Juniper Junos SRX Series ALG 'flowd' Remote DoS (JSA10650)

According to its self-reported version number, the remote Juniper Junos SRX series device is affected by a denial of service vulnerability related to ALG Application Layer Gateway. A remote attacker can exploit this issue by sending a specially crafted SIP packet to an SRX series device, resultin...

Juniper Networks Junos OS Web Authentication XSS Vulnerability

XSS vulnerability in webauth SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if description...

Juniper Networks Junos OS SIP ALG Denial of Service Vulnerability

DoS on SRX devices when SIP ALG is enabled SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if description...

Juniper Networks Junos OS NAT Protocol Translation Denial of Service Vulnerability

DoS in NAT Protocol Translation SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if description...

Juniper Junos SRX Series Web Authentication XSS (JSA10640)

According to its self-reported version number, the remote Junos device is affected by a reflected cross site scripting vulnerability. An attacker can exploit this to steal sensitive information or session credentials from firewall users. Note that this issue only affects devices where Web...

Juniper Junos SRX Series SIP ALG Remote DoS (JSA10633)

According to its self-reported version number, the remote Junos device is affected by a denial of service vulnerability. A remote attacker, by sending a specially crafted SIP packet to an SRX series device, can crash the 'flowd' process. Note that this issue only affects SRX series devices when S...

Juniper Junos SRX Series NAT IPv6 to IPv4 Remote DoS (JSA10635)

According to its self-reported version number, the remote Juniper Junos SRX series device is affected by a denial of service vulnerability. A remote attacker, by sending a specially crafted packet to an SRX series device, can crash the 'flowd' process when the packet is translated from IPv6 to...

CVE-2014-3822

Juniper Junos 11.4 before 11.4R8, 12.1 before 12.1R5, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.1X46 before 12.1X46-D10, and 12.1X47 before 12.1X47-D10 on SRX Series devices, allows remote attackers to cause a denial of service flowd crash via a malformed packet, related to...

Input validation

Juniper Junos 11.4 before 11.4R8, 12.1 before 12.1R5, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D15, 12.1X46 before 12.1X46-D10, and 12.1X47 before 12.1X47-D10 on SRX Series devices, allows remote attackers to cause a denial of service flowd crash via a malformed packet, related to...

CVE-2014-3822

Summary: CVE-2014-3822 affects Juniper Junos SRX Series devices and relates to the IPv6-to-IPv4 translation path. The issue can be triggered by a malformed packet, causing a denial of service via the flowd process crash. Affected software/versions (as provided): Junos OS on SRX Series with 11.4 b...

CVE-2014-3815

CVE-2014-3815 affects Juniper Junos SRX Series devices, where SIP ALG processing allows remote attackers to crash the flowd daemon via a crafted SIP packet. Impact described as denial of service with affected versions: Junos 12.1X46 before 12.1X46-D20 and 12.1X47 before 12.1X47-D10. Public contex...

CVE-2014-3821

The CVE-2014-3821 entry describes a Cross-site scripting (XSS) vulnerability in Juniper Junos SRX Web Authentication (webauth) across multiple releases (11.4 before 11.4R11; 12.1X44 before 12.1X44-D34; 12.1X45 before 12.1X45-D25; 12.1X46 before 12.1X46-D20; 12.1X47 before 12.1X47-D10). The issue ...

Juniper Networks Junos OS Web Filtering Denial of Service Vulnerability

Denial of Service Vulnerability when Enhanced Web Filtering is enabled. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Juniper Networks Junos OS DoS Vulnerability (JSA10620)

Juniper Networks Junos OS is prone to a denial of service DoS vulnerability for new dynamic VPN connections. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2014-2714

The Enhanced Web Filtering EWF in Juniper Junos before 10.4R15, 11.4 before 11.4R9, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D10, and 12.1X46 before 12.1X46-D10, as used in the SRX Series services gateways, allows remote attackers to cause a denial of service flow...

Juniper JunOS SRX服务网关动态VPN连接拒绝服务漏洞

CVE ID:CVE-2014-0612 Juniper JunOS SRX Branch Series Service Gateways是系列服务网关动态服务架构产品。 Juniper JunOS SRX Branch Series Service Gateways在动态VPN连接的实现上存在错误，这可导致未授权访问及拒绝服务攻击。 0 Juniper Networks JunOS SRX Branch Series Service Gateways 12.x Juniper Networks JunOS SRX Branch Series Service Gateways 11.x...

Juniper Junos SRX Series flowd DoS (JSA10622)

According to its self-reported version number, the remote Junos device is affected by a denial of service vulnerability due to improper processing by the Enhanced Web Filtering EWF. An attacker can exploit this vulnerability by sending a crafted URL to crash the flow daemon flowd process. Repeate...

Juniper Junos SRX Series Dynamic IPsec VPN DoS (JSA10620)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability related to the Dynamic IPsec VPN service. A remote, unauthenticated attacker can exploit this vulnerability to cause new Dynamic VPN connections to fail for other users ...

Juniper Junos SRX Series flowd Remote DoS (JSA10611)

According to its self-reported version number, the remote Juniper Junos SRX series device is affected by a denial of service vulnerability in the flow daemon flowd when handling certain valid HTTP protocol messages. A remote attacker can exploit this to crash the device. Note that this issue only...

Juniper Junos SRX Series flowd Remote DoS (JSA10610)

According to its self-reported version number, the remote Junos device is affected by a denial of service vulnerability in the flow daemon flowd. A remote attacker can exploit this, via crafted IP packets, to crash the device. C Tenable Network Security, Inc. include"compat.inc"; if description...