CVE-2021-31372

CVE-2021-31372 affects Juniper Networks Junos OS J-Web; vulnerability is due to Improper Input Validation, allowing a locally authenticated J-Web user to escalate to root. Affected Junos OS versions range across 18.3R3-S5 and later 21.2R2, with various prior branch versions; the provided document...

CVE-2022-22251

Summary: CVE-2022-22251 affects Juniper Networks Junos OS on cSRX Series. The root cause is software permission issues in the container filesystem and stored files, combined with storing passwords in a recoverable format, enabling a local, low-privileged attacker to elevate privileges and take co...

CVE-2023-1697

The CVE-2023-1697 issue is an Improper Handling of Missing Values in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS . It causes a crash of the dcpfe process and a sustained Denial of Service (DoS) when a specific malformed ethernet frame is received. Affected products/versions in...

CVE-2023-44181

The vulnerability CVE-2023-44181 affects Juniper Networks Junos OS on QFX5k devices, caused by an improperly implemented security check in storm control. When storm control is enabled and ICMPv6 traffic is present, packets can be punted to the ARP queue, creating an L2 loop that can lead to DoS c...

CVE-2023-44194

CVE-2023-44194 affects Juniper Networks Junos OS. The vulnerability is due to incorrect default permissions in a system directory, allowing an unauthenticated, locally-present attacker to create a backdoor with root privileges. Affected versions include all before 20.4R3-S5, 21.1 before 21.1R3-S4...

CVE-2004-0468

CVE-2004-0468 describes a memory leak in Juniper’s JUNOS Packet Forwarding Engine (PFE) that can be exploited remotely by IPv6 packets to cause memory exhaustion and router reboot (DoS). OpenVAS notes a DoS vulnerability in Juniper Junos OS DoS vulnerability (CVE-2004-0468) tied to memory leakage...

CVE-2009-3485

CVE-2009-3485 is a cross-site scripting (XSS) vulnerability in the J-Web interface of Juniper JUNOS 8.5R1.14 and 9.0R1.1. The issue allows remote attackers to inject arbitrary web script or HTML via PATH_INFO to the default URI. Affected component: J-Web (Junos OS). Root cause: insufficient input...

CVE-2014-0617

The CVE-2014-0617 issue affects Juniper Junos OS on SRX Series gateways, with affected versions: 10.4S before 10.4S15, 10.4R before 10.4R16, 11.4 before 11.4R9, and 12.1R before 12.1R7. The vulnerability is in the flow daemon (flowd) and allows a remote attacker to cause a denial of service (flow...

CVE-2017-10614

CVE-2017-10614 concerns a denial-of-service via the telnetd service in Junos OS. A remote attacker can trigger memory and/or CPU consumption to cause limited DoS. Affected Junos OS releases include 12.1X46 (before 12.1X46-D45), 12.3X48 (before 12.3X48-D30), 14.1 (before 14.1R4-S9, 14.1R8), 14.2 (...

CVE-2017-2304

CVE-2017-2304 affects Juniper Junos OS on QFX3500/3600/5100/5200 and EX4300/EX4600 devices. The root cause is that Ethernet packets are not padded with zeros, allowing packets to reveal fragments of system memory or data from previous packets (Etherleak). Impact is information disclosure via netw...

CVE-2017-2342

CVE-2017-2342 affects Juniper Networks Junos OS on SRX300 series (15.1X49 prior to 15.1X49-D100). The MACsec feature may not report errors when a secure link cannot be established, causing a fallback to an unencrypted link and potentially misleading operators into believing the connection is secu...

CVE-2018-0005

CVE-2018-0005 affects Juniper Networks Junos OS on QFX and EX Series switches. When MAC move limit is exceeded, the device forwards instead of dropping, enabling a denial-of-service/unstable behavior. Affected releases: Junos OS 14.1X53 before 14.1X53-D40; 15.1X53 before 15.1X53-D55; 15.1 before ...

