6618 matches found
CVE-2018-0017 SRX Series: Denial of service vulnerability in flowd daemon on devices configured with NAT-PT
A vulnerability in the Network Address Translation - Protocol Translation NAT-PT feature of Junos OS on SRX series devices may allow a certain valid IPv6 packet to crash the flowd daemon. Repeated crashes of the flowd daemon can result in an extended denial of service condition for the SRX device...
CVE-2018-0016 Junos OS: Kernel crash upon receipt of crafted CLNP datagrams
Receipt of a specially crafted Connectionless Network Protocol CLNP datagram destined to an interface of a Junos OS device may result in a kernel crash or lead to remote code execution. Devices are only vulnerable to the specially crafted CLNP datagram if 'clns-routing' or ES-IS is explicitly...
CVE-2018-0022
CVE-2018-0022 documents a mbuf leak in Juniper Junos OS when VPLS routing-instances process specific MPLS packets, causing mbuf exhaustion and potential device inaccessibility requiring a restart. Affected are Junos OS with VPLS configured across multiple releases (list of versions in the CVE). T...
CVE-2018-0018
The CVE affects SRX Series devices running Junos OS where IDP policies are compiled. A crafted packet may bypass firewall rules during IDP policy compilation, causing information disclosure and potential control of the target or protected devices. Affected Junos OS releases are 12.1X46 before D60...
CVE-2018-0020
CVE-2018-0020 affects Junos OS where receipt of a malformed BGP UPDATE can cause the routing process daemon (rpd) to crash and restart. Repeated malformed updates may lead to an extended denial-of-service on the device, though the malformed update does not propagate to other BGP peers. Affected J...
CVE-2018-0020 Junos OS: rpd daemon cores due to malformed BGP UPDATE packet
Junos OS may be impacted by the receipt of a malformed BGP UPDATE which can lead to a routing process daemon rpd crash and restart. Receipt of a repeated malformed BGP UPDATEs can result in an extended denial of service condition for the device. This malformed BGP UPDATE does not propagate to oth...
CVE-2018-0016
CVE-2018-0016 affects Junos OS 15.1 (and related 15.1.x and 15.1X5x/15.1X53 lines) where CLNS routing or ES-IS is configured. A specially crafted CLNP datagram can crash the kernel or enable remote code execution on interfaces that have CLNS routing/ESIS enabled; devices with CLNS disabled are no...
CVE-2018-0021 Junos OS: Short MacSec keys may allow man-in-the-middle attacks.
If all 64 digits of the connectivity association name CKN key or all 32 digits of the connectivity association key CAK key are not configured, all remaining digits will be auto-configured to 0. Hence, Juniper devices configured with short MacSec keys are at risk to an increased likelihood that an...
CVE-2018-0021
CVE-2018-0021 affects Junos OS when MacSec CKN/CAK keys are configured with short values. If all 64 CKN digits or all 32 CAK digits are not configured, remaining digits auto-configure to 0, increasing the feasibility of dictionary/brute-force attacks to recover key material via spoofed packets. A...
CVE-2018-0023
CVE-2018-0023 affects JSNAPy, the Python-based Junos Snapshot Administrator. It exploits insecure, world-writable default configuration and sample files created in JSNAPy versions prior to 1.3.0, allowing unprivileged local users to alter files under the JSNAPy directory (insert unintended action...
tcpdump: Buffer over-read in print-juniper.c:juniper_parse_header() in Juniper protocols parser
The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniperparseheader...
tcpdump: Buffer over-read in print-juniper.c, several functions in Juniper protocols parser
The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions...
Hardcoded credentials
The MySQL server in Juniper Networks Junos Space before 13.3R1.8 has an unspecified account with a hardcoded password, which allows remote attackers to obtain sensitive information and consequently obtain administrative control by leveraging database access...
CVE-2014-3413
The MySQL server in Juniper Networks Junos Space before 13.3R1.8 has an unspecified account with a hardcoded password, which allows remote attackers to obtain sensitive information and consequently obtain administrative control by leveraging database access...
CVE-2014-3413
The CVE-2014-3413 vulnerability affects Juniper Networks Junos Space prior to 13.3R1.8, where the MySQL server contains an unspecified hardcoded account password. This allows remote attackers with database access to obtain sensitive information and potentially gain administrative control. Affecte...
CVE-2014-3413
The MySQL server in Juniper Networks Junos Space before 13.3R1.8 has an unspecified account with a hardcoded password, which allows remote attackers to obtain sensitive information and consequently obtain administrative control by leveraging database access...
With the Carbon Black Integration Network (CbIN), We’re Delivering Stronger Cybersecurity via Open APIs
Today is another exciting day for Carbon Black, as we unveil the Carbon Black Integration Network CbIN, a technology partner program designed to improve cybersecurity through collective defense and powered by Carbon Black’s open APIs and the Cb Predictive Security CloudTM PSC. Security teams toda...
Juniper Junos Space < 17.2R1 Multiple Vulnerabilities (JSA10838)
According to its self-reported version number, the remote Junos Space version is prior to 17.2R1. It is, therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108520; scriptversion"1.8";...
Juniper AppFormix Elevation of Privilege Vulnerability
Juniper AppFormix is a Juniper Networks optimization and management software platform for public, private and hybrid clouds. A security vulnerability exists in Juniper AppFormix version 2.7, version 2.11 prior to 2.11.3, and version 2.15 prior to 2.15.2. An attacker could exploit the vulnerabilit...
