CVE-2021-0238

CVE-2021-0238 affects Junos OS on MX Series: repeatedly executing a CLI command may exhaust disk space, causing partial availability impact. Vulnerable versions include MX Series 17.3R1 and newer, up to but not including 17.4R3-S5, then 18.1–20.4 with various sub-versions listed; the issue does n...

CVE-2021-0236

The CVE-2021-0236 issue affects Juniper Networks Junos OS and Junos OS Evolved, specifically MP-BGP VPNv6 FlowSpec processing. The root cause is an improper check for unusual or exceptional conditions in the RPD when handling a matching BGP FlowSpec packet, leading to a crash and restart and a su...

CVE-2021-0236 Junos OS: A specific BGP VPNv6 flowspec message causes routing protocol daemon (rpd) process to crash with a core.

Due to an improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved the Routing Protocol Daemon RPD service, upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, crashes and restarts causing a Denial of...

CVE-2021-0235 Junos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series: In a multi-tenant environment, a tenant host administrator may configure logical firewall isolation affecting other tenant networks

On SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series devices using tenant services on Juniper Networks Junos OS, due to incorrect permission scheme assigned to tenant system administrators, a tenant system administrator may inadvertently send their network traffic to...

CVE-2021-0235

The CVE-2021-0235 issue affects Juniper Networks Junos OS on SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, and vSRX Series in multi-tenant environments. Root cause: incorrect permission scheme assigned to tenant system administrators, which may allow a tenant admin to misdire...

CVE-2021-0234

CVE-2021-0234 affects Juniper Networks Junos OS on QFX5100-96S with QFX 5e Series image. The issue is an improper initialization that prevents ddos-protection changes from taking effect beyond default DDoS settings configured via CLI. The ddos-protection (jddosd) daemon keeps the device functioni...

CVE-2021-0234 Junos OS: QFX5100-96S: DDoS protection does not work as expected.

Due to an improper Initialization vulnerability on Juniper Networks Junos OS QFX5100-96S devices with QFX 5e Series image installed, ddos-protection configuration changes will not take effect beyond the default DDoS Distributed Denial of Service settings when configured from the CLI. The DDoS...

CVE-2021-0233

CVE-2021-0233 affects Juniper Networks Junos OS on ACX500 Series and ACX4000 Series, where a high rate of specific packets can crash the Forwarding Engine Board (FFEB), causing DoS. Affects 17.4 versions prior to 17.4R3-S2; remediation is to upgrade to 17.4R3-S2 or later (per multiple sources). I...

CVE-2021-0233 Junos OS: ACX500 Series, ACX4000 Series: Denial of Service due to FFEB crash while processing high rate of specific packets.

A vulnerability in Juniper Networks Junos OS ACX500 Series, ACX4000 Series, may allow an attacker to cause a Denial of Service DoS by sending a high rate of specific packets to the device, resulting in a Forwarding Engine Board FFEB crash. Continued receipt of these packets will sustain the Denia...

CVE-2021-0232 Paragon Active Assurance: Authentication bypass vulnerability in Control Center

An authentication bypass vulnerability in the Juniper Networks Paragon Active Assurance Control Center may allow an attacker with specific information about the deployment to mimic an already registered Test Agent and access its configuration including associated inventory details. If the issue...

CVE-2021-0232

The CVE-2021-0232 affecting Juniper Networks Paragon Active Assurance Control Center is an authentication bypass vulnerability. An attacker with deployment-specific information could mimic an already registered Test Agent and access its configuration and related inventory details, potentially lea...

CVE-2021-0230 Junos OS: SRX Series: Memory leak when querying Aggregated Ethernet (AE) interface statistics

On Juniper Networks SRX Series devices with link aggregation lag configured, executing any operation that fetches Aggregated Ethernet AE interface statistics, including but not limited to SNMP GET requests, causes a slow kernel memory leak. If all the available memory is consumed, the traffic wil...

CVE-2021-0231 Junos OS: SRX, vSRX Series: J-Web Path traversal vulnerability in SRX and vSRX Series leads to information disclosure.

A path traversal vulnerability in the Juniper Networks SRX and vSRX Series may allow an authenticated J-web user to read sensitive system files. This issue affects Juniper Networks Junos OS on SRX and vSRX Series: 19.3 versions prior to 19.3R2-S6, 19.3R3-S1; 19.4 versions prior to 19.4R2-S4,...

CVE-2021-0231

CVE-2021-0231 describes a path-traversal information-disclosure vulnerability in Juniper Networks Junos OS on SRX and vSRX Series. An authenticated J-web user can read sensitive system files. Affected versions include Junos OS 19.3 up to 19.3R2-S6 and 19.3R3-S1; 19.4 up to 19.4R2-S4 and 19.4R3; 2...

CVE-2021-0230

CVE-2021-0230 affects Juniper Networks Junos OS on SRX Series devices with link aggregation (lag). When performing operations that fetch AE interface statistics (e.g., SNMP GET), a slow kernel memory leak can consume memory, potentially impacting traffic and requiring a reboot. Affected versions ...

CVE-2021-0229 Junos OS: Receipt of specific packets could lead to Denial of Service in MQTT Server

An uncontrolled resource consumption vulnerability in Message Queue Telemetry Transport MQTT server of Juniper Networks Junos OS allows an attacker to cause MQTT server to crash and restart leading to a Denial of Service DoS by sending a stream of specific packets. A Juniper Extension Toolkit JET...

CVE-2021-0229

CVE-2021-0229 affects Juniper Networks Junos OS MQTT server used by a JET-related application that subscribes to events via a mosquitto broker. The root cause is uncontrolled resource consumption from continued receipt/processing of crafted MQTT packets, leading to a crash/restart and sustained D...

CVE-2021-0228 Junos OS: MX Series: DDoS LACP violation upon receipt of specific layer 2 frames in EVPN-VXLAN deployment

An improper check for unusual or exceptional conditions vulnerability in Juniper Networks MX Series platforms with Trio-based MPC Modular Port Concentrator deployed in Ethernet VPN EVPN-Virtual Extensible LAN VXLAN configuration, may allow an attacker sending specific Layer 2 traffic to cause...

CVE-2021-0227 Junos OS: SRX Series: Denial of Service in J-Web upon receipt of crafted HTTP packets

An improper restriction of operations within the bounds of a memory buffer vulnerability in Juniper Networks Junos OS J-Web on SRX Series devices allows an attacker to cause Denial of Service DoS by sending certain crafted HTTP packets. Continued receipt and processing of these packets will creat...

CVE-2021-0228

CVE-2021-0228 affects Juniper Networks Junos OS on MX Series with Trio-based MPC in EVPN-VXLAN deployments. The issue is an improper check for unusual conditions that allows a specific Layer 2 traffic pattern to trigger DoS protection unexpectedly, sustaining a DoS condition through continued rec...