexible PIC Concentrators FPCs on Juniper Networks Junos OS allows an attacker to send genuine packets destined to the device to cause a Denial of Service DoS to the device. On QFX10002-32Q, QFX10002-60C...

CVE-2021-0272

CVE-2021-0272 affects Juniper Networks Junos OS on QFX10002-32Q/60C/72Q and QFX10008/QFX10016; it is a kernel memory leak in FPCs that can be triggered by processing genuine packets in EVPN-VXLAN scenarios, enabling DoS with possible device crashes/restarts on affected models. Public documents co...

CVE-2021-0271

CVE-2021-0271 describes a Double Free vulnerability in the sfid process of Juniper Networks Junos OS. An adjacently-connected attacker can trigger a sustained Denial of Service by sending crafted ARP packets to specific EX-series devices (EX2200-C, EX3200, EX3300, EX4200, EX4500, EX4550, EX6210, ...

CVE-2021-0270

CVE-2021-0270 impacts Juniper Networks Junos OS on PTX Series and QFX10K Series when the inline-Jflow feature is enabled. The issue is described as a use-after-free in the Packet Forwarding Engine (PFE) microkernel, leading to a DoS through restarting one or more FPCs and generating core files du...

CVE-2021-0269

The CVE-2021-0269 entry concerns Juniper Networks Junos OS J-Web. The root cause is improper handling of client-side parameters, allowing an authenticated attacker to supersede or modify HTTP/S session parameters, bypass input validation rules, and alter J-Web behavior. Potential consequences inc...

CVE-2021-0269 Junos OS: J-Web can be compromised through reflected client-side HTTP parameter pollution attacks.

The improper handling of client-side parameters in J-Web of Juniper Networks Junos OS allows an attacker to perform a number of different malicious actions against a target device when a user is authenticated to J-Web. An attacker may be able to supersede existing parameters, including hardcoded...

CVE-2021-0267

Summary: CVE-2021-0267 is an input validation flaw in JDHCPD’s DHCP Relay Agent (active-lease query) in Juniper Junos OS. An attacker can trigger a crash of the jdhcpd DHCP service by sending a crafted DHCP packet, causing a Denial of Service. Affected Junos OS versions include 19.4 before 19.4R3...

CVE-2021-0268 Junos OS: J-Web has an Improper Neutralization of CRLF Sequences in its HTTP Headers which allows an attacker to carry out multiple types of attacks.

An Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Response Splitting' weakness in J-web of Juniper Networks Junos OS leads to buffer overflows, segment faults, or other impacts, which allows an attacker to modify the integrity of the device and exfiltration information from the...

CVE-2021-0268

CVE-2021-0268 concerns Juniper Networks Junos OS J-Web, due to an Improper Neutralization of CRLF Sequences in HTTP Headers (HTTP Response Splitting). The weakness can cause buffer overflows or segment faults and, per sources, may enable cross-site scripting (XSS) and cookie manipulation, with th...

CVE-2021-0267 Junos OS: Receipt of a crafted DHCP packet will cause the jdhcpd DHCP service to core.

An Improper Input Validation vulnerability in the active-lease query portion in JDHCPD's DHCP Relay Agent of Juniper Networks Junos OS allows an attacker to cause a Denial of Service DoS by sending a crafted DHCP packet to the device thereby crashing the jdhcpd DHCP service. This is typically...

CVE-2021-0266 cSRX: Use of Hard-coded Cryptographic Keys allows an attacker to take control of the device through device management services.

The use of multiple hard-coded cryptographic keys in cSRX Series software in Juniper Networks Junos OS allows an attacker to take control of any instance of a cSRX deployment through device management services. This issue affects: Juniper Networks Junos OS on cSRX Series: All versions prior to...

CVE-2021-0266

CVE-2021-0266 affects Juniper Networks Junos OS on cSRX Series. The root cause is the use of multiple hard-coded cryptographic keys in cSRX deployments, enabling an attacker to take control of any instance via device management services. Reported affected versions include all prior to 20.2R3, 20....

CVE-2021-0265 Contrail Insights: The REST API implementation allows an unauthenticated remote attacker to execute commands as root.

An unvalidated REST API in the AppFormix Agent of Juniper Networks AppFormix allows an unauthenticated remote attacker to execute commands as root on the host running the AppFormix Agent, when certain preconditions are performed by the attacker, thus granting the attacker full control over the...

CVE-2021-0265

The CVE-2021-0265 entry relates to an unvalidated REST API in the Juniper Networks AppFormix Agent that allows an unauthenticated remote attacker to execute commands as root on the host running the AppFormix Agent, granting full control of the environment. Affected products are Juniper Networks A...

CVE-2021-0264

CVE-2021-0264 describes a DoS vulnerability in Juniper Networks Junos OS on MX Series with MPC10/MPC11 line cards and PTX10003/PTX10008 devices. When a firewall filter term containing a syslog action is hit (configured on lo0 or a physical interface), the affected line card may crash and restart,...

CVE-2021-0264 Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11, PTX10003, PTX10008: Line card may crash and restart when traffic is hitting a firewall filter having a term with syslog action configured

A vulnerability in the processing of traffic matching a firewall filter containing a syslog action in Juniper Networks Junos OS on MX Series with MPC10/MPC11 cards installed, PTX10003 and PTX10008 Series devices, will cause the line card to crash and restart, creating a Denial of Service DoS...

CVE-2021-0263

Summary: CVE-2021-0263 describes a DoS in Juniper Junos OS PTX Series caused by heavy J-Flow sampling churn in the Multi-Service process (multi-svcs) on the FPC, which can stall the KRT queue and halt updates, impacting traffic forwarding. Affected component is the Multi-Service process running o...

CVE-2021-0261 Junos OS: Denial of Service vulnerability in J-Web and web based (HTTP/HTTPS) services caused by a high number of specific requests

A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN DVPN, Firewall Authentication Pass-Through with Web-Redirect, and Captive Portal allows an unauthenticated attacker to cause an extended Denial of Service DoS for these services by sending a high number of...

CVE-2021-0262

CVE-2021-0262 describes a Use After Free vulnerability in the PFE packet processing of Juniper Networks Junos OS on the QFX10002-60C switching platform. The issue affects QFX10002-60C devices with Junos OS versions: 19.1R3-S1 and later, and other listed 19.1/19.2/20.2 releases; it does not affect...