Default configuration

If REST API is enabled, the Junos OS login credentials are vulnerable to brute force attacks. The high default connection limit of the REST API may allow an attacker to brute-force passwords using advanced scripting techniques. Additionally, administrators who do not enforce a strong password...

Stack overflow

A certain sequence of valid BGP or IPv6 BFD packets may trigger a stack based buffer overflow in the Junos OS Packet Forwarding Engine manager FXPC process on QFX5000 series, EX4300, EX4600 devices. This issue can result in a crash of the fxpc daemon or may potentially lead to remote code...

Design/Logic Flaw

Receipt of a specific packet on the out-of-band management interface fxp0 may cause the system to crash and restart vmcore. By continuously sending a specially crafted packet to the fxp0 interface, an attacker can repetitively crash the rpd process causing prolonged Denial of Service DoS. Affecte...

Design/Logic Flaw

A firewall bypass vulnerability in the proxy ARP service of Juniper Networks Junos OS allows an attacker to cause a high CPU condition leading to a Denial of Service DoS. This issue affects only IPv4. Affected releases are Juniper Networks Junos OS: 12.1X46 versions above and including 12.1X46-D2...

CVE-2019-0040

On Junos OS, rpcbind should only be listening to port 111 on the internal routing instance IRI. External packets destined to port 111 should be dropped. Due to an information leak vulnerability, responses were being generated from the source address of the management interface e.g. fxp0 thus...

CVE-2019-0033

A firewall bypass vulnerability in the proxy ARP service of Juniper Networks Junos OS allows an attacker to cause a high CPU condition leading to a Denial of Service DoS. This issue affects only IPv4. Affected releases are Juniper Networks Junos OS: 12.1X46 versions above and including 12.1X46-D2...

Authentication flaw

A password management issue exists where the Organization authentication username and password were stored in plaintext in log files. A locally authenticated attacker who is able to access these stored plaintext credentials can use them to login to the Organization. Affected products are: Juniper...

CVE-2019-0031

The CVE-2019-0031 issue affects Juniper Networks Junos OS, specifically the jdhcpd daemon used to respond to IPv6 requests. A crafted sequence of IPv6 DHCP packets can trigger memory resource consumption in jdhcpd, leading to a Denial of Service where subsequent IPv4/IPv6 requests may be affected...

CVE-2019-0043 Junos OS: RPD process crashes upon receipt of a specific SNMP packet

In MPLS environments, receipt of a specific SNMP packet may cause the routing protocol daemon RPD process to crash and restart. By continuously sending a specially crafted SNMP packet, an attacker can repetitively crash the RPD process causing prolonged denial of service. No other Juniper Network...

CVE-2019-0033 SRX Series: A remote attacker may cause a high CPU Denial of Service to the device when proxy ARP is configured.

A firewall bypass vulnerability in the proxy ARP service of Juniper Networks Junos OS allows an attacker to cause a high CPU condition leading to a Denial of Service DoS. This issue affects only IPv4. Affected releases are Juniper Networks Junos OS: 12.1X46 versions above and including 12.1X46-D2...

CVE-2019-0028 Junos OS: RPD process crashes due to specific BGP peer restarts condition.

On Junos devices with the BGP graceful restart helper mode enabled or the BGP graceful restart mechanism enabled, a BGP session restart on a remote peer that has the graceful restart mechanism enabled may cause the local routing protocol daemon RPD process to crash and restart. By simulating a...

CVE-2019-0041 Junos OS: EX4300-MP Series: IP transit traffic can reach the control plane via loopback interface.

On EX4300-MP Series devices with any lo0 filters applied, transit network traffic may reach the control plane via loopback interface lo0. The device may fail to forward such traffic. This issue affects Juniper Networks Junos OS 18.2 versions prior to 18.2R1-S2, 18.2R2 on EX4300-MP Series. This...

CVE-2019-0042

Juniper Identity Management Service (JIMS) for Windows versions prior to 1.1.4 is affected. An input validation issue in JIMS may cause it to send an incorrect message to associated SRX services gateways, potentially allowing an attacker with physical access to bypass SRX firewall policies or tri...

CVE-2019-0037 Junos OS: jdhcpd crash upon receipt of crafted DHCPv6 solicit message

In a Dynamic Host Configuration Protocol version 6 DHCPv6 environment, the jdhcpd daemon may crash and restart upon receipt of certain DHCPv6 solicit messages received from a DHCPv6 client. By continuously sending the same crafted packet, an attacker can repeatedly crash the jdhcpd process causin...

CVE-2019-0041

CVE-2019-0041 affects Juniper Networks Junos OS on the EX4300-MP Series. With any lo0 filters applied, transit network traffic could reach the control plane via the loopback interface (lo0) and the device may fail to forward such traffic. Affected software: Junos OS 18.2 prior to 18.2R1-S2 and 18...

CVE-2019-0032

The CVE describes an authentication credential leakage issue where Organisation login usernames and passwords are stored in plaintext in log files. A locally authenticated attacker who can access these logs could use the plaintext credentials to login. Affected products are Juniper Networks Servi...

CVE-2019-0037

CVE-2019-0037 describes a denial-of-service in the Juniper Junos jdhcpd daemon. A crafted DHCPv6 solicit message can cause the jdhcpd process to crash and restart, leading to sustained DoS for both IPv4 and IPv6 clients. Affected Junos OS releases are numerous, spanning 15.1 (before 15.1F6-S12, 1...

CVE-2019-0033

CVE-2019-0033: A firewall bypass vulnerability in the proxy ARP service of Juniper Networks Junos OS can cause a high CPU condition leading to a Denial of Service (DoS). Affected products: Junos OS releases across multiple lines (e.g., 12.1X46 family with builds D25–D71, 12.1X46-D73 on SRX Series...

CVE-2019-0039

CVE-2019-0039 affects Junos OS where REST API is enabled, enabling brute-force login attempts due to a high default connection limit. Publicly documented details list affected Junos OS versions (e.g., 14.1X53 before 14.1X53-D49; 15.1 family before various 15.x builds; up to 18.3R1-S1), with remed...

CVE-2019-0036

CVE-2019-0036 affects Juniper Networks Junos OS and causes stateless firewall filter terms named like internal-n (for example internal-1) to be silently ignored during configuration. The config commits without error, but the filter criteria can inadvertently match all packets, leading to unintend...