Junos OS: EX2300 and EX3400 series: High disk I/O operations may disrupt the communication between RE and PFE (JSA10909)

According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability in which high disk I/O operations may disrupt the communication between the routing engine RE and the packet forwarding engine PFE. C Tenable Network Security, Inc. include'compat.inc'; i...

Junos OS: RPD crash upon receipt of malformed PIM packet (JSA10913)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability. The routing protocol daemon RPD process will crash and restart when a specific invalid IPv4 PIM Join packet is received. While RPD restarts after a crash, repeated...

The vulnerability of the JunOS operating system allows attackers to carry out attacks using predictable IP IDs.

The vulnerability of the JunOS operating system is related to the predictability of port IP IDs. Exploiting this vulnerability allows a remote attacker to carry out attacks using predictable IP IDs...

The vulnerability of the JunOS operating system allows a hacker to execute arbitrary code and cause service interruptions.

The vulnerability of the JunOS operating system arises from an uninitialized function pointer in the Packet Forwarding Engine manager fxpc. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and trigger a service failure using a specially crafted HTTP packet...

The vulnerability of the JunOS operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the JunOS operating system’s kernel is related to errors in processing packets destined for another address. Exploiting this vulnerability can allow an attacker to trigger a kernel error and a service failure by sending specially crafted packets from external control interfac...

The vulnerability of the Routing Protocols Daemon (RPD) implementation in the JunOS operating system allows a hacker to induce a service failure.

The vulnerability of the Routing Protocols Daemon RPD implementation in the JunOS operating system is related to errors in packet processing for the PIM Join protocol. Exploiting this vulnerability can allow an attacker to trigger a device reboot and a service failure...

The vulnerability of the Junos operating system, related to insufficient input data validation, allows attackers to trigger a service failure.

The vulnerability of the Junos operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by using specially crafted HTTP traffic...

The vulnerability of the Junos operating system, related to incorrect data processing, allows a perpetrator to trigger a service failure.

The vulnerability of the Junos operating system is related to incorrect data processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures due to a failure in the routing daemon process rpd...

The vulnerability of the Junos operating system, related to insufficient input data validation, allows attackers to trigger a service failure.

The vulnerability of the Junos operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions due to an uncontrolled recursive cycle in the Broadband Edge Bbe-Smgd subscriber...

The vulnerability of the Junos operating system, related to insufficient input data validation, allows attackers to trigger a service failure.

The vulnerability of the Junos operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by triggering a process failure of FPC...

The vulnerability of the Junos operating system, related to insufficient input data validation, allows attackers to trigger a service failure.

The vulnerability of the Junos operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions due to a failure in the routing daemon process rpd...

Junos OS: Kernel crash after processing specific incoming packet to the out of band management interface (JSA10911)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability. The Junos OS kernel crashes after processing a specific incoming packet to the out of band management interface such as fxp0, me0, em0, vme0 destined for another addres...

CVE-2019-0009

On EX2300 and EX3400 series, high disk I/O operations may disrupt the communication between the routing engine RE and the packet forwarding engine PFE. In a virtual chassis VC deployment, this issue disrupts communication between the VC members. This issue does not affect other Junos platforms...

CVE-2019-0016

A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax interactions obtained from another legitimate delete action performed by another administrative user. Affected releases are Juniper Networks Junos Spac...

CVE-2019-0011

The Junos OS kernel crashes after processing a specific incoming packet to the out of band management interface such as fxp0, me0, em0, vme0 destined for another address. By continuously sending this type of packet, an attacker can repeatedly crash the kernel causing a sustained Denial of Service...

CVE-2019-0007

The vMX Series software uses a predictable IP ID Sequence Number. This leaves the system as well as clients connecting through the device susceptible to a family of attacks which rely on the use of predictable IP ID sequence numbers as their base method of attack. This issue was found during...

CVE-2019-0009

On EX2300 and EX3400 series, high disk I/O operations may disrupt the communication between the routing engine RE and the packet forwarding engine PFE. In a virtual chassis VC deployment, this issue disrupts communication between the VC members. This issue does not affect other Junos platforms...

CVE-2019-0013

The routing protocol daemon RPD process will crash and restart when a specific invalid IPv4 PIM Join packet is received. While RPD restarts after a crash, repeated crashes can result in an extended Denial of Service DoS condition. This issue only affects IPv4 PIM. IPv6 PIM is unaffected by this...

CVE-2019-0015

A vulnerability in the SRX Series Service Gateway allows deleted dynamic VPN users to establish dynamic VPN connections until the device is rebooted. A deleted dynamic VPN connection should be immediately disallowed from establishing new VPN connections. Due to an error in token caching, deleted...

CVE-2019-0007

The vMX Series software uses a predictable IP ID Sequence Number. This leaves the system as well as clients connecting through the device susceptible to a family of attacks which rely on the use of predictable IP ID sequence numbers as their base method of attack. This issue was found during...