Heap overflow

On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPC Modular Port Concentrator where Integrated Routing and Bridging IRB interface is configured and it is mapped to a VPLS instance or a Bridge-Domain, certain network events at Customer Edge CE device may cause memory leak...

CVE-2021-0202

CVE-2021-0202 affects Juniper Junos OS on MX Series and EX9200 Series with Trio-based MPC when an Integrated Routing and Bridging (IRB) interface is mapped to a VPLS instance or a Bridge-Domain. The issue is a memory leak in the Modular Port Concentrator (MPC) caused by certain CE device events, ...

CVE-2021-0205: Improper Access Control

When the "Intrusion Detection Service" IDS feature is configured on Juniper Networks MX series with a dynamic firewall filter using IPv6 source or destination prefix, it may incorrectly match the prefix as /32, causing the filter to block unexpected traffic. This issue affects only IPv6 prefixes...

CVE-2021-0202: Uncontrolled Resource Consumption

On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPC Modular Port Concentrator where Integrated Routing and Bridging IRB interface is configured and it is mapped to a VPLS instance or a Bridge-Domain, certain network events at Customer Edge CE device may cause memory leak...

Juniper Networks MX Series and EX9200 Series Resource Management Error Vulnerability

A resource management error vulnerability exists in Juniper Networks MX Series and EX9200 Series, which can be exploited by an attacker to create a memory leak via the MPC IRB of Junos OS MX EX to trigger a denial of service. The following products and versions are affected: Juniper Networks Juno...

CVE-2020-1680 Junos OS: MX Series: MS-MPC/MIC might crash when processing malformed IPv6 packet in NAT64 configuration.

On Juniper Networks MX Series with MS-MIC or MS-MPC card configured with NAT64 configuration, receipt of a malformed IPv6 packet may crash the MS-PIC component on MS-MIC or MS-MPC. This issue occurs when a multiservice card is translating the malformed IPv6 packet to IPv4 packet. An unauthenticat...

CVE-2020-1660

CVE-2020-1660 affects Juniper Networks Junos OS on MX Series when DNS filtering is enabled on cards MS-PIC, MS-MIC or MS-MPC. A crafted stream processed by the Multiservices PIC Management Daemon (mspmand) may crash the Services PIC, causing the Services PIC to restart and temporarily bypass DNS ...

CVE-2020-1680: Incorrect Calculation of Buffer Size

On Juniper Networks MX Series with MS-MIC or MS-MPC card configured with NAT64 configuration, receipt of a malformed IPv6 packet may crash the MS-PIC component on MS-MIC or MS-MPC. This issue occurs when a multiservice card is translating the malformed IPv6 packet to IPv4 packet. An unauthenticat...

CVE-2020-1667: Concurrent Execution using Shared Resource with Improper Synchronization

When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets processed by the Multiservices PIC Management Daemon mspmand process might be bypassed due to a race condition. Due to this vulnerability,...

Arbitrary Code Execution

GraphicsMagick is vulnerable to arbitrary code execution. A memory leak in the PersistCache function in magick/pixelcache.c during writing of Magick Persistent Cache MPC files allows an attacker to execute arbitrary code on the host OS...

Fedora: Security Advisory for eclipse-mpc (FEDORA-2020-cf8ef2f333)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-1650

On Juniper Networks Junos MX Series with service card configured, receipt of a stream of specific packets may crash the MS-PIC component on MS-MIC or MS-MPC. By continuously sending these specific packets, an attacker can repeatedly bring down MS-PIC on MS-MIC/MS-MPC causing a prolonged Denial of...

Design/Logic Flaw

On Juniper Networks Junos MX Series with service card configured, receipt of a stream of specific packets may crash the MS-PIC component on MS-MIC or MS-MPC. By continuously sending these specific packets, an attacker can repeatedly bring down MS-PIC on MS-MIC/MS-MPC causing a prolonged Denial of...

CVE-2020-1655

CVE-2020-1655 affects Juniper Networks Junos OS on MX Series with MPC7/8/9 line cards when inline IP reassembly is enabled. The vulnerability enables an attacker to repeatedly disable the packet forwarding engine (PFE) by sending large fragmented packets that cannot be reassembled, causing a sust...

CVE-2020-1650 Junos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC

On Juniper Networks Junos MX Series with service card configured, receipt of a stream of specific packets may crash the MS-PIC component on MS-MIC or MS-MPC. By continuously sending these specific packets, an attacker can repeatedly bring down MS-PIC on MS-MIC/MS-MPC causing a prolonged Denial of...

CVE-2020-1645 Junos OS: MX Series: Services card might restart when DNS filtering is enabled

When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets processed by the Multiservices PIC Management Daemon mspmand process, responsible for managing "URL Filtering service", may crash, causing the...

CVE-2020-1650: Undefined Security Weakness

On Juniper Networks Junos MX Series with service card configured, receipt of a stream of specific packets may crash the MS-PIC component on MS-MIC or MS-MPC. By continuously sending these specific packets, an attacker can repeatedly bring down MS-PIC on MS-MIC/MS-MPC causing a prolonged Denial of...

Juniper Networks Junos OS Denial of Service Vulnerability

Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. A denial of service vulnerability exists in the Juniper Networks Junos OS MS-PIC component message handling, which can be exploited by an attacker to crash denial of service the MS-PIC...

MPC Sharj 3.11.1 - Arbitrary File Download Exploit

Exploit for php platform in category web applications Exploit title : MPC Sharj 3.11.1 - Arbitrary File Download Exploit Author : SajjadBnd Date : 2020-05-02 Software Link : http://dl.nuller.ir/mpc-sharj-vr3.11.1betawww.nuller.ir.zip Tested on : Ubuntu 19.10 Version : 3.11.1 Beta DESCRIPTION MPC...

MPC Sharj 3.11.1 - Arbitrary File Download

Exploit title : MPC Sharj 3.11.1 - Arbitrary File Download Exploit Author : SajjadBnd Date : 2020-05-02 Software Link : http://dl.nuller.ir/mpc-sharj-vr3.11.1betawww.nuller.ir.zip Tested on : Ubuntu 19.10 Version : 3.11.1 Beta DESCRIPTION MPC Sharj is a free open source script for creating sim ca...