Juniper Junos DoS (JSA11096)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11096 advisory. A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to send a specific packet causing the packet forwarding engine PFE to crash and...

CVE-2021-0215

On Juniper Networks Junos EX series, QFX Series, MX Series and SRX branch series devices, a memory leak occurs every time the 802.1X authenticator port interface flaps which can lead to other processes, such as the pfex process, responsible for packet forwarding, to crash and restart. An...

Null pointer dereference

A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to send a specific packet causing the packet forwarding engine PFE to crash and restart, resulting in a Denial of Service DoS. By continuously sending these specific packets, an attacker can repeatedly disabl...

CVE-2021-0215 Junos OS: EX Series, QFX Series, SRX Branch Series, MX Series: Memory leak in packet forwarding engine due to 802.1X authenticator port interface flaps

On Juniper Networks Junos EX series, QFX Series, MX Series and SRX branch series devices, a memory leak occurs every time the 802.1X authenticator port interface flaps which can lead to other processes, such as the pfex process, responsible for packet forwarding, to crash and restart. An...

CVE-2021-0202 Junos OS: MX Series, EX9200 Series: Trio-based MPC memory leak when Integrated Routing and Bridging (IRB) interface is mapped to a VPLS instance or a Bridge-Domain

On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPC Modular Port Concentrator where Integrated Routing and Bridging IRB interface is configured and it is mapped to a VPLS instance or a Bridge-Domain, certain network events at Customer Edge CE device may cause memory leak...

CVE-2021-0206: NULL Pointer Dereference

A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to send a specific packet causing the packet forwarding engine PFE to crash and restart, resulting in a Denial of Service DoS. By continuously sending these specific packets, an attacker can repeatedly disabl...

CVE-2021-0206

A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to send a specific packet causing the packet forwarding engine PFE to crash and restart, resulting in a Denial of Service DoS. By continuously sending these specific packets, an attacker can repeatedly disabl...

CVE-2021-0202

On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPC Modular Port Concentrator where Integrated Routing and Bridging IRB interface is configured and it is mapped to a VPLS instance or a Bridge-Domain, certain network events at Customer Edge CE device may cause memory leak...

PT-2021-2110

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 18.3R3-S4 Junos OS versions prior to 18.4R3-S1 Junos OS versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3 Junos OS versions prior to 19.2R1-S2, 19.2R2 Junos OS versions prior to 19.3R2 Description: A NULL Pointer...

CVE-2020-26569: Undefined Security Weakness

In EVPN VxLAN setups in Arista EOS, specific malformed packets can lead to incorrect MAC to IP bindings and as a result packets can be incorrectly forwarded across VLAN boundaries. This can result in traffic being discarded on the receiving VLAN. This affects versions: 4.21.12M and below releases...

PT-2020-14696

Name of the Vulnerable Software and Affected Versions Arista EOS versions 4.21.4.1F and below releases in the 4.21.x train Arista EOS X-Series versions 4.21.11M and below releases in the 4.21.x train Arista EOS versions 4.22.6M and below releases in the 4.22.x train Arista EOS versions 4.23.4M an...

Juniper Junos OS PTX/QFX Series: Unexpected Packet Forwarding Vulnerability (JSA11076)

The version of Junos OS installed on the remote host is PTX or QFX Series prior to 17.2X75-D105, 18.1R3-S11, 18.2R3-S5, 18.2X75-D420, 18.3R2-S4, 18.4R1-S7, 19.1R2-S2, 19.2R1-S5, 19.3R2-S3, 19.4R1-S2, or 20.1R1-S2. It is, therefore, affected by a vulnerability as referenced in the JSA11076 advisor...

CVE-2020-1679

On Juniper Networks PTX and QFX Series devices with packet sampling configured using tunnel-observation mpls-over-udp, sampling of a malformed packet can cause the Kernel Routing Table KRT queue to become stuck. KRT is the module within the Routing Process Daemon RPD that synchronized the routing...

CVE-2020-1665

On Juniper Networks MX Series and EX9200 Series, in a certain condition the IPv6 Distributed Denial of Service DDoS protection might not take affect when it reaches the threshold condition. The DDoS protection allows the device to continue to function while it is under DDoS attack, protecting bot...

CVE-2020-1679 Junos OS: PTX/QFX Series: Kernel Routing Table (KRT) queue stuck after packet sampling a malformed packet when the tunnel-observation mpls-over-udp configuration is enabled.

On Juniper Networks PTX and QFX Series devices with packet sampling configured using tunnel-observation mpls-over-udp, sampling of a malformed packet can cause the Kernel Routing Table KRT queue to become stuck. KRT is the module within the Routing Process Daemon RPD that synchronized the routing...

CVE-2020-1679: Improper Input Validation

On Juniper Networks PTX and QFX Series devices with packet sampling configured using tunnel-observation mpls-over-udp, sampling of a malformed packet can cause the Kernel Routing Table KRT queue to become stuck. KRT is the module within the Routing Process Daemon RPD that synchronized the routing...

The vulnerability of the API subsystem of the Cisco Meeting Server platform allows a hacker to obtain server credentials for conducting audio/video calls and packet forwarding.

The vulnerability of the API subsystem of the Cisco Meeting Server platform relates to insufficient mechanisms for protecting the server’s credentials. This vulnerability allows a malicious actor to obtain the server’s credentials, enabling them to conduct audio/video calls and packet forwarding...

CVE-2020-1655

When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2TP, MAP-E, GRE, and IPIP, the packet forwarding engine PFE will become disabled upon receipt of large packets requiring fragmentation,...

CVE-2020-1649

When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2TP, MAP-E, GRE, and IPIP, the packet forwarding engine PFE will become disabled upon receipt of small fragments requiring reassembly,...

CVE-2020-1651

On Juniper Networks MX series, receipt of a stream of specific Layer 2 frames may cause a memory leak resulting in the packet forwarding engine PFE on the line card to crash and restart, causing traffic interruption. By continuously sending this stream of specific layer 2 frame, an attacker...