CVE-2019-0059

CVE-2019-0059 describes a memory leak in Junos OS routing protocol process (rdp) that can cause a Denial of Service when specific BGP state commands are received from a peered host. Affected are Junos OS 18.1 versions prior to 18.1R2-S4 and 18.1R3-S1; and 18.1X75 all versions. Versions before 18....

CVE-2019-0057 NFX Series: An attacker may be able to take control of the JDM application and subsequently the entire system.

An improper authorization weakness in Juniper Networks Junos OS allows a local authenticated attacker to bypass regular security controls to access the Junos Device Manager JDM application and take control of the system. This issue affects: Juniper Networks Junos OS versions prior to 18.2R1,...

CVE-2019-0050

CVE-2019-0050 affects Juniper Junos OS on SRX1500; the srxpfe process can crash under heavy traffic, causing DoS and potential traffic-forwarding failure. Affected releases include 15.1X49 (before D170), 17.3 (before R3-S7), 17.4 (before R2-S8, R3), 18.1 (before R3-S8), 18.2 (before R3), 18.3 (be...

CVE-2019-0068

CVE-2019-0068 affects Juniper Networks Junos OS on SRX Series, where the SRX flowd process may crash and restart when handling specific multicast packets. A remote, unauthenticated attacker can trigger a sustained Denial of Service by repeatedly sending the crafted multicast traffic, causing the ...

CVE-2019-0057

CVE-2019-0057 : Juniper Junos OS has an improper authorization vulnerability that allows a local authenticated attacker to bypass security controls and take control of the Junos Device Manager (JDM). Affected: Junos OS versions prior to 18.2R1 and 18.2X75-D5. Documents confirm local vector with h...

CVE-2019-0054

CVE-2019-0054 refers to an Improper Certificate Validation weakness in Juniper Networks Junos OS, specifically the SRX Series app-id signature update client. The vulnerability allows a remote attacker to perform a Man-in-the-Middle (MitM) attack, potentially compromising integrity and confidentia...

CVE-2019-0062

CVE-2019-0062 describes a session-fixation vulnerability in Juniper Junos OS J-Web that can allow an attacker to fix and hijack a web session and potentially gain administrative access. Affected products and versions include Juniper EX Series running Junos OS 12.3 before 12.3R12-S15; SRX Series 1...

CVE-2019-0069

The CVE-2019-0069 issue affects Juniper Junos OS on multiple platforms (vSRX, SRX1500/4000, QFX5100/5200/10K, QFX5110, NFX, ACX5000, EX4600, SRX4000, etc.) running a Linux Host OS, where console management port authentication credentials are written to a log file in clear text. The vulnerability ...

CVE-2019-0061

CVE-2019-0061 describes a local privilege-escalation flaw in Junos OS where a misconfigured internal unix-domain socket in the management daemon (MGD) can allow a local, authenticated user to gain administrative privileges. Affected are Linux-based Junos deployments (FreeBSD unaffected); exploita...

CVE-2019-0063

CVE-2019-0063 concerns Juniper Networks Junos OS on MX Series BRAS configured as BNG with DHCPv6 enabled, where a specifically crafted DHCP response on a subscriber interface can crash the jdhcpd daemon. The crash triggers an automatic restart, but repeated crafted messages may cause an extended ...

CVE-2019-0065

Junos OS on MX Series is affected by CVE-2019-0065 due to a malformed SIP packet that, when the SIP ALG is enabled, can crash the MS-PIC component on MS-MIC or MS-MPC and cause a sustained DoS. Affected releases include MX Series across multiple track versions prior to fixed builds: 16.1R7-S5, 16...

CVE-2019-0070 Junos OS: NFX Series: An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions.

An Improper Input Validation weakness allows a malicious local attacker to elevate their permissions to take control of other portions of the NFX platform they should not be able to access, and execute commands outside their authorized scope of control. This leads to the attacker being able to ta...

CVE-2019-0065 Junos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC

On MX Series, when the SIP ALG is enabled, receipt of a certain malformed SIP packet may crash the MS-PIC component on MS-MIC or MS-MPC. By continuously sending a crafted SIP packet, an attacker can repeatedly bring down MS-PIC on MS-MIC/MS-MPC causing a sustained Denial of Service. This issue...

CVE-2019-0063 Junos OS: MX Series: jdhcpd crash when receiving a specific crafted DHCP response message

When an MX Series Broadband Remote Access Server BRAS is configured as a Broadband Network Gateway BNG with DHCPv6 enabled, jdhcpd might crash when receiving a specific crafted DHCP response message on a subscriber interface. The daemon automatically restarts without intervention, but continuous...

CVE-2019-0051 SRX5000 Series: Denial of Service vulnerability in SSL-Proxy feature.

SSL-Proxy feature on SRX devices fails to handle a hardware resource limitation which can be exploited by remote SSL/TLS servers to crash the flowd daemon. Repeated crashes of the flowd daemon can result in an extended denial of service condition. For this issue to occur, clients protected by the...

CVE-2019-0058 Junos OS: SRX Series: A weakness in the Veriexec subsystem may allow privilege escalation.

A vulnerability in the Veriexec subsystem of Juniper Networks Junos OS allowing an attacker to fully compromise the host system. A local authenticated user can elevate privileges to gain full control of the system even if they are specifically denied access to perform certain actions. This issue...

CVE-2019-0056

Juniper Networks Junos OS on MX480/MX960/MX2008/MX2010/MX2020 is affected by CVE-2019-0056. The vulnerability is an Insufficient Resource Pool in OSPF that lets an attacker drive OSPF states to Down, causing a DoS affecting all IPv4/IPv6 traffic routed by OSPF. Exploitation requires a high rate o...

CVE-2019-0064 Junos OS: SRX5000 Series: flowd process crash due to receipt of specific TCP packet

On SRX5000 Series devices, if 'set security zones security-zone tcp-rst' is configured, the flowd process may crash when a specific TCP packet is received by the device and triggers a new session. The process restarts automatically. However, receipt of a constant stream of these TCP packets may...

CVE-2019-0061 Junos OS: Insecure management daemon (MGD) configuration may allow local privilege escalation

The management daemon MGD is responsible for all configuration and management operations in Junos OS. The Junos CLI communicates with MGD over an internal unix-domain socket and is granted special permission to open this protected mode socket. Due to a misconfiguration of the internal socket, a...

CVE-2019-0059 Junos OS: The routing protocol process (rpd) may crash and generate core files upon receipt of specific valid BGP states from a peered host.

A memory leak vulnerability in the of Juniper Networks Junos OS allows an attacker to cause a Denial of Service DoS to the device by sending specific commands from a peered BGP host and having those BGP states delivered to the vulnerable device. This issue affects: Juniper Networks Junos OS: 18.1...