CVE-2018-0024

This CVE concerns an "Improper Privilege Management" flaw in a shell session of Juniper Networks Junos OS that allows an authenticated, unprivileged user to escalate to root. Affected releases include Junos OS on SRX Series (12.1X46 before 12.1X46-D45, 12.3X48 before 12.3X48-D20, 15.1X49 before 1...

CVE-2019-0019

CVE-2019-0019 describes a DoS vulnerability in Juniper Junos OS where enabling BGP tracing may cause the routing protocol daemon (rpd) to crash and restart on receipt of certain BGP messages. Repeated crashes can extend the DoS condition. Affected Junos OS releases include 16.1 (before 16.1R7-S4,...

CVE-2019-0038

The CVE-2019-0038 entry concerns Juniper SRX340/SRX345 devices running Junos OS. Affected component: management interface (fxp0). Root cause: crafted packets destined to fxp0 can exhaust buffer space, causing a denial of service (DoS) and service unresponsiveness. Impact is DoS affecting only SRX...

CVE-2020-1628

Juniper Junos OS on EX4300 is affected by an information exposure vulnerability (CVE-2020-1628) due to use of the 128.0.0.0/2 internal subnet for RE–PFE communications, which may cause packets to leak configuration details (e.g., heartbeats, kernel versions) to the Internet. Affected are multiple...

CVE-2020-1639

Affected product: Juniper Networks Junos OS. Issue: processing of specially crafted Ethernet OAM packets causes the CFM daemon to overflow due to improper handling of malformed data, leading to a Denial of Service (DoS) by crashing the CFM process; continued packet receipt can extend the DoS. Aff...

CVE-2021-0227

CVE-2021-0227 concerns a memory buffer bound-checking issue in Juniper Networks Junos OS J-Web on SRX Series devices that can enable a Denial of Service via crafted HTTP packets. Affected products include Junos OS on SRX Series with the listed version ranges (e.g., 17.3 before 17.3R3-S9; 17.4 bef...

CVE-2021-0272

CVE-2021-0272 affects Juniper Networks Junos OS on QFX10002-32Q/60C/72Q and QFX10008/QFX10016; it is a kernel memory leak in FPCs that can be triggered by processing genuine packets in EVPN-VXLAN scenarios, enabling DoS with possible device crashes/restarts on affected models. Public documents co...

CVE-2021-0299

This CVE (CVE-2021-0299) affects Juniper Networks Junos OS and is triggered by processing malformed IPv6 packets. A kernel crash occurs, restarting the device and causing a Denial of Service (DoS); sustained DoS can follow with continued malformed packets. Affected are IPv6-enabled devices runnin...

CVE-2022-22208

CVE-2022-22208 describes a Use After Free in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon (rdp) triggered by BGP session flaps. The race condition causes rpd crashes, leading to a network-based Denial of Service, with impact depending on the affected release. Affected ra...

CVE-2022-22238

The vulnerability CVE-2022-22238 affects Juniper Networks Junos OS and Junos OS Evolved. An unauthenticated, adjacent attacker can trigger a Denial of Service by sending a malformed RESV message for a protected LSP, causing an incorrect internal state and an rpd core. Affected are Junos OS and Ju...

CVE-2023-44193

CVE-2023-44193 affects Juniper Networks Junos OS on MX Series hardware. The issue is an improper release of memory before removing the last reference in the Packet Forwarding Engine (PFE) that, when CFM is enabled in a VPLS scenario and a specific LDP-related command is executed, can cause an FPC...

CVE-2024-39540

The CVE-2024-39540 affects Juniper Junos OS on SRX Series and MX Series with SPC3. Root cause: improper check for unusual or exceptional conditions in the Packet Forwarding Engine (pfe). Impact: unauthenticated, network‑based attacker can cause a DoS by sending specific valid TCP traffic, causing...

CVE-2024-39554

CVE-2024-39554 affects Juniper Networks Junos OS and Junos OS Evolved when BGP multipath is enabled. The vulnerability is in the Routing Protocol Daemon (rpd) caused by a race condition from concurrent execution using shared resources during the BGP multipath incremental calculation, which can al...

