CVE-2016-1275

CVE-2016-1275 affects Juniper Junos OS prior to certain releases (13.3R9, 14.1R6 to 14.1R6-S1, and 14.1 prior to 14.1R7) when VPLS routing-instances are configured. The vulnerability allows a remote, adjacent attacker to obtain sensitive mbuf information by injecting a flood of Ethernet frames wi...

CVE-2016-1279

CVE-2016-1279 affects Juniper Networks Junos OS J-Web. The vulnerability could allow a remote attacker to obtain sensitive information and thereby gain administrative privileges via unspecified vectors. Affected Junos versions include J-Web on 12.1X46-D45/50, 12.1X47-D35, 12.3R12, 12.3X48-D25, 13...

CVE-2016-1275

Juniper Junos OS before 13.3R9, 14.1R6 before 14.1R6-S1, and 14.1 before 14.1R7, when configured with VPLS routing-instances, allows remote attackers to obtain sensitive mbuf information by injecting a flood of Ethernet frames with IPv6 MAC addresses directly into a connected interface...

Juniper ScreenOS 6.3.x < 6.3.0r22 Multiple Vulnerabilities in OpenSSL (JSA10733)

The version of Juniper ScreenOS running on the remote host is 6.3.x prior to 6.3.0r22. It is, therefore, affected by multiple vulnerabilities in its bundled version of OpenSSL : - A denial of service vulnerability exists due to improper validation of the content and length of the ASN1TIME string ...

Juniper Junos Denial of Service Vulnerability (CNVD-2016-06867)

Juniper Junos is a Juniper Networks network operating system designed for the company's hardware systems. The operating system provides a secure programming interface and the Junos SDK. Juniper Junos has a denial of service vulnerability that could be exploited by an attacker to cause a denial of...

Juniper Acknowledges Equation Group Targeted ScreenOS

Juniper Networks on Friday acknowledged that exploits implants contained in the ShadowBrokers data dump do indeed target its products. “As part of our analysis of these files, we identified an attack against NetScreen devices running ScreenOS,” said Derrick Scholl, director of security incident...

ShadowBrokers' Leak Has 'Strong Connection' to Equation Group

A high-stakes game of attribution started by a group claiming to have a cache of exploits belonging to the Equation Group took a somewhat definitive turn Tuesday afternoon. Researchers at Kaspersky Lab yesterday confirmed a connection between the tools currently up for auction by the ShadowBroker...

Juniper Hotfixes Shut Down IPv6 DDoS Vulnerability

Juniper Networks announced the availability of hotfixes for a serious vulnerability in the handling of IPv6 packets that is says could leave its Junos OS and JUNOSe routers open to a denial of service DoS attack. The hotfixes come more than two months after the vulnerabilities were publicly...

CVE-2016-1278

Juniper Junos OS before 12.1X46-D50 on SRX Series devices reverts to "safe mode" authentication and allows root CLI logins without a password after a failed upgrade to 12.1X46, which might allow local users to gain privileges by leveraging use of the "request system software" command with the...

CVE-2016-1278

Juniper Junos OS before 12.1X46-D50 on SRX Series devices reverts to "safe mode" authentication and allows root CLI logins without a password after a failed upgrade to 12.1X46, which might allow local users to gain privileges by leveraging use of the "request system software" command with the...

CVE-2016-1276

Juniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D23, 12.3X48 before 12.3X48-D25, and 15.1X49 before 15.1X49-D40 on a High-End SRX-Series chassis system with one or more Application Layer Gateways ALGs enabled allow remote attackers to cause a denial of service CPU consumption, fab lin...

Design/Logic Flaw

Juniper Junos OS before 12.1X46-D50 on SRX Series devices reverts to "safe mode" authentication and allows root CLI logins without a password after a failed upgrade to 12.1X46, which might allow local users to gain privileges by leveraging use of the "request system software" command with the...

Design/Logic Flaw

Juniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D23, 12.3X48 before 12.3X48-D25, and 15.1X49 before 15.1X49-D40 on a High-End SRX-Series chassis system with one or more Application Layer Gateways ALGs enabled allow remote attackers to cause a denial of service CPU consumption, fab lin...

CVE-2016-1278

Juniper Junos OS before 12.1X46-D50 on SRX Series devices reverts to "safe mode" authentication and allows root CLI logins without a password after a failed upgrade to 12.1X46, which might allow local users to gain privileges by leveraging use of the "request system software" command with the...

CVE-2016-1276

CVE-2016-1276 affects Juniper Junos OS on High-End SRX-Series chassis with one or more Application Layer Gateways (ALGs) enabled. A DoS can be triggered by remote attackers via in-transit traffic matching ALG rules, causing CPU consumption, fab link failure, or flip-flop failovers. Affected versi...

CVE-2016-1276

Juniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D23, 12.3X48 before 12.3X48-D25, and 15.1X49 before 15.1X49-D40 on a High-End SRX-Series chassis system with one or more Application Layer Gateways ALGs enabled allow remote attackers to cause a denial of service CPU consumption, fab lin...

CVE-2016-1278

CVE-2016-1278 affects Juniper Junos OS on SRX Series devices. A failed upgrade to 12.1X46 can cause the device to revert to a safe mode with a flaw that allows root CLI logins without a password via the partition option of the upgrade, enabling local privilege escalation. Affected component is th...

Juniper Junos Denial of Service Vulnerability (CNVD-2016-05828)

Juniper Junos is a Juniper Networks network operating system designed for the company's hardware systems. The operating system provides a secure programming interface and the Junos SDK. A denial of service vulnerability exists in Juniper Junos. An attacker could exploit this vulnerability to caus...

Juniper Protect-RE Firewall Filter Security Bypass Vulnerability

Juniper Protect-RE Firewall Filter is a suite of firewall filtering software. A security bypass vulnerability exists in Juniper Protect-RE Firewall Filter, which can be exploited by remote attackers to bypass security restrictions and perform unauthorized operations...

Juniper Junos Crafted UDP Packet Handling DoS (JSA10758)

According to its self-reported version number and architecture, the remote Juniper Junos device is affected by a denial of service vulnerability in the 64-bit routing engine. An unauthenticated, remote attacker can exploit this, via a specially crafted UDP packet sent to an interface IP address, ...