CVE-2018-0058 MX Series: In BBE configurations, receipt of a crafted IPv6 exception packet causes a Denial of Service

Receipt of a specially crafted IPv6 exception packet may be able to trigger a kernel crash vmcore, causing the device to reboot. The issue is specific to the processing of Broadband Edge BBE client route processing on MX Series subscriber management platforms, introduced by the Tomcat Next...

CVE-2018-0056

The CVE describes an issue in Juniper Networks Junos OS on MX Series devices with l2-backhaul VPN configured. The Layer 2 Address Learning Daemon (L2ALD) may crash when deleting a duplicate MAC address learned on two different interfaces if the entry is not found in the internal MAC address table...

CVE-2018-0056 MX Series: L2ALD daemon may crash if a duplicate MAC is learned by two different interfaces

If a duplicate MAC address is learned by two different interfaces on an MX Series device, the MAC address learning function correctly flaps between the interfaces. However, the Layer 2 Address Learning Daemon L2ALD daemon might crash when attempting to delete the duplicate MAC address when the...

CVE-2018-0056: Improper Input Validation

If a duplicate MAC address is learned by two different interfaces on an MX Series device, the MAC address learning function correctly flaps between the interfaces. However, the Layer 2 Address Learning Daemon L2ALD daemon might crash when attempting to delete the duplicate MAC address when the...

CVE-2018-0058: Improper Input Validation

Receipt of a specially crafted IPv6 exception packet may be able to trigger a kernel crash vmcore, causing the device to reboot. The issue is specific to the processing of Broadband Edge BBE client route processing on MX Series subscriber management platforms, introduced by the Tomcat Next...

PT-2018-8588

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 15.1R7-S1 on MX Series Junos OS versions prior to 16.1R4-S12 on MX Series Junos OS versions prior to 16.1R6-S6 on MX Series Junos OS versions prior to 16.2R2-S7 on MX Series Junos OS versions prior to 17.1R2-S9 on M...

PT-2018-8590

Name of the Vulnerable Software and Affected Versions: Junos OS versions 15.1 through 15.1R7-S1 Junos OS versions 15.1R8 on MX Series Junos OS versions 16.1 through 16.1R4-S10 Junos OS versions 16.1R7 through 16.1R7-S1 Junos OS versions 16.1R8 on MX Series Junos OS versions 16.2 through 16.2R2...

CVE-2018-0057: Undefined Security Weakness

On MX Series and M120/M320 platforms configured in a Broadband Edge BBE environment, subscribers logging in with DHCP Option 50 to request a specific IP address will be assigned the requested IP address, even if there is a static MAC to IP address binding in the access profile. In the problem...

PT-2018-8589

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 15.1R7-S2, 15.1R8 Junos OS versions prior to 16.1R4-S12, 16.1R7-S2, 16.1R8 Junos OS versions prior to 16.2R2-S7, 16.2R3 Junos OS versions prior to 17.1R2-S9, 17.1R3 Junos OS versions prior to 17.2R1-S7, 17.2R2-S6,...

Denial of Service Vulnerability in MXProgrammer Software

MXProgrammer software is a windows desktop software of Weihai Mack Electric Technology Co., Ltd. which is used to communicate with its MX series PLC products and complete the functions of program writing and downloading. A denial of service vulnerability exists in the MXProgrammer software. The...

Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2018-02839)

Juniper SRX Series and MX Series with Service PICs are Juniper Networks firewall appliances.Junos OS is the operating system that runs on them. A denial of service vulnerability exists in the Junos OS in Juniper SRX Series and MX Series with Service PIC appliances. An attacker can exploit this...

Memory corruption

On SRX Series and MX Series devices with a Service PIC with any ALG enabled, a crafted TCP/IP response packet processed through the device results in memory corruption leading to a flowd daemon crash. Sustained crafted response packets lead to repeated crashes of the flowd daemon which results in...

CVE-2018-0002: Improper Restriction of Operations within the Bounds of a Memory Buffer

On SRX Series and MX Series devices with a Service PIC with any ALG enabled, a crafted TCP/IP response packet processed through the device results in memory corruption leading to a flowd daemon crash. Sustained crafted response packets lead to repeated crashes of the flowd daemon which results in...

Design/Logic Flaw

If extended statistics are enabled via 'set chassis extended-statistics', when executing any operation that fetches interface statistics, including but not limited to SNMP GET requests, the pfem process or the FPC may crash and restart. Repeated crashes of PFE processing can result in an extended...

CVE-2017-10611

If extended statistics are enabled via 'set chassis extended-statistics', when executing any operation that fetches interface statistics, including but not limited to SNMP GET requests, the pfem process or the FPC may crash and restart. Repeated crashes of PFE processing can result in an extended...

Juniper MX Series Appliance Junos OS ALG Denial of Service Vulnerability

Juniper MX Series is an MX Series router from Juniper Networks, Inc.Junos OS is the operating system used in the Juniper MX Series. A security vulnerability exists in the Junos OS in Juniper MX Series devices. A remote attacker could send packet fragments through the Application Layer Gateway ALG...

CVE-2017-3825

A vulnerability in the ICMP ingress packet processing of Cisco TelePresence Collaboration Endpoint CE Software could allow an unauthenticated, remote attacker to cause the TelePresence endpoint to reload unexpectedly, resulting in a denial of service DoS condition. The vulnerability is due to...

CVE-2017-3825: Improper Input Validation

A vulnerability in the ICMP ingress packet processing of Cisco TelePresence Collaboration Endpoint CE Software could allow an unauthenticated, remote attacker to cause the TelePresence endpoint to reload unexpectedly, resulting in a denial of service DoS condition. The vulnerability is due to...

PT-2017-1993

Name of the Vulnerable Software and Affected Versions Junos OS versions 15.1R3 through 15.1R4 Junos OS version 16.1 prior to 16.1R3 Description The issue exists due to insufficient input validation in a component of the Juniper Networks Junos operating system. This can be exploited by a remote...

Juniper Junos for M/MX Series Routers IPv6 Neighbor Discovery DoS (JSA10786)

According to its self-reported version and configuration, the remote Juniper Junos M/MX Series device is affected by a denial of service vulnerability in a Packet Forwarding Engine PFE when processing IPv6 neighbor discovery ND packets that originate from subscribers and are destined to M/MX seri...