CVE-2017-13004

The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniperparseheader...

UBUNTU-CVE-2017-12993

The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions...

CVE-2017-12993

The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c, several functions...

UBUNTU-CVE-2017-13004

The Juniper protocols parser in tcpdump before 4.9.2 has a buffer over-read in print-juniper.c:juniperparseheader...

PT-2017-12844

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the Juniper protocols parser, specifically in the juniper parse header function within print-juniper.c. This affects the tcpdump protocol analyzer...

Juniper Junos ALG Fragmented Traffic Handling MS-MPC / MS-MIC Service PIC DoS (JSA10794)

According to its self-reported version and model number, the remote Juniper Junos device is affected by a denial of service vulnerability in the Application Layer Gateway ALG that is triggered when handling a large amount of fragmented packets. An unauthenticated, remote attacker can exploit this...

Juniper Junos SRX MACsec Feature Secure Link Failure Silent Fallback Information Disclosure (JSA10790)

According to its self-reported version and model number, the remote Juniper Junos device is affected by an information disclosure vulnerability in the MACsec feature due to error reporting over an unencrypted link when a secure link cannot be established. An adjacent attacker can exploit this to...

Juniper Junos Sockets Library Buffer Overflow Privilege Escalation (JSA10792)

According to its self-reported version number, the remote Juniper Junos device is affected by a privilege escalation vulnerability in the sockets library due to a buffer overflow condition. A local attacker can exploit this to cause a denial of service kernel panic or the execution of arbitrary...

Juniper Junos SRX DHCP flowd DHCP Packet Handling DoS (JSA10789)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by a denial of service vulnerability in flowd due to improper handling of DHCP packets. An unauthenticated, remote attacker can exploit this, via a specially crafted DHCP packet, to crash...

Juniper Junos Virtualized Environment Guest-To-Host Privilege Escalation (JSA10787)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by a privilege escalation vulnerability when running in a virtualized environment due to improper handling of authentication. An attacker on the Junos guest can exploit this to escalate...

Juniper Junos Protocol Daemon (RPD) BGP OPEN Message Handling DoS (JSA10779)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by a denial of service vulnerability in the routing protocol daemon rpd due to improper handling of BGP OPEN messages. An unauthenticated, remote attacker can exploit this, via a specially...

Juniper Junos snmpd SNMP Packet Handling RCE (JSA10793)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by a remote code execution vulnerability in the snmpd daemon due to improper handling of SNMP packets. An unauthenticated, remote attacker can exploit this, via a specially crafted SNMP...

Juniper Junos rpd MPLS Ping Packet Handling DoS (JSA10795)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by a denial of service vulnerability in the rpd daemon due to improper handling of MPLS ping packets. An unauthenticated, remote attacker can exploit this, via a specially crafted MPLS pin...

Juniper Junos SRX Integrated User Firewall Hardcoded Credentials (JSA10791)

According to its self-reported version and configuration, the remote Juniper Junos device has hardcoded credentials for the Integrated User Firewall UserFW services authentication API. An unauthenticated, remote attacker can exploit this to gain administrative access to the device. TRUSTED...

Juniper Junos Multiple OpenSSL Vulnerabilities (JSA10775)

According to its self-reported version number, the remote Juniper Junos device is affected by multiple vulnerabilities : - A carry propagation error exists in the OpenSSL component in the Broadwell-specific Montgomery multiplication procedure when handling input lengths divisible by but longer th...

Juniper Issues Security Alert Tied to Routers and Switches

Juniper Networks warned customers Thursday of a high-risk vulnerability in the GD graphics library that could allow a remote attacker to take control of systems running certain versions of the Junos OS. The alert was in conjunction with a warning from the U.S. Computer Emergency Readiness Team...

Juniper Networks Junos OS libgd Heap Overflow Vulnerability

Junos OS is prone to a heap overflow vulnerability in libgd which allows remote attackers to cause a denial of service or potentially execute arbitrary code. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Juniper Networks Junos OS MPLS DoS Vulnerability

Junos OS is prone to a denial of service vulnerability in rpd when receiving a malformed MPLS ping packet. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Juniper Networks Releases Junos OS Security Advisory

Juniper Networks has released a security advisory that addresses a vulnerability in Junos OS. A remote attacker could exploit this vulnerability to cause a denial-of-service condition. US-CERT encourages users and administrators to review the Juniper Security Advisory and apply necessary updates...

Juniper Junos jdhcpd IPv6 UDP DoS (JSA10800)

According to its self-reported version and model number, the remote Juniper Junos device is affected by a denial of service vulnerability in the jdhcpd daemon when handling invalid IPv6 UDP packets. An unauthenticated, remote attacker can exploit this, via specially crafted IPv6 UDP packets, to...