CVE-2020-1682

CVE-2020-1682 (Junos OS) affects SRX1500, SRX4100, SRX4200, NFX150, NFX250, and vSRX-based platforms. An input validation vulnerability exists in the srxpfe process that allows an attacker to crash the process by issuing specific maintenance commands, causing a Denial of Service. The srxpfe proce...

CVE-2020-1683

CVE-2020-1683 is a memory-leak DoS issue in Juniper Networks Junos OS triggered by a specific SNMP OID poll, leading to a kernel crash (vmcore). Affected Junos OS versions include 17.4R3; 18.1R3-S5 and later to 18.1R3-S10 (excluded), 18.2R3 and later to before 18.2R3-S3, various 18.2X75 builds be...

CVE-2020-1683 Junos OS: Memory leak leads to kernel crash (vmcore) due to SNMP polling

On Juniper Networks Junos OS devices, a specific SNMP OID poll causes a memory leak which over time leads to a kernel crash vmcore. Prior to the kernel crash other processes might be impacted, such as failure to establish SSH connection to the device. The administrator can monitor the output of t...

CVE-2020-1682 Junos OS: SRX1500, vSRX, SRX4K, NFX150, NFX250: Denial of service vulnerability executing local CLI command

An input validation vulnerability exists in Juniper Networks Junos OS, allowing an attacker to crash the srxpfe process, causing a Denial of Service DoS through the use of specific maintenance commands. The srxpfe process restarts automatically, but continuous execution of the commands could lead...

CVE-2020-1681

CVE-2020-1681 affects Juniper Networks Junos OS Evolved prior to 20.1R2-EVO. A malformed IPv6 NDP packet can crash the ndp process, causing a DoS with the service restarting automatically; extended malformed traffic can impair IPv6 neighbor learning. The issue is limited to IPv6 NDP packet proces...

CVE-2020-1680 Junos OS: MX Series: MS-MPC/MIC might crash when processing malformed IPv6 packet in NAT64 configuration.

On Juniper Networks MX Series with MS-MIC or MS-MPC card configured with NAT64 configuration, receipt of a malformed IPv6 packet may crash the MS-PIC component on MS-MIC or MS-MPC. This issue occurs when a multiservice card is translating the malformed IPv6 packet to IPv4 packet. An unauthenticat...

CVE-2020-1679

CVE-2020-1679 affects Juniper Junos OS on PTX/QFX Series when packet sampling is configured with tunnel-observation mpls-over-udp. A malformed packet can stall the Kernel Routing Table (KRT) queue, causing forwarding issues. Affected versions (examples): 17.2X75 prior to 17.2X75-D105; 18.1R3-S11;...

CVE-2020-1680

CVE-2020-1680 affects Juniper Networks Junos OS on MX Series with MS-MIC/MS-MPC NAT64 translation. A malformed IPv6 packet can crash the MS-PIC component on the multiservice card, caused by translating the IPv6 packet to IPv4, allowing an unauthenticated attacker to trigger repeated MS-PIC crashe...

CVE-2020-1679 Junos OS: PTX/QFX Series: Kernel Routing Table (KRT) queue stuck after packet sampling a malformed packet when the tunnel-observation mpls-over-udp configuration is enabled.

On Juniper Networks PTX and QFX Series devices with packet sampling configured using tunnel-observation mpls-over-udp, sampling of a malformed packet can cause the Kernel Routing Table KRT queue to become stuck. KRT is the module within the Routing Process Daemon RPD that synchronized the routing...

CVE-2020-1678

CVE-2020-1678 affects Juniper Networks Junos OS and Junos OS Evolved on devices with EVPN configured. The issue is a slow memory leak triggered by receipt of specific BGP EVPN traffic, which can exhaust memory and cause the rpd process to crash. The vulnerability is evidenced by repeated queries ...

CVE-2020-1678 Junos OS and Junos OS Evolved: RPD can crash due to a slow memory leak.

On Juniper Networks Junos OS and Junos OS Evolved platforms with EVPN configured, receipt of specific BGP packets causes a slow memory leak. If the memory is exhausted the rpd process might crash. If the issue occurs, the memory leak could be seen by executing the "show task memory detail | match...

CVE-2020-1677

The CVE-2020-1677 entry concerns Juniper Networks Mist Cloud UI where, when SAML authentication is enabled, the implementation may incorrectly process sub-elements in SAML responses. This could allow a remote attacker to modify a valid SAML response without invalidating its cryptographic signatur...

CVE-2020-1677 Juniper Networks Mist Cloud UI: SAML authentication attribute elements handling vulnerability.

When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle child elements in SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating its cryptographic signature to bypass SAML authentication security controls. This issue...

CVE-2020-1675

CVE-2020-1675 affects Juniper Networks Mist Cloud UI where, with SAML authentication enabled, invalid authentication certificates may be processed incorrectly, potentially allowing a network-based attacker to access unauthorized data. The issue affects Mist Cloud UI versions prior to September 2,...

CVE-2020-1675 Juniper Networks Mist Cloud UI: SAML authentication certificate vulnerability.

When Security Assertion Markup Language SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly process invalid authentication certificates which could allow a malicious network-based user to access unauthorized data. This issue affects all Juniper Networks Mist Cloud UI...

CVE-2020-1676 Juniper Networks Mist Cloud UI: SAML authentication response handling vulnerability.

When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating its cryptographic signature to bypass SAML authentication security controls. This issue affects all Juniper...

CVE-2020-1676

Juniper Networks Mist Cloud UI suffers a SAML authentication handling vulnerability: when SAML is enabled, the UI may incorrectly process SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating the cryptographic signature and bypass SAML authentication cont...

CVE-2020-1673

CVE-2020-1673 is a J-Web/XSS vulnerability in Juniper Networks Junos OS where insufficient XSS protection on HTTP/HTTPS web services can allow an unauthenticated attacker to hijack a user session and impersonate the targeted user’s admin actions. Affected products are Junos OS devices with HTTP/H...

CVE-2020-1671

CVE-2020-1671 affects Junos OS when JDHCPD handles malformed DHCPv6 packets on DHCPv6 local server or Relay Agent configurations, causing a crash and JDHCPD restart. Affected are Junos OS versions: 17.4 prior to 17.4R2-S12 and 17.4R3-S3; 18.1 prior to 18.1R3-S11; 18.2 prior to 18.2R3-S6; 18.2X75 ...

CVE-2020-1670 Junos OS: EX4300 Series: High CPU load due to receipt of specific IPv4 packets

On Juniper Networks EX4300 Series, receipt of a stream of specific IPv4 packets can cause Routing Engine RE high CPU load, which could lead to network protocol operation issue and traffic interruption. This specific packets can originate only from within the broadcast domain where the device is...