CVE-2020-1646

CVE-2020-1646 affects Juniper Networks Junos OS and Junos OS Evolved. The issue arises when processing a specific BGP UPDATE for an EBGP peer, causing the routing process daemon (RPD) to crash and restart. The crash occurs only for EBGP UPDATE processing toward an EBGP peer; an EBGP-originating u...

CVE-2020-1647

CVE-2020-1647 (Junos OS SRX ICAP redirect double-free) affects Juniper Networks SRX Series with ICAP redirect service enabled. A double-free vulnerability in the ICAP processing of a specific HTTP message can lead to a Denial of Service or Remote Code Execution . The offending HTTP message may or...

CVE-2020-1645

CVE-2020-1645 affects Juniper Networks Junos MX Series when DNS filtering is enabled and packets trigger the Multiservices PIC Management Daemon (mspmand). The issue can cause mspmand to crash, leading to a restart of the Services PIC; during boot, DNS filtering and other PIC services may be bypa...

CVE-2020-1644

CVE-2020-1644 affects Juniper Networks Junos OS and Junos OS Evolved. A specific BGP UPDATE packet can increment an internal counter incorrectly, leading to the Routing Protocols Daemon (RPD) crash and restart for both IBGP and EBGP multihop in IPv4/IPv6. Affected software ranges include Junos OS...

CVE-2020-1645 Junos OS: MX Series: Services card might restart when DNS filtering is enabled

When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets processed by the Multiservices PIC Management Daemon mspmand process, responsible for managing "URL Filtering service", may crash, causing the...

CVE-2020-1643 Junos OS: EX Series: RPD crash when executing specific "show ospf interface" commands from the CLI with OSPF authentication configured

Execution of the "show ospf interface extensive" or "show ospf interface detail" CLI commands on a Juniper Networks device running Junos OS may cause the routing protocols process RPD to crash and restart if OSPF interface authentication is configured, leading to a Denial of Service DoS. By...

CVE-2020-1641

The CVE-2020-1641 entry describes a race-condition in Juniper Networks Junos OS LLDP handling: crafted LLDP packets can cause the LLDP process to crash, resulting in a Denial of Service. The issue is tied to memory/resource limits (RLIMIT) and may produce multiple LACP flaps after the LLDP crash....

CVE-2020-1643

CVE-2020-1643 affects Juniper Networks Junos OS on EX2300/EX3400 devices with ARM processors. The issue arises when executing specific CLI commands (show ospf interface extensive/detail) with OSPF authentication enabled, which can crash the routing protocols daemon (RPD) and cause a DoS through r...

CVE-2020-1641 Junos OS: A race condition on receipt of crafted LLDP packets leads to a memory leak and an LLDP crash.

A Race Condition vulnerability in Juniper Networks Junos OS LLDP implementation allows an attacker to cause LLDP to crash leading to a Denial of Service DoS. This issue occurs when crafted LLDP packets are received by the device from an adjacent device. Multiple LACP flaps will occur after LLDP...

Juniper Junos BGP Update DoS (JSA11033)

According to the self-reported version of Junos OS on the remote device, it is affected by a denial of service DoS vulnerability due to how it processes a specific UPDATE for an EBGP peer. An unauthenticated, remote attacker can exploit this, by sending a crafted UPDATE, in order to crash the...

Juniper Junos LLDP Packet DoS JSA11027

According to the self-reported version of Junos OS, the remote device is affected by a denial of service DoS vulnerability due to its implementation of LLDP. An unauthenticated attacker can exploit this, by sending crafted LLDP packets from an adjacent device, in order to cause LLDP to crash. Not...

Juniper Junos Denial of Service (DoS) JSA11030

According to the self reported version of Junos OS on the remote device it is affected by a Denial of Service DoS vulnerability. By continuously executing the same CLI commands 'show ospf interface extensive' or 'show ospf interface detail' CLI commands, a local attacker can repeatedly crash the...

Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2020-49039)

Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. A denial-of-service vulnerability exists in Juniper Networks Junos OS's handling of fractional reorganization, which can be exploited by an attacker to cause the Packet Forwarding Engine P...

Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2020-49037)

Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. A denial of service vulnerability in Juniper Networks Junos OS BGP update message handling can be exploited by an attacker to cause the Routing Process Daemon RPD to crash and restart...

Juniper Networks Junos OS Denial of Service Vulnerability

Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. A denial of service vulnerability exists in the Juniper Networks Junos OS MS-PIC component message handling, which can be exploited by an attacker to crash denial of service the MS-PIC...

Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2020-49036)

Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. A denial of service vulnerability exists in the Juniper Networks Junos OS ICAP redirection service handling of malformed HTTP messages, which can be exploited by an attacker to cause a...

Juniper Networks Junos OS Input Validation Error Vulnerability (CNVD-2020-50488)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. An input validation error vulnerability exists in Juniper Networks Junos OS MX Series. An attacker could exploit this...

Juniper Networks Junos OS Input Validation Error Vulnerability (CNVD-2020-51514)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS that arises from the improper use of an authentication...

Juniper Networks Junos OS Buffer Overflow Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS. An attacker could exploit this vulnerability by sending TCP...

Juniper Networks Junos OS Code Issue Vulnerability (CNVD-2020-51515)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A code issue vulnerability exists in Juniper Networks Junos OS MX Series. An attacker could exploit this vulnerability to...