CVE-2023-28964

CVE-2023-28964 affects Juniper Networks Junos OS and Junos OS Evolved. The vulnerability arises from an improper handling of a length parameter in the routing protocol daemon (RPD) that processes BGP flowspec updates. A network-based, unauthenticated attacker can send malformed BGP flowspec data ...

CVE-2023-28967

The CVE describes a Use of Uninitialized Resource vulnerability in Juniper Networks Junos OS and Junos OS Evolved BGP software that allows an unauthenticated network-based attacker to crash the Routing Protocol Daemon (rpd) by sending specific genuine BGP packets before a BGP session is establish...

CVE-2023-44193

CVE-2023-44193 affects Juniper Networks Junos OS on MX Series hardware. The issue is an improper release of memory before removing the last reference in the Packet Forwarding Engine (PFE) that, when CFM is enabled in a VPLS scenario and a specific LDP-related command is executed, can cause an FPC...

CVE-2026-57026

CVE-2026-57026 affects Junos OS on MX Series with SPC3 and SRX Series . The issue is an Improp er Validation of Syntactic Correctness of Input in the SIP plugin, enabling an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS) . When the SIP ALG is enabled, processing a malf...

CVE-2013-4684

Concisely: CVE-2013-4684 affects Juniper Networks Junos OS on SRX devices where PIM and NAT are enabled. The Flow Daemon (flowd) can crash when processing specially crafted PIM packets, causing a denial of service. The OpenVAS NASL entry confirms the DoS via flowd crash; the patch path is labeled...

CVE-2016-4922

CVE-2016-4922 — Junos OS privilege escalation . Affected: Juniper Networks Junos OS. Root cause: certain combinations of CLI commands and arguments allow a user with CLI permissions to gain elevated privileges and full control of the device. Impact: unauthorized access with complete control (conf...

CVE-2017-2300

The CVE-2017-2300 issue affects Juniper Networks SRX Series chassis clusters running Junos OS where the flowd daemon on the primary node crashes during multicast session synchronization. Affected versions are Junos OS 12.1X46 before 12.1X46-D65, and 12.3X48 before 12.3X48-D40 and before 12.3X48-D...

CVE-2017-2343

CVE-2017-2343 affects Juniper Junos SRX Series with the Integrated User Firewall (UserFW) authentication API. The root cause is hardcoded credentials in UserFW, enabling an unauthenticated, remote attacker to potentially gain administrative access to the SRX device and compromise connected servic...

CVE-2018-0026

CVE-2018-0026 affects Juniper Networks Junos OS: stateless firewall filter rules may stop taking effect after reboot or upgrade. Affected releases include Junos OS 15.1R4, 15.1R5, 15.1R6 and SRs based on these MRs, and 15.1X8 releases prior to 15.1X8.3. The issue can be observed via commands that...

CVE-2018-0035

CVE-2018-0035 affects Juniper QFX5200 and QFX10002 devices shipped with Junos OS 15.1X53-D21 through -D60 (and upgrades to these releases) that may include an unintended extra ONIE partition. This partition enables the superuser to reboot into ONIE, wiping the Junos partition and its configuratio...

CVE-2019-0007

CVE-2019-0007 affects Juniper Networks Junos OS on the vMX Series, with affected releases: 15.1 versions prior to 15.1F5. The root cause is a predictable IP ID sequence number used by the device, enabling a family of attacks that rely on that predictability to compromise the system and clients pa...

CVE-2019-0028

The CVE-2019-0028 entry affects Junos OS where BGP graceful restart (helper mode or mechanism) is enabled. A remote peer with graceful restart enabled can trigger a crafted BGP session restart that crashes the local Routing Protocol Daemon (RPD), crashing and restarting it and enabling a prolonge...

CVE-2019-0036

CVE-2019-0036 affects Juniper Networks Junos OS and causes stateless firewall filter terms named like internal-n (for example internal-1) to be silently ignored during configuration. The config commits without error, but the filter criteria can inadvertently match all packets, leading to unintend...

