CVE-2019-0075

The CVE-2019-0075 issue affects Juniper Networks Junos OS on SRX Series, specifically the srxpfe process when handling Protocol Independent Multicast (PIM) messages. A vulnerable state can cause the srxpfe process to crash and trigger an FPC reboot, potentially leading to an extended denial-of-se...

CVE-2019-0072

Summary: CVE-2019-0072 describes an information-disclosure vulnerability in Juniper Networks SBR Carrier related to the identity and access management certificate generation procedure. Affected versions are 8.4.1 before 8.4.1R13 and 8.5.0 before 8.5.0R4. The issue arises from unprotected storage ...

CVE-2019-0073

CVE-2019-0073 describes a local vulnerability in Juniper Networks Junos OS where PKI keys exported via the command run request security pki key-pair export may have insecure file permissions. This could allow a local user with shell access to read those keys. Affected releases include Junos OS 15...

CVE-2019-0074

The CVE-2019-0074 issue is a path traversal vulnerability in Juniper Junos OS affecting NFX150, QFX10K, EX9200, MX, and PTX series with NG-RE (vmhost). A local authenticated attacker can read sensitive system files via traversal in NG-RE paths. Affected are multiple firmware tracks: 15.1F before ...

CVE-2019-0072 SBR Carrier: A vulnerability in the identity and access management certificate generation procedure allows a local attacker to gain access to confidential information.

An Unprotected Storage of Credentials vulnerability in the identity and access management certificate generation procedure allows a local attacker to gain access to confidential information. This issue affects: Juniper Networks SBR Carrier: 8.4.1 versions prior to 8.4.1R13; 8.5.0 versions prior t...

CVE-2019-0075 Junos OS: SRX Series: Denial of Service vulnerability in srxpfe related to PIM

A vulnerability in the srxpfe process on Protocol Independent Multicast PIM enabled SRX series devices may lead to crash of the srxpfe process and an FPC reboot while processing PIM messages. Sustained receipt of these packets may lead to an extended denial of service condition. Affected releases...

CVE-2019-0047 Junos OS: Persistent XSS vulnerability in J-Web

A persistent Cross-Site Scripting XSS vulnerability in Junos OS J-Web interface may allow remote unauthenticated attackers to perform administrative actions on the Junos device. Successful exploitation requires a Junos administrator to first perform certain diagnostic actions on J-Web. This issue...

CVE-2019-0054 Junos OS: SRX Series: An attacker may be able to perform Man-in-the-Middle (MitM) attacks during app-id signature updates.

An Improper Certificate Validation weakness in the SRX Series Application Identification app-id signature update client of Juniper Networks Junos OS allows an attacker to perform Man-in-the-Middle MitM attacks which may compromise the integrity and confidentiality of the device. This issue affect...

CVE-2019-0062 Junos OS: Session fixation vulnerability in J-Web

A session fixation vulnerability in J-Web on Junos OS may allow an attacker to use social engineering techniques to fix and hijack a J-Web administrators web session and potentially gain administrative access to the device. This issue affects: Juniper Networks Junos OS 12.3 versions prior to...

CVE-2019-0068 Junos OS: SRX Series: Denial of Service vulnerability in flowd due to multicast packets

The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending the specific multicast packets, an attacker can repeatedly crash the flowd process causing a sustained Denial of Service. This issue affects Juniper...

CVE-2019-0063

CVE-2019-0063 concerns Juniper Networks Junos OS on MX Series BRAS configured as BNG with DHCPv6 enabled, where a specifically crafted DHCP response on a subscriber interface can crash the jdhcpd daemon. The crash triggers an automatic restart, but repeated crafted messages may cause an extended ...

CVE-2019-0059

CVE-2019-0059 describes a memory leak in Junos OS routing protocol process (rdp) that can cause a Denial of Service when specific BGP state commands are received from a peered host. Affected are Junos OS 18.1 versions prior to 18.1R2-S4 and 18.1R3-S1; and 18.1X75 all versions. Versions before 18....

CVE-2019-0063 Junos OS: MX Series: jdhcpd crash when receiving a specific crafted DHCP response message

When an MX Series Broadband Remote Access Server BRAS is configured as a Broadband Network Gateway BNG with DHCPv6 enabled, jdhcpd might crash when receiving a specific crafted DHCP response message on a subscriber interface. The daemon automatically restarts without intervention, but continuous...

CVE-2019-0068

CVE-2019-0068 affects Juniper Networks Junos OS on SRX Series, where the SRX flowd process may crash and restart when handling specific multicast packets. A remote, unauthenticated attacker can trigger a sustained Denial of Service by repeatedly sending the crafted multicast traffic, causing the ...

CVE-2019-0061 Junos OS: Insecure management daemon (MGD) configuration may allow local privilege escalation

The management daemon MGD is responsible for all configuration and management operations in Junos OS. The Junos CLI communicates with MGD over an internal unix-domain socket and is granted special permission to open this protected mode socket. Due to a misconfiguration of the internal socket, a...

CVE-2019-0047

CVE-2019-0047 is a reported persistent XSS vulnerability in the Junos OS J-Web interface. The description and connected sources confirm that remote attackers could leverage J-Web to perform administrative actions after a prerequisite diagnostic action by a Junos administrator. Affected are Junipe...

CVE-2019-0066 Junos OS: A malformed IPv4 packet received by Junos in an NG-mVPN scenario may cause the routing protocol daemon (rpd) process to core

An unexpected status return value weakness in the Next-Generation Multicast VPN NG-mVPN service of Juniper Networks Junos OS allows attacker to cause a Denial of Service DoS condition and core the routing protocol daemon rpd process when a specific malformed IPv4 packet is received by the device...

CVE-2019-0064 Junos OS: SRX5000 Series: flowd process crash due to receipt of specific TCP packet

On SRX5000 Series devices, if 'set security zones security-zone tcp-rst' is configured, the flowd process may crash when a specific TCP packet is received by the device and triggers a new session. The process restarts automatically. However, receipt of a constant stream of these TCP packets may...

CVE-2019-0070

CVE-2019-0070 affects Juniper Networks Junos OS on NFX Series prior to 18.2R1. The issue is an improper input validation weakness that allows a local attacker to elevate privileges and take control of the entire system. Affected component: Junos OS on NFX Series; root cause: input validation fail...

CVE-2019-0061

CVE-2019-0061 describes a local privilege-escalation flaw in Junos OS where a misconfigured internal unix-domain socket in the management daemon (MGD) can allow a local, authenticated user to gain administrative privileges. Affected are Linux-based Junos deployments (FreeBSD unaffected); exploita...