CVE-2026-21905

CVE-2026-21905 affects Juniper Junos OS on SRX Series and MX Series with MX-SPC3 or MS-MPC. The vulnerability is a loop with an unreachable exit condition in the SIP application layer gateway (ALG) that can be triggered by processing multiple SIP messages over TCP. This causes the flow management...

CVE-2013-4684

Concisely: CVE-2013-4684 affects Juniper Networks Junos OS on SRX devices where PIM and NAT are enabled. The Flow Daemon (flowd) can crash when processing specially crafted PIM packets, causing a denial of service. The OpenVAS NASL entry confirms the DoS via flowd crash; the patch path is labeled...

CVE-2013-4689

CVE-2013-4689 affects Juniper Junos J-Web, where CSRF protection can be bypassed to hijack administrator authentication. Affected Junos releases include before 10.4R13, 11.4 before 11.4R7, 12.1R before 12.1R6, 12.1X44 before 12.1X44-D15, 12.1x45 before 12.1X45-D10, 12.2 before 12.2R3, 12.3 before...

CVE-2014-6447

CVE-2014-6447 affects Juniper Networks Junos J-Web error handling, causing potential XSS or J-Web DoS. Affected Junos OS versions include: 12.1X44 (before 12.1X44-D45), 12.1X46 (before 12.1X46-D30), 12.1X47 (before 12.1X47-D20), 12.3 (before 12.3R8), 12.3X48 (before 12.3X48-D10), 13.1 (before 13....

CVE-2014-6448

CVE-2014-6448 affects Juniper Networks Junos OS: versions 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3. The vulnerability allows local users to bypass restrictions and execute arbitrary Python code through vectors involving shell access. The cited sources describe a local privileg...

CVE-2014-6450

CVE-2014-6450 affects Juniper Networks Junos OS when IPv6 is enabled. The vulnerability allows remote attackers to cause a denial of service via crafted IPv6 packets, leading to mbuf chain corruption and a kernel panic. Affected versions include Junos OS releases listed in the CVE description (e....

CVE-2017-10618

The CVE-2017-10618 issue affects Juniper Junos OS where enabling the bgp-error-tolerance feature can be abused by a BGP UPDATE containing specially crafted transitive attributes to cause the RPD routing process to crash and restart. Affected releases include numerous Junos versions across 13.3, 1...

CVE-2017-2341

CVE-2017-2341 covers an insufficient authentication vulnerability in Junos OS when run in a virtualized environment, enabling a guest to escalate to the host. Affected Junos OS releases include 14.1X53 pre-D40 (QFX5110, QFX5200, QFX10002/10008/10016, EX4600, NFX250), 15.1 pre-R5 (EX4600), 15.1X49...

CVE-2017-2343

CVE-2017-2343 affects Juniper Junos SRX Series with the Integrated User Firewall (UserFW) authentication API. The root cause is hardcoded credentials in UserFW, enabling an unauthenticated, remote attacker to potentially gain administrative access to the SRX device and compromise connected servic...

CVE-2018-0006

The CVE-2018-0006 vulnerability affects Junos OS on devices configured for DHCPv4/v6 over AE auto-sensed VLANs in Broadband Edge deployments. The issue is a Denial of Service caused by a high rate of VLAN authentication requests triggering unbounded memory allocations in the bbe-smgd (BBE subscri...

CVE-2018-0030

CVE-2018-0030 affects Juniper Networks Junos OS on MPC7/8/9 or PTX-FPC3 (FPC-P1, FPC-P2) line cards and PTX1K. Processing a specific MPLS packet can crash and restart the targeted hardware, causing a sustained DoS when packets are repeatedly sent. Affected releases include multiple 15.x, 16.x, an...

CVE-2018-0053

CVE-2018-0053 affects Juniper Networks Junos OS on vSRX Series. During the initial boot sequence, an authentication bypass may allow an attacker to gain full control of the system without authentication on Junos OS 15.1X49 prior to 15.1X49-D30. Affected product/version: vSRX, Junos OS 15.1X49 pri...

