CVE-2021-0261

CVE-2021-0261 affects Juniper Junos OS J-Web and related HTTP/HTTPS services, allowing an unauthenticated attacker to cause an extended DoS by sending a high volume of specific requests. Affected versions include multiple Junos OS releases across EX and SRX lines (e.g., 12.3 before 12.3R12-S17; 1...

CVE-2021-0260

CVE-2021-0260 affects Juniper Networks Junos OS SNMP daemon (snmpd), where improper authorization allows unauthenticated attackers to read/write OIDs and expose data. Affected: Junos OS versions spanning 17.2R1+ through 19.3R2/various fixed-suffix builds (e.g., 17.2R1 and later, 17.3R3-S9+, 17.4R...

CVE-2021-0260 Junos OS: SNMP fails to properly perform authorization checks on incoming received SNMP requests.

An improper authorization vulnerability in the Simple Network Management Protocol daemon snmpd service of Juniper Networks Junos OS leads an unauthenticated attacker being able to perform SNMP read actions, an Exposure of System Data to an Unauthorized Control Sphere, or write actions to OIDs tha...

CVE-2021-0258

CVE-2021-0258 describes a DoS vulnerability in Juniper Networks Junos OS where forwarding of transit TCPv6 packets on the Ethernet management interface can trigger a kernel panic. The issue arose from a TCP Parallelization feature introduced in Junos OS 17.2, active by default with concurrent net...

CVE-2021-0259 Junos OS and Junos OS Evolved: QFX5K Series: Underlay network traffic might not be processed upon receipt of high rate of specific genuine overlay packets in VXLAN scenario

Due to a vulnerability in DDoS protection in Juniper Networks Junos OS and Junos OS Evolved on QFX5K Series switches in a VXLAN configuration, instability might be experienced in the underlay network as a consequence of exceeding the default ddos-protection aggregate threshold. If an attacker on ...

CVE-2021-0259

CVE-2021-0259 affects Juniper Networks Junos OS and Junos OS Evolved on QFX5K Series switches in VXLAN configurations. The issue arises from DDoS protection logic, where an improperly detected DDoS violation can cause a leaf to drop processing of certain L2 traffic from spines in the underlay, al...

CVE-2021-0257 Junos OS: MX Series, EX9200 Series: Trio-based MPCs memory leak in VPLS with integrated routing and bridging (IRB) interface

On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPCs Modular Port Concentrators where Integrated Routing and Bridging IRB interfaces are configured and mapped to a VPLS instance or a Bridge-Domain, certain Layer 2 network events at Customer Edge CE devices may cause memo...

CVE-2021-0257

CVE-2021-0257 affects Juniper Junos OS on MX Series and EX9200 Series with Trio-based MPCs where IRB interfaces are mapped to a VPLS or Bridge-Domain. The issue is a memory leak in the MPC that can lead to an out-of-memory condition and an MPC restart, causing temporary traffic interruptions. Aff...

CVE-2021-0255

CVE-2021-0255 describes a local privilege-escalation in Juniper Junos OS due to ethtraceroute (a setuid root binary) which can be exploited by a locally authenticated user with shell access to gain root privileges and write to the local filesystem. Affected Junos OS versions span multiple branche...

CVE-2021-0256

CVE-2021-0256 affects Juniper Junos OS (mosquitto component) where a locally authenticated user with shell access can read sensitive files (e.g., master.passwd) due to mosquitto running with setuid root. The issue affects multiple Junos OS releases listed in the CVE description (e.g., 17.3R3-S12 ...

CVE-2021-0255 Junos OS: ethtraceroute Local Privilege Escalation vulnerability in SUID binaries

A local privilege escalation vulnerability in ethtraceroute of Juniper Networks Junos OS may allow a locally authenticated user with shell access to escalate privileges and write to the local filesystem as root. ethtraceroute is shipped with setuid permissions enabled and is owned by the root use...

CVE-2021-0256 Junos OS: mosquitto Local Privilege Escalation vulnerability in SUID binaries

A sensitive information disclosure vulnerability in the mosquitto message broker of Juniper Networks Junos OS may allow a locally authenticated user with shell access the ability to read portions of sensitive files, such as the master.passwd file. Since mosquitto is shipped with setuid permission...

CVE-2021-0254

CVE-2021-0254 affects Juniper Networks Junos OS, where a buffer size validation issue in the overlayd service (Overlay OAM) can be triggered by unauthenticated, specially crafted UDP packets to port 4789, potentially causing partial DoS or remote code execution. The overlayd daemon runs as root a...

CVE-2021-0254 Junos OS: Remote code execution vulnerability in overlayd service

A buffer size validation vulnerability in the overlayd service of Juniper Networks Junos OS may allow an unauthenticated remote attacker to send specially crafted packets to the device, triggering a partial Denial of Service DoS condition, or leading to remote code execution RCE. Continued receip...

CVE-2021-0253

CVE-2021-0253 : A local command execution vulnerability in Juniper Junos OS on the NFX Series can allow privilege escalation via the Junos Device Management Daemon (JDMD). Affected are NFX Series devices with Junos OS versions starting at 17.2R1 (17.2 up to 17.2R1) and later, with specific exclus...

CVE-2021-0252 Junos OS: NFX Series: Local Code Execution Vulnerability in JDMD Leads to Privilege Escalation

NFX Series devices using Juniper Networks Junos OS are susceptible to a local code execution vulnerability thereby allowing an attacker to elevate their privileges via the Junos Device Management Daemon JDMD process. This issue affects Juniper Networks Junos OS on NFX Series: 18.1 version 18.1R1...

CVE-2021-0253 Junos OS: NFX Series: Local Command Execution Vulnerability in JDMD Leads to Privilege Escalation

NFX Series devices using Juniper Networks Junos OS are susceptible to a local command execution vulnerability thereby allowing an attacker to elevate their privileges via the Junos Device Management Daemon JDMD process. This issue affects Juniper Networks Junos OS on NFX Series 17.2 version 17.2R...

CVE-2021-0252

CVE-2021-0252 affects Juniper Networks Junos OS on NFX Series devices. The issue is a local code execution vulnerability via the Junos Device Management Daemon (JDMD) that can lead to privilege escalation. Affected: NFX Series with Junos OS 18.1R1 and later versions prior to 18.2R3-S5; 18.3 versi...

CVE-2021-0251

CVE-2021-0251 describes a NULL pointer dereference in Juniper Networks Junos OS CPCD daemon (cpcd) on MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC. The flaw allows an attacker to send malformed HTTP packets that crash mspmand and related services, causing a sustained DoS and login denial whil...

CVE-2021-0249 Junos OS: SRX Series: A remote attacker may be able to cause a PFE buffer overflow to arbitrarily remotely execute code or commands on the target device with UTM enabled.

On SRX Series devices configured with UTM services a buffer overflow vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS may allow an attacker to arbitrarily execute code or commands on the target to take over or otherwise impact the device by sending crafted packets to...