CVE-2023-36836

CVE-2023-36836 affects Juniper Networks Junos OS and Junos OS Evolved. A use of an uninitialized resource in the routing protocol daemon (rpd) allows a local, authenticated attacker with low privileges to cause a Denial of Service (DoS). In a Multicast-only Fast Reroute (MoFRR) scenario, executin...

CVE-2023-36833

A Use After Free vulnerability in the packet forwarding engine PFE of Juniper Networks Junos OS Evolved on PTX10001-36MR, and PTX10004, PTX10008, PTX10016 with LC1201/1202 allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS. The process 'aftman-bt' will crash after...

Design/Logic Flaw

A Use After Free vulnerability in the packet forwarding engine PFE of Juniper Networks Junos OS Evolved on PTX10001-36MR, and PTX10004, PTX10008, PTX10016 with LC1201/1202 allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS. The process 'aftman-bt' will crash after...

CVE-2023-36833 Junos OS Evolved: PTX10001-36MR, and PTX10004, PTX10008, PTX10016 with LC1201/1202: The aftman-bt process will crash in a MoFRR scenario after multiple link flaps

A Use After Free vulnerability in the packet forwarding engine PFE of Juniper Networks Junos OS Evolved on PTX10001-36MR, and PTX10004, PTX10008, PTX10016 with LC1201/1202 allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS. The process 'aftman-bt' will crash after...

CVE-2023-36833 Junos OS Evolved: PTX10001-36MR, and PTX10004, PTX10008, PTX10016 with LC1201/1202: The aftman-bt process will crash in a MoFRR scenario after multiple link flaps

A Use After Free vulnerability in the packet forwarding engine PFE of Juniper Networks Junos OS Evolved on PTX10001-36MR, and PTX10004, PTX10008, PTX10016 with LC1201/1202 allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS. The process 'aftman-bt' will crash after...

Juniper Networks Junos OS Evolved安全漏洞

Juniper Networks Junos OS Evolved is an updated version of Juniper Networks' Junos OS. Junos OS and Junos OS Evolved contain a security vulnerability that stems from a reachable assertion vulnerability in the Routing Protocol Daemon RPD, which can be exploited by an attacker to cause a denial of...

Juniper Junos OS Vulnerability (JSA71640)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA71640 advisory. - A Use After Free vulnerability in the packet forwarding engine PFE of Juniper Networks Junos OS Evolved on PTX10001-36MR, and PTX10004, PTX10008, PTX10016 with LC1201/1202...

The vulnerability of the command-line interface (CLI) of Juniper Networks’ Junos OS Evolved operating system, which allows a hacker to execute arbitrary commands.

The vulnerability of the command-line interface CLI of Juniper Networks’ Junos OS Evolved operating system is related to the improper assignment of access rights to critical resources. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

The vulnerability of the packeIO daemon in the Juniper Networks Junos OS Evolved operating system affects devices PTX10003, PTX10004, and PTX10008. This allows a malicious actor to cause service interruptions.

The vulnerability of the packeIO daemon in the Juniper Networks Junos OS Evolved devices of models PTX10003, PTX10004, and PTX10008 is related to improper checking of unusual or exceptional conditions. Exploiting this vulnerability can allow a malicious actor to trigger service failures remotely...

The vulnerability of the Packet Forwarding Engine (PFE) module in the Junos OS Evolved operating system of ACX7000 devices allows a attacker to cause a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in the Junos OS Evolved operating system of ACX7000 series devices is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Input validation

An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When a BGP update message is received over an established BGP session, and that messa...

CVE-2023-0026

The CVE-2023-0026 issue is a DoS in Juniper Networks Junos OS and Junos OS Evolved caused by improper input validation in the Routing Protocol Daemon (rpd). A remote, unauthenticated attacker can tear down a BGP session by sending an established-session BGP update containing a specific optional t...

The vulnerability of the software for the Border Gateway Protocol (BGP) of Juniper Networks’ Junos OS and Junos OS Evolved operating systems, which allows a attacker to cause a service failure.

The vulnerability of the Border Gateway Protocol Software BGP in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability allows a malicious actor to send specially crafted BGP packets, thereby causing...

The vulnerability of the Juniper Networks Junos OS Evolved operating system allows a hacker to trigger a service failure.

The vulnerability of Juniper Networks Junos OS Evolved operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Routing Protocol Demon (rpd) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause a service failure.

The vulnerabilities of Time-of-Check-Time-of-Use TOCTOU and Race Conditions in the routing protocol daemon rpd of Juniper Networks’ Junos OS and Junos OS Evolved are related to state management errors. Exploitation of these vulnerabilities can allow an attacker to cause service interruptions...

Juniper Junos OS Vulnerability (JSA70603)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70603 advisory. - An Insecure Default Initialization of Resource vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network based attacker to read certain...

CVE-2023-28982

A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network based attacker to cause a Denial of Service DoS. In a BGP rib sharding scenario, when an attribute of an active BG...

CVE-2023-28980

A Use After Free vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to cause Denial of Service DoS. In a rib sharding scenario the rpd process will crash shortly after specific CLI command is...

CVE-2023-28973

An Improper Authorization vulnerability in the 'sysmanctl' shell command of Juniper Networks Junos OS Evolved allows a local, authenticated attacker to execute administrative commands that could impact the integrity of the system or system availability. Administrative functions such as daemon...

CVE-2023-28983

An OS Command Injection vulnerability in gRPC Network Operations Interface gNOI server module of Juniper Networks Junos OS Evolved allows an authenticated, low privileged, network based attacker to inject shell commands and execute code. This issue affects Juniper Networks Junos OS Evolved 21.4...