Junos OS: pccd DoS (JSA10980)

According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability in the path computational element protocol daemon pccd process. An unauthenticated, remote attacker can exploit this issue, by sending malformed Path Computation Element Protocol PCEP...

Design/Logic Flaw

In a Point-to-Multipoint P2MP Label Switched Path LSP scenario, an uncontrolled resource consumption vulnerability in the Routing Protocol Daemon RPD in Juniper Networks Junos OS allows a specific SNMP request to trigger an infinite loop causing a high CPU usage Denial of Service DoS condition...

Design/Logic Flaw

When a device using Juniper Network's Dynamic Host Configuration Protocol Daemon JDHCPD process on Junos OS or Junos OS Evolved which is configured in relay mode it vulnerable to an attacker sending crafted IPv6 packets who may then arbitrarily execute commands as root on the target device. This...

CVE-2020-1602

CVE-2020-1602 affects Juniper Networks Junos OS and Junos OS Evolved where JDHCPD (IPv4 relay mode) can be remotely exploited by crafted IPv4 packets to take over the JDHCPD process. Affected products include Junos OS releases listed as prior to the specified versions (e.g., 15.1, 15.1R7-S6; 16.1...

Juniper Networks Junos OS JDHCPD IPv4 Command Injection Vulnerability

Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. A security vulnerability in Juniper Networks Junos OS Dynamic Host Configuration Protocol Daemon JDHCPD can be exploited by a remote attacker to submit a special IPv4 request that can be...

Juniper Networks Junos OS SNMP Denial of Service Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in the Routing Protocol Daemon RPD in Juniper Networks Junos OS. An attacker could exploit...

CVE-2019-0066

An unexpected status return value weakness in the Next-Generation Multicast VPN NG-mVPN service of Juniper Networks Junos OS allows attacker to cause a Denial of Service DoS condition and core the routing protocol daemon rpd process when a specific malformed IPv4 packet is received by the device...

CVE-2019-0049

On Junos devices with the BGP graceful restart helper mode enabled or the BGP graceful restart mechanism enabled, a certain sequence of BGP session restart on a remote peer that has the graceful restart mechanism enabled may cause the local routing protocol daemon RPD process to crash and restart...

CVE-2019-0019

When BGP tracing is enabled an incoming BGP message may cause the Junos OS routing protocol daemon rpd process to crash and restart. While rpd restarts after a crash, repeated crashes can result in an extended DoS condition. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to...

Code injection

In MPLS environments, receipt of a specific SNMP packet may cause the routing protocol daemon RPD process to crash and restart. By continuously sending a specially crafted SNMP packet, an attacker can repetitively crash the RPD process causing prolonged denial of service. No other Juniper Network...

Design/Logic Flaw

When BGP tracing is enabled an incoming BGP message may cause the Junos OS routing protocol daemon rpd process to crash and restart. While rpd restarts after a crash, repeated crashes can result in an extended DoS condition. Affected releases are Juniper Networks Junos OS: 16.1 versions prior to...

CVE-2019-6606

On BIG-IP 11.5.1-11.6.3.4, 12.1.0-12.1.3.7, 13.0.0-13.1.1.3, and 14.0.0-14.0.0.2, when processing certain SNMP requests with a request-id of 0, the snmpd process may leak a small amount of memory...

CVE-2019-0003

When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, a reachable assertion failure occurs, causing the routing protocol daemon rpd process to crash with a core file being generated. Affected...

CVE-2019-0012 Junos OS: rpd crash on VPLS PE upon receipt of specific BGP message

A Denial of Service DoS vulnerability in BGP in Juniper Networks Junos OS configured as a VPLS PE allows an attacker to craft a specific BGP message to cause the routing protocol daemon rpd process to crash and restart. While rpd restarts after a crash, repeated crashes can result in an extended...

Junos OS: pd crash on VPLS PE upon receipt of specific BGP message (JSA10912)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability which allows an attacker to craft a specific BGP message to cause the routing protocol daemon rpd process to crash and restart. While rpd restarts after a crash, repeate...

The vulnerability of Junos Operating System’s Routing Protocol Daemon (RPD) allows a hacker to execute arbitrary code.

The vulnerability of the Junos operating system’s Routing Protocol Daemon RPD arises from errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending multiple specially crafted MPLS packets within a short period of time...

The vulnerability of the Routing Protocols Daemon (RPD) service on the JunOS operating system allows a hacker to trigger a service failure.

The vulnerability of the Routing Protocols Daemon RPD service on the JunOS operating system is related to an uncontrolled memory consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Juniper Junos RPD MPLS RCE (JSA10877)

According to its self-reported version number, the remote Junos device is affected by a potential remote code execution vulnerability due to how the routing protocol daemon handles MPLS packets. An attacker could potentially crash the RDP service or execute code. TRUSTED...

CVE-2018-0048

A vulnerability in the Routing Protocols Daemon RPD with Juniper Extension Toolkit JET support can allow a network based unauthenticated attacker to cause a severe memory exhaustion condition on the device. This can have an adverse impact on the system performance and availability. This issue onl...

Design/Logic Flaw

Receipt of a specific Draft-Rosen MVPN control packet may cause the routing protocol daemon RPD process to crash and restart or may lead to remote code execution. By continuously sending the same specific Draft-Rosen MVPN control packet, an attacker can repeatedly crash the RPD process causing a...