Input validation

An Improper Handling of Undefined Values vulnerability in the periodic packet management daemon PPMD of Juniper Networks Junos OS on MX Seriesexcept MPC10, MPC11 and LC9600 allows an unauthenticated adjacent attacker to cause a Denial of Service DoS. When a malformed CFM packet is received, it...

CVE-2023-36850

CVE-2023-36850 describes an improper validation of index/position/offset in Juniper Networks Junos OS CFM that causes the MPC on MX Series to crash when malformed CFM packets are received, leading to a sustained DoS if CFM is not configured. Affected: Junos OS on MX Series (excluding MPC10, MPC11...

CVE-2023-36850 Junos OS: MX Series: An MPC will crash upon receipt of a malformed CFM packet.

An Improper Validation of Specified Index, Position, or Offset in Input vulnerability in the Connectivity Fault ManagementCFM module of Juniper Networks Junos OS on MX Seriesexcept MPC10, MPC11 and LC9600 allows an adjacent attacker on the local broadcast domain to cause a Denial of ServiceDoS...

CVE-2023-36848 Junos OS: MX Series: The FPC will crash on receiving a malformed CFM packet

An Improper Handling of Undefined Values vulnerability in the periodic packet management daemon PPMD of Juniper Networks Junos OS on MX Seriesexcept MPC10, MPC11 and LC9600 allows an unauthenticated adjacent attacker to cause a Denial of Service DoS. When a malformed CFM packet is received, it...

CVE-2023-36848 Junos OS: MX Series: The FPC will crash on receiving a malformed CFM packet

An Improper Handling of Undefined Values vulnerability in the periodic packet management daemon PPMD of Juniper Networks Junos OS on MX Seriesexcept MPC10, MPC11 and LC9600 allows an unauthenticated adjacent attacker to cause a Denial of Service DoS. When a malformed CFM packet is received, it...

CVE-2023-36848

The CVE refers to Juniper Junos OS MX Series PPMD vulnerability where an Improper Handling of Undefined Values on receipt of a malformed CFM packet can crash the FPC and cause DoS. Affected software includes Junos OS on MX Series with CFM enabled, with the issue present in multiple released branc...

CVE-2023-28985 SRX Series and MX Series: An FPC core is observed when IDP is enabled on the device and a specific malformed SSL packet is received

An Improper Validation of Syntactic Correctness of Input vulnerability in Intrusion Detection and Prevention IDP of Juniper Networks SRX Series and MX Series allows an unauthenticated, network-based attacker to cause Denial of Service DoS. Continued receipt of this specific packet will cause a...

CVE-2023-28985 SRX Series and MX Series: An FPC core is observed when IDP is enabled on the device and a specific malformed SSL packet is received

An Improper Validation of Syntactic Correctness of Input vulnerability in Intrusion Detection and Prevention IDP of Juniper Networks SRX Series and MX Series allows an unauthenticated, network-based attacker to cause Denial of Service DoS. Continued receipt of this specific packet will cause a...

CVE-2023-28985

CVE-2023-28985 is an IDP-related vulnerability in Juniper Networks SRX Series and MX Series. When IDP is enabled and a specific malformed SSL packet is received, the SSL detector crashes, causing an FPC core and a sustained DoS on affected devices. Impact is limited to unauthenticated, network-ba...

CVE-2023-36832

An Improper Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS on MX Series allows an unauthenticated network-based attacker to send specific packets to an Aggregated Multiservices AMS interface on the device, causing the packet forwarding engine PF...

CVE-2023-36832 Junos OS: MX Series: PFE crash upon receipt of specific packet destined to an AMS interface

An Improper Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS on MX Series allows an unauthenticated network-based attacker to send specific packets to an Aggregated Multiservices AMS interface on the device, causing the packet forwarding engine PF...

CVE-2023-36832 Junos OS: MX Series: PFE crash upon receipt of specific packet destined to an AMS interface

An Improper Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS on MX Series allows an unauthenticated network-based attacker to send specific packets to an Aggregated Multiservices AMS interface on the device, causing the packet forwarding engine PF...

CVE-2023-36832

Summary: CVE-2023-36832 is an Improper Handling of Exceptional Conditions in Junos OS on MX Series, where unauthenticated attackers can send packets to the AMS interface to crash the PFE and cause DoS. Affected products/versions (MX Series Junos OS): all prior to 19.1R3-S10; 19.2 prior to 19.2R3-...

Juniper Junos OS Vulnerability (JSA71661)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA71661 advisory. - An Improper Validation of Specified Index, Position, or Offset in Input vulnerability in the Connectivity Fault ManagementCFM module of Juniper Networks Junos OS on MX...

PT-2023-4003 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on MX Series versions prior to 19.1R3-S10 Juniper Networks Junos OS on MX Series 19.2 versions prior to 19.2R3-S7 Juniper Networks Junos OS on MX Series 19.3 versions prior to 19.3R3-S8 Juniper Networks Junos OS on M...

PT-2023-4000 · Juniper Networks · Srx Series +2

Name of the Vulnerable Software and Affected Versions: Juniper Networks SRX Series and MX Series versions prior to SigPack 3598 Description: The issue is related to an improper validation of syntactic correctness of input in the Intrusion Detection and Prevention IDP system of Junos OS, allowing ...

PT-2023-6695 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 19.1R3-S10 on MX Series Juniper Networks Junos OS 19.2 versions prior to 19.2R3-S7 on MX Series Juniper Networks Junos OS 19.3 versions prior to 19.3R3-S8 on MX Series Juniper Networks Junos OS 19.4...

Juniper Junos OS Vulnerability (JSA71659)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA71659 advisory. - An Improper Handling of Undefined Values vulnerability in the periodic packet management daemon PPMD of Juniper Networks Junos OS on MX Seriesexcept MPC10, MPC11 and LC960...

Juniper Networks Junos OS bbe-smgd Denial of Service Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A denial of service vulnerability exists in the Juniper Networks Junos OS MX Series, which arises from improper checking o...

CVE-2023-28974

An Improper Check for Unusual or Exceptional Conditions vulnerability in the bbe-smgd of Juniper Networks Junos OS allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. In a Broadband Edge / Subscriber Management scenario on MX Series when a specifically malformed ICMP...