CVE-2020-1604

CVE-2020-1604 affects Junos OS on EX4300/EX4600/QFX3500/QFX5100 series. The IP firewall filter component may fail to evaluate certain IPv4/IPv6 packets destined to the Routing Engine, but L2/L3 filter paths to hosts are unaffected. Affected releases include 14.1X53 before certain D revisions (QFX...

CVE-2020-1607

CVE-2020-1607 is a Junos OS/J-Web cross-site scripting vulnerability. The root cause is insufficient XSS protection in J-Web, allowing a remote attacker to inject scripts or HTML to hijack an authenticated user’s J-Web session and perform admin actions. Affected software ranges are extensive, inc...

CVE-2020-1629

CVE-2020-1629 describes a race-condition vulnerability in Juniper Networks Junos OS where the Routing Protocol Daemon (RPD) may crash and restart while processing a BGP NOTIFICATION message. Affected versions include Junos OS 16.1 prior to 16.1R7-S6; 16.2 prior to 16.2R2-S11; 17.1 prior to 17.1R2...

CVE-2020-1644

CVE-2020-1644 affects Juniper Networks Junos OS and Junos OS Evolved. A specific BGP UPDATE packet can increment an internal counter incorrectly, leading to the Routing Protocols Daemon (RPD) crash and restart for both IBGP and EBGP multihop in IPv4/IPv6. Affected software ranges include Junos OS...

CVE-2021-0266

CVE-2021-0266 affects Juniper Networks Junos OS on cSRX Series. The root cause is the use of multiple hard-coded cryptographic keys in cSRX deployments, enabling an attacker to take control of any instance via device management services. Reported affected versions include all prior to 20.2R3, 20....

CVE-2022-22235

CVE-2022-22235 affects Juniper Networks Junos OS on SRX Series. The issue is an improper check in the Packet Forwarding Engine (PFE) that can cause a Denial of Service (PFE crash) when a GTP-encapsulated GPRS traffic packet with a malformed IP header field is processed. The crash occurs only if e...

CVE-2023-36838

CVE-2023-36838 affects Juniper Networks Junos OS on SRX Series, with an out-of-bounds read in the flow processing daemon (flowd) that a local, authenticated, low-privilege attacker can exploit by issuing a specific CLI command to crash flowd and cause a DoS. The vulnerability can produce a core d...

CVE-2023-44184

The CVE-2023-44184 issue affects Juniper Networks Junos OS and Junos OS Evolved in the mgd (management daemon) component. A memory-buffer bound check violation allows a network-based, authenticated, low-privileged attacker to execute a specific NETCONF command that can cause CPU denial of service...

CVE-2024-21599

CVE-2024-21599 concerns a memory-release after lifetime issue in the PFE of Juniper Junos OS on MX Series with MPC3E. A memory leak is triggered when the device receives PTP packets on a MPC3E that does not support PTP, potentially causing unpredictable behavior and an MPC crash/restart (DoS) in ...

CVE-2026-21906

CVE-2026-21906 overview (Junos OS SRX Series) A vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series can be triggered by a specific ICMP packet routed through a GRE tunnel when PowerMode IPsec (PMI) and GRE performance acceleration are enabled. An unauthe...

CVE-2016-4923

CVE-2016-4923 affects Junos OS J-Web. The vulnerability arises from insufficient cross-site scripting protection in the J-Web component, enabling a remote unauthenticated user to inject script/HTML, potentially stealing data and allowing administrative actions on the Junos device. Affected releas...

CVE-2017-10608

CVE-2017-10608 affects Juniper SRX devices running Junos OS with Sun/MS-RPC ALG services enabled. The issue is a flowd crash triggered by processing IPv6 traffic via the Sun/MS-RPC ALG components, causing a repeated denial of service and, in clusters, potential flip-flop or complete flowd daemon ...

CVE-2017-10613

CVE-2