CVE-2020-1613

A vulnerability in the BGP FlowSpec implementation may cause a Juniper Networks Junos OS device to terminate an established BGP session upon receiving a specific BGP FlowSpec advertisement. The BGP NOTIFICATION message that terminates an established BGP session is sent toward the peer device that...

Design/Logic Flaw

On High-End SRX Series devices, in specific configurations and when specific networking events or operator actions occur, an SPC receiving genuine multicast traffic may core. Subsequently, all FPCs in a chassis may reset causing a Denial of Service. This issue affects both IPv4 and IPv6. This iss...

Design/Logic Flaw

A vulnerability in Juniper Networks SRX Series device configured as a Junos OS Enforcer device may allow a user to access network resources that are not permitted by a UAC policy. This issue might occur when the IP address range configured in the Infranet Controller IC is configured as an IP...

Design/Logic Flaw

A vulnerability in the BGP FlowSpec implementation may cause a Juniper Networks Junos OS device to terminate an established BGP session upon receiving a specific BGP FlowSpec advertisement. The BGP NOTIFICATION message that terminates an established BGP session is sent toward the peer device that...

CVE-2020-1637 Junos OS: SRX Series: Unified Access Control (UAC) bypass vulnerability

A vulnerability in Juniper Networks SRX Series device configured as a Junos OS Enforcer device may allow a user to access network resources that are not permitted by a UAC policy. This issue might occur when the IP address range configured in the Infranet Controller IC is configured as an IP...

CVE-2020-1637

CVE-2020-1637 concerns a bypass of Unified Access Control (UAC) on Juniper Networks SRX Series running Junos OS Enforcer. The root cause is when the Infranet Controller IP range is configured as an IP address range instead of an IP address/netmask, which can allow a user to access network resourc...

CVE-2020-1634 Junos OS: High-End SRX Series: Multicast traffic might cause all FPCs to reset.

On High-End SRX Series devices, in specific configurations and when specific networking events or operator actions occur, an SPC receiving genuine multicast traffic may core. Subsequently, all FPCs in a chassis may reset causing a Denial of Service. This issue affects both IPv4 and IPv6. This iss...

CVE-2020-1634

CVE-2020-1634 affects Junos OS on High-End SRX Series: certain configurations allow a SPC receiving genuine multicast traffic to core, causing all FPCs in the chassis to reset and resulting in a Denial of Service. Affected versions include Junos OS 12.3X48-D80 and later, up to but not including 1...

CVE-2020-1613 Junos OS: BGP session termination upon receipt of specific BGP FlowSpec advertisement.

A vulnerability in the BGP FlowSpec implementation may cause a Juniper Networks Junos OS device to terminate an established BGP session upon receiving a specific BGP FlowSpec advertisement. The BGP NOTIFICATION message that terminates an established BGP session is sent toward the peer device that...

CVE-2015-5361

Background For regular, unencrypted FTP traffic, the FTP ALG can inspect the unencrypted control channel and open related sessions for the FTP data channel. These related sessions gates are specific to source and destination IPs and ports of client and server. The design intent of the...

Design/Logic Flaw

Background For regular, unencrypted FTP traffic, the FTP ALG can inspect the unencrypted control channel and open related sessions for the FTP data channel. These related sessions gates are specific to source and destination IPs and ports of client and server. The design intent of the...

CVE-2015-5361 Junos: FTPS through SRX opens up wide range of data channel TCP ports

Background For regular, unencrypted FTP traffic, the FTP ALG can inspect the unencrypted control channel and open related sessions for the FTP data channel. These related sessions gates are specific to source and destination IPs and ports of client and server. The design intent of the...

CVE-2015-5361

CVE-2015-5361 describes a Juniper Junos OS issue where, if the FTP ALG ftps-extensions option is used (and not disabled by default), the encrypted control channel prevents port-specific inspection and the device may open a wide data channel (gate) from the client IP to the server IP across all de...

Path traversal

A path traversal vulnerability in the Juniper Networks Junos OS device may allow an authenticated J-web user to read files with 'world' readable permission and delete files with 'world' writeable permission. This issue does not affect system files that can be accessed only by root user. This issu...

CVE-2020-1606 Junos OS: Path traversal vulnerability in J-Web

A path traversal vulnerability in the Juniper Networks Junos OS device may allow an authenticated J-web user to read files with 'world' readable permission and delete files with 'world' writeable permission. This issue does not affect system files that can be accessed only by root user. This issu...

Junos OS: srxpfe PIM DoS (JSA10976)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service DoS vulnerability in the srxpfe process on Protocol Independent Multicast PIM enabled SRX series devices. An unauthenticated, remote attacker can exploit this issue, by repeatedly...

Junos OS: flowd DoS (JSA10963)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service DoS vulnerability in the flowd process on SRX 5000 devices when 'set security zones security-zone tcp-rst' is configured. An unauthenticated, remote attacker can send a crafted TCP...

Junos OS: SSL-Proxy DoS (JSA10973)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service DoS vulnerability in the SSL-Proxy feature on SRX devices, which fails to handle a hardware resource limitation that can be exploited by remote SSL/TLS servers to crash the flowd...

The vulnerability of the Junos OS router of the SRX 5000 Series allows a hacker to cause a service failure.

The vulnerability of the Junos OS router on the SRX 5000 Series is related to resource release errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted TCP packets remotely...

The vulnerability of the SRX Series Application Identification (app-id) component of the Junos OS router software, which allows a attacker to execute a “man-in-the-middle” attack.

The vulnerability of the SRX Series Application Identification app-id component of the Junos OS router operating system is related to errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to execute a “man-in-the-middle” attack remotely...