CVE-2021-0235

On SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series devices using tenant services on Juniper Networks Junos OS, due to incorrect permission scheme assigned to tenant system administrators, a tenant system administrator may inadvertently send their network traffic to...

Path traversal

A path traversal vulnerability in the Juniper Networks SRX and vSRX Series may allow an authenticated J-web user to read sensitive system files. This issue affects Juniper Networks Junos OS on SRX and vSRX Series: 19.3 versions prior to 19.3R2-S6, 19.3R3-S1; 19.4 versions prior to 19.4R2-S4,...

Design/Logic Flaw

On Juniper Networks SRX Series devices with link aggregation lag configured, executing any operation that fetches Aggregated Ethernet AE interface statistics, including but not limited to SNMP GET requests, causes a slow kernel memory leak. If all the available memory is consumed, the traffic wil...

Buffer overflow

On SRX Series devices configured with UTM services a buffer overflow vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS may allow an attacker to arbitrarily execute code or commands on the target to take over or otherwise impact the device by sending crafted packets to...

Design/Logic Flaw

An improper restriction of operations within the bounds of a memory buffer vulnerability in Juniper Networks Junos OS J-Web on SRX Series devices allows an attacker to cause Denial of Service DoS by sending certain crafted HTTP packets. Continued receipt and processing of these packets will creat...

CVE-2021-0275

The CVE-2021-0275 entry identifies a Cross-site Scripting (XSS) vulnerability in Juniper Networks Junos OS J-Web that can hijack another active user session and potentially grant full device control if the compromised user has root privileges. Affected are Junos OS versions across multiple series...

CVE-2021-0249

CVE-2021-0249 is a buffer overflow in Juniper Networks Junos OS Packet Forwarding Engine (PFE) on SRX Series devices. Affected releases include SRX Series: 15.1X49 prior to 15.1X49-D190; 17.4 prior to 17.4R2-S9; 17.4R3 and later prior to 18.1R3-S9; 18.2 prior to 18.2R3-S1; 18.3 prior to 18.3R2-S3...

CVE-2021-0249 Junos OS: SRX Series: A remote attacker may be able to cause a PFE buffer overflow to arbitrarily remotely execute code or commands on the target device with UTM enabled.

On SRX Series devices configured with UTM services a buffer overflow vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS may allow an attacker to arbitrarily execute code or commands on the target to take over or otherwise impact the device by sending crafted packets to...

CVE-2021-0235 Junos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series: In a multi-tenant environment, a tenant host administrator may configure logical firewall isolation affecting other tenant networks

On SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series devices using tenant services on Juniper Networks Junos OS, due to incorrect permission scheme assigned to tenant system administrators, a tenant system administrator may inadvertently send their network traffic to...

CVE-2021-0231 Junos OS: SRX, vSRX Series: J-Web Path traversal vulnerability in SRX and vSRX Series leads to information disclosure.

A path traversal vulnerability in the Juniper Networks SRX and vSRX Series may allow an authenticated J-web user to read sensitive system files. This issue affects Juniper Networks Junos OS on SRX and vSRX Series: 19.3 versions prior to 19.3R2-S6, 19.3R3-S1; 19.4 versions prior to 19.4R2-S4,...

CVE-2021-0231

CVE-2021-0231 describes a path-traversal information-disclosure vulnerability in Juniper Networks Junos OS on SRX and vSRX Series. An authenticated J-web user can read sensitive system files. Affected versions include Junos OS 19.3 up to 19.3R2-S6 and 19.3R3-S1; 19.4 up to 19.4R2-S4 and 19.4R3; 2...

CVE-2021-0230

CVE-2021-0230 affects Juniper Networks Junos OS on SRX Series devices with link aggregation (lag). When performing operations that fetch AE interface statistics (e.g., SNMP GET), a slow kernel memory leak can consume memory, potentially impacting traffic and requiring a reboot. Affected versions ...

CVE-2021-0230 Junos OS: SRX Series: Memory leak when querying Aggregated Ethernet (AE) interface statistics

On Juniper Networks SRX Series devices with link aggregation lag configured, executing any operation that fetches Aggregated Ethernet AE interface statistics, including but not limited to SNMP GET requests, causes a slow kernel memory leak. If all the available memory is consumed, the traffic wil...

CVE-2021-0227

CVE-2021-0227 concerns a memory buffer bound-checking issue in Juniper Networks Junos OS J-Web on SRX Series devices that can enable a Denial of Service via crafted HTTP packets. Affected products include Junos OS on SRX Series with the listed version ranges (e.g., 17.3 before 17.3R3-S9; 17.4 bef...

CVE-2021-0227 Junos OS: SRX Series: Denial of Service in J-Web upon receipt of crafted HTTP packets

An improper restriction of operations within the bounds of a memory buffer vulnerability in Juniper Networks Junos OS J-Web on SRX Series devices allows an attacker to cause Denial of Service DoS by sending certain crafted HTTP packets. Continued receipt and processing of these packets will creat...

PT-2021-12943 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on SRX Series versions 17.1R3 through 17.3R3-S10 Juniper Networks Junos OS on SRX Series versions 17.4 through 17.4R3-S4 Juniper Networks Junos OS on SRX Series versions 18.2 through 18.2R3-S6 Juniper Networks Junos ...

PT-2021-12941

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 17.3R3-S9 Junos OS versions prior to 17.4R2-S11 Junos OS versions prior to 17.4R3-S2 Junos OS versions prior to 18.2R3-S5 Junos OS versions prior to 18.3R2-S4 Junos OS versions prior to 18.3R3-S3 Junos OS versions...

CVE-2021-0235: Incorrect Default Permissions

On SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series devices using tenant services on Juniper Networks Junos OS, due to incorrect permission scheme assigned to tenant system administrators, a tenant system administrator may inadvertently send their network traffic to...

CVE-2021-0227: Improper Restriction of Operations within the Bounds of a Memory Buffer

An improper restriction of operations within the bounds of a memory buffer vulnerability in Juniper Networks Junos OS J-Web on SRX Series devices allows an attacker to cause Denial of Service DoS by sending certain crafted HTTP packets. Continued receipt and processing of these packets will creat...

PT-2021-12960

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on SRX Series versions 15.1X49 through 15.1X49-D189 Juniper Networks Junos OS on SRX Series versions 17.4 through 17.4R2-S8 Juniper Networks Junos OS on SRX Series versions 17.4R3 through 18.1R3-S8 Juniper Networks...