CVE-2018-0057

This CVE-2018-0057 pertains to Junos OS on MX Series and M120/M320 in a Broadband Edge (BBE) environment. When a subscriber authenticates via DHCP Option 50 to request a specific IP, the device assigns that requested IP even if a matching MAC-to-IP binding exists in the access profile and an addr...

CVE-2018-0063

CVE-2018-0063 affects Juniper Networks Junos OS 17.3R3, where the IP next-hop index database for the management interface can be flooded by ARP requests, exhausting the private IRI next-hop space and causing a sustained DoS. Once the next-hop database is full, no new next hops can be learned and ...

CVE-2019-0015

Summary: CVE-2019-0015 affects Junos OS on SRX Series (multiple releases) where a token caching error allows deleted dynamic VPN users to establish connections until a reboot. Affected versions: SRX 12.3X48 before 12.3X48-D75; 15.1X49 before 15.1X49-D150; 17.3 before 17.3R3; 17.4 before 17.4R2; 1...

CVE-2019-0036

CVE-2019-0036 affects Juniper Networks Junos OS and causes stateless firewall filter terms named like internal-n (for example internal-1) to be silently ignored during configuration. The config commits without error, but the filter criteria can inadvertently match all packets, leading to unintend...

CVE-2020-1613

The CVE describes a vulnerability in Juniper Junos OS BGP FlowSpec handling where receiving a specific FlowSpec advertisement can terminate an established BGP session. Affected products include Junos OS versions listed in the CVE (e.g., 12.3, 12.3X48, 14.1X53, 15.1R7-S5 and earlier, 16.1R7-S7 and...

CVE-2020-1629

CVE-2020-1629 describes a race-condition vulnerability in Juniper Networks Junos OS where the Routing Protocol Daemon (RPD) may crash and restart while processing a BGP NOTIFICATION message. Affected versions include Junos OS 16.1 prior to 16.1R7-S6; 16.2 prior to 16.2R2-S11; 17.1 prior to 17.1R2...

CVE-2020-1649

CVE-2020-1649 affects Juniper Junos OS on MX Series with MPC7/8/9 line cards when inline IP reassembly is enabled. Continuous receipt of small fragments that cannot be reassembled can disable the packet forwarding engine (PFE), causing a sustained DoS. Affected Junos OS versions are listed across...

CVE-2021-0243

CVE-2021-0243 affects Juniper Networks Junos OS on the EX4300, where the firewall policer’s discard action can fail on a Layer 2 port, allowing traffic to pass and be forwarded even when policer limits are exceeded. This impacts IPv4 policing (not IPv6 or firewall policing actions) and can manife...

CVE-2021-0246

CVE-2021-0246 affects Juniper Networks Junos OS on SRX1500/SRX4100/SRX4200/SRX4600/SRX5000 Series with SPC2/SPC3 in multi-tenant deployments. The root cause is incorrect default permissions assigned to tenant system administrators, which may allow a tenant to send their traffic to other tenants w...

CVE-2021-0248

CVE-2021-0248 affects Juniper Networks Junos OS on NFX Series devices where a hard-coded credential flaw allows an attacker to take over any instance of an NFX deployment . The vulnerability is exploitable only via administrative interfaces . Affected scope is Junos OS versions prior to 19.1R1 on...

CVE-2021-0266

CVE-2021-0266 affects Juniper Networks Junos OS on cSRX Series. The root cause is the use of multiple hard-coded cryptographic keys in cSRX deployments, enabling an attacker to take control of any instance via device management services. Reported affected versions include all prior to 20.2R3, 20....

CVE-2022-22223

CVE-2022-22223 affects Juniper Networks Junos OS on QFX10000 Series devices configured as transit IP/MPLS PHP nodes with LAG interfaces. An improper validation of an input index/position/offset allows crafted IP packets (IPv4 or IPv6) to detach multiple interfaces in a LAG, causing a DoS; sustain...

CVE-2022-22235

CVE-2022-22235 affects Juniper Networks Junos OS on SRX Series. The issue is an improper check in the Packet Forwarding Engine (PFE) that can cause a Denial of Service (PFE crash) when a GTP-encapsulated GPRS traffic packet with a malformed IP header field is processed. The crash occurs only if e...