CVE-2018-0009 SRX Series: Firewall bypass vulnerability when UUID with leading zeros is configured.

On Juniper Networks SRX series devices, firewall rules configured to match custom application UUIDs starting with zeros can match all TCP traffic. Due to this issue, traffic that should have been blocked by other rules is permitted to flow through the device resulting in a firewall bypass...

CVE-2018-0004 Junos OS: Kernel Denial of Service Vulnerability

A sustained sequence of different types of normal transit traffic can trigger a high CPU consumption denial of service condition in the Junos OS register and schedule software interrupt handler subsystem when a specific command is issued to the device. This affects one or more threads and...

CVE-2018-0005 Security Bulletin: Junos OS: MAC move limit configured to drop traffic may forward traffic.

QFX and EX Series switches configured to drop traffic when the MAC move limit is exceeded will forward traffic instead of dropping traffic. This can lead to denials of services or other unintended conditions. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D40;...

CVE-2018-0008 Junos OS: commit script may allow unauthenticated root login upon reboot

An unauthenticated root login may allow upon reboot when a commit script is used. A commit script allows a device administrator to execute certain instructions during commit, which is configured under the system scripts commit stanza. Certain commit scripts that work without a problem during norm...

CVE-2018-0007

CVE-2018-0007 describes a memory corruption vulnerability in Junos OS triggered by unauthenticated LLDP packets on local segments, potentially leading to denial of service and, if authenticated on the device, arbitrary code execution with privilege escalation. The issue affects Junos OS releases ...

CVE-2018-0006

The CVE-2018-0006 vulnerability affects Junos OS on devices configured for DHCPv4/v6 over AE auto-sensed VLANs in Broadband Edge deployments. The issue is a Denial of Service caused by a high rate of VLAN authentication requests triggering unbounded memory allocations in the bbe-smgd (BBE subscri...

CVE-2018-0005

CVE-2018-0005 affects Juniper Networks Junos OS on QFX and EX Series switches. When MAC move limit is exceeded, the device forwards instead of dropping, enabling a denial-of-service/unstable behavior. Affected releases: Junos OS 14.1X53 before 14.1X53-D40; 15.1X53 before 15.1X53-D55; 15.1 before ...

CVE-2018-0009

CVE-2018-0009 affects Juniper SRX devices running Junos OS where firewall rules matching custom application UUIDs that begin with zeros can match all TCP traffic, enabling a firewall bypass. Affected releases include Junos OS: 12.1X46 before D71, 12.3X48 before D55, and 15.1X49 before D100 on SRX...

CVE-2018-0012

CVE-2018-0012 affects Junos Space and describes a privilege-escalation vulnerability that could allow a local authenticated attacker to obtain root privileges. The connected documents confirm Junos Space as the affected product and identify the impact (local escalation to root) and the attack con...

CVE-2018-0013 Junos Space: Local File Inclusion Vulnerability

A local file inclusion vulnerability in Juniper Networks Junos Space Network Management Platform may allow an authenticated user to retrieve files from the system...

CVE-2018-0003

CVE-2018-0003 covers a kernel crash/DoS in Junos OS caused by processing specially crafted MPLS packets on MPLS-configured interfaces. Affected are many Junos OS branches (e.g., 12.1X46 <12.1X46-D71; 12.3 <12.3R12-S7; 12.3X48 <12.3X48-D55; 14.1 <14.1R8-S5/14.1R9; 14.1X53 <14.1X53-D...

CVE-2018-0013

CVE-2018-0013 affects Juniper Networks Junos Space Network Management Platform. The vulnerability is a local file inclusion that may allow an authenticated user to retrieve files from the system. Public data lists CVSS v3.0 base score 6.5 (MEDIUM) with network attack vector, low complexity, and p...

CVE-2018-0001 Junos: Unauthenticated Remote Code Execution through J-Web interface

A remote, unauthenticated attacker may be able to execute code by exploiting a use-after-free defect found in older versions of PHP through injection of crafted data via specific PHP URLs within the context of the J-Web process. Affected releases are Juniper Networks Junos OS: 12.1X46 versions...

CVE-2018-0011

CVE-2018-0011 is a reflected XSS vulnerability in Junos Space management interface. The issue allows a remote authenticated user to inject web script or HTML, potentially steal session data/credentials and perform administrative actions on the Junos Space device. Connected sources (e.g., NVD entr...

Junos OS 12.1X46 SRX 210, 240, 650 series firewalls (KRACK)

The version of Juniper Junos OS installed on the remote host is affected by multiple vulnerabilities related to the KRACK attacks. This may allow an attacker to decrypt, replay, and forge some frames on a WPA2 encrypted network. Note that Juniper's products do not support Fast BSS Transition...

The vulnerability of Juniper Networks’ Junos Space Network Management Platform, related to authentication procedures that lack sufficient safeguards, allows attackers to gain access to the system with privileged user privileges.

The vulnerability of Juniper Networks’ Junos Space Network Management Platform relates to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain access to the system with privileged user privileges from a remote location...

The vulnerability of the Junos operating system’s IPv6 traffic processing service allows attackers to cause resource exhaustion and kernel failures.

The vulnerability of the Junos operating system’s IPv6 traffic processing service is related to resource management errors. Exploiting this vulnerability allows a malicious actor to remotely cause resource exhaustion and kernel failures through specially created IPv6 traffic...

The vulnerability of the connected authentication module (PAM) of the Junos operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Junos operating system’s authentication module PAM exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause failures in the “demons” that use PAM...

The vulnerability of the Junos operating system, related to the lack of measures for cleaning input data, allows a intruder to gain unauthorized access to the device.

The vulnerability of the Junos operating system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a local attacker to increase their privileges and gain full control over the device, by using specially crafted combinations of CLI commands and...

Juniper Junos Space 17.1 < 17.1R1 Patch v1 / 16.1 < 16.1R3 Authentication Bypass (JSA10824)

According to its self-reported version number, the version of Junos Space running on the remote device is 17.1 17.1R1.1 or 16.1 16.1R3, and is therefore affected by an authentication bypass vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid104175;...