Memory corruption

Juniper Junos OS 9.1 through 11.4 before 11.4R11, 12.1 before R10, 12.1X44 before D40, 12.1X46 before D30, 12.1X47 before D11 and 12.147-D15, 12.1X48 before D41 and D62, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4-S2, 13.1X49 before D49, 13.1X50 before 30, 13.2 before R4,...

Authentication flaw

Juniper Junos 11.4 before R12, 12.1 before R10, 12.1X44 before D35, 12.1X45 before D25, 12.1X46 before D20, 12.1X47 before D10, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4-S3, 13.1X49 before D55, 13.1X50 before D30, 13.2 before R4, 13.2X50 before D20, 13.2X51 before D26 and...

CVE-2014-3825

The Juniper SRX Series devices with Junos 11.4 before 11.4R12-S4, 12.1X44 before 12.1X44-D40, 12.1X45 before 12.1X45-D30, 12.1X46 before 12.1X46-D25, and 12.1X47 before 12.1X47-D10, when an Application Layer Gateway ALG is enabled, allows remote attackers to cause a denial of service flowd crash...

CVE-2014-6379

The CVE-2014-6379 entry applies to Juniper Networks Junos OS. When a RADIUS accounting server is configured as the system accounting destination radius, Junos may create an entry in /var/etc/pam_radius.conf, enabling an authentication bypass via unspecified vectors. Affected versions include 11.4...

CVE-2014-3818

CVE-2014-3818 affects Juniper Junos OS versions listed in the description; the flaw is in handling BGP UPDATE messages with 4-byte AS numbers, leading to memory corruption and a DoS in the rpd process (causing a crash/restart). Connected sources confirm a BGP UPDATE DoS condition and provide the ...

CVE-2014-6380

Juniper Junos 11.4 before R11, 12.1 before R9, 12.1X44 before D30, 12.1X45 before D20, 12.1X46 before D15, 12.1X47 before D10, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4, 13.1X49 before D55, 13.1X50 before D30, 13.2 before R4, 13.2X50 before D20, 13.2X51 before D15, 13.2X5...

CVE-2014-6379

Juniper Junos 11.4 before R12, 12.1 before R10, 12.1X44 before D35, 12.1X45 before D25, 12.1X46 before D20, 12.1X47 before D10, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4-S3, 13.1X49 before D55, 13.1X50 before D30, 13.2 before R4, 13.2X50 before D20, 13.2X51 before D26 and...

CVE-2014-3818

Juniper Junos OS 9.1 through 11.4 before 11.4R11, 12.1 before R10, 12.1X44 before D40, 12.1X46 before D30, 12.1X47 before D11 and 12.147-D15, 12.1X48 before D41 and D62, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4-S2, 13.1X49 before D49, 13.1X50 before 30, 13.2 before R4,...

CVE-2014-6378

CVE-2014-6378 affects Juniper Networks Junos OS. The vulnerability arises in RSVP processing where RSVP PATH messages are improperly handled, allowing a remote attacker to cause denial of service by crashing the router protocol daemon (rpd). Affected Junos releases include versions listed in the ...

CVE-2014-6378

Juniper Junos 11.4 before R12-S4, 12.1X44 before D35, 12.1X45 before D30, 12.1X46 before D25, 12.1X47 before D10, 12.2 before R9, 12.2X50 before D70, 12.3 before R7, 13.1 before R4 before S3, 13.1X49 before D55, 13.1X50 before D30, 13.2 before R5, 13.2X50 before D20, 13.2X51 before D26 and D30,...

CVE-2014-6380

Juniper Networks Junos OS is affected by a DoS vulnerability (CVE-2014-6380) involving the em interface when connecting to an internal network. Affected versions include 11.4 before R11, 12.1 before R9, 12.1X44 before D30, 12.1X45 before D20, 12.1X46 before D15, 12.1X47 before D10, 12.2 before R8...

CVE-2014-6377

Juniper JunosE before 13.3.3p0-1, 14.x before 14.3.2, and 15.x before 15.1.0, when DEBUG severity icmpTraffic logging is enabled, allows remote attackers to cause a denial of service SRP reset via a crafted ICMP packet to the 1 interface or 2 loopback IP address, which triggers a processor...

CVE-2014-3825

CVE-2014-3825 affects Juniper SRX Series devices running Junos 11.4 before 11.4R12-S4, 12.1X44 before 12.1X44-D40, 12.1X45 before 12.1X45-D30, 12.1X46 before 12.1X46-D25, and 12.1X47 before 12.1X47-D10. When an Application Layer Gateway (ALG) is enabled, remote attackers can cause a denial of ser...

CVE-2014-6377

CVE-2014-6377 (JunosE): Affected Juniper JunosE releases before 13.3.3p0-1, 14.x before 14.3.2, and 15.x before 15.1.0 are vulnerable when DEBUG severity icmpTraffic logging is enabled. A crafted ICMP packet sent to the interface or loopback IP address can trigger a processor exception in ip_RxDa...

Juniper JunosE Malformed ICMP Remote DoS (JSA10651) (deprecated)

According to its version, the remote Juniper E-Series device is potentially affected by a denial of service vulnerability. This issue is caused by improper processing of malformed ICMP packets into the log format for 'icmpTraffic' logging when 'DEBUG' severity is selected. Note that devices with...

PT-2014-7198

Name of the Vulnerable Software and Affected Versions Juniper JunosE versions prior to 13.3.3p0-1 Juniper JunosE versions 14.x prior to 14.3.2 Juniper JunosE versions 15.x prior to 15.1.0 Description The issue allows remote attackers to cause a denial of service via a crafted ICMP packet to the...

CVE-2014-6377: Undefined Security Weakness

Juniper JunosE before 13.3.3p0-1, 14.x before 14.3.2, and 15.x before 15.1.0, when DEBUG severity icmpTraffic logging is enabled, allows remote attackers to cause a denial of service SRP reset via a crafted ICMP packet to the 1 interface or 2 loopback IP address, which triggers a processor...

CVE-2014-6380: Undefined Security Weakness

Juniper Junos 11.4 before R11, 12.1 before R9, 12.1X44 before D30, 12.1X45 before D20, 12.1X46 before D15, 12.1X47 before D10, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4, 13.1X49 before D55, 13.1X50 before D30, 13.2 before R4, 13.2X50 before D20, 13.2X51 before D15, 13.2X5...

Juniper Junos SRX Series ALG 'flowd' Remote DoS (JSA10650)

According to its self-reported version number, the remote Juniper Junos SRX series device is affected by a denial of service vulnerability related to ALG Application Layer Gateway. A remote attacker can exploit this issue by sending a specially crafted SIP packet to an SRX series device, resultin...

CVE-2014-3818: Improper Restriction of Operations within the Bounds of a Memory Buffer

Juniper Junos OS 9.1 through 11.4 before 11.4R11, 12.1 before R10, 12.1X44 before D40, 12.1X46 before D30, 12.1X47 before D11 and 12.147-D15, 12.1X48 before D41 and D62, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4-S2, 13.1X49 before D49, 13.1X50 before 30, 13.2 before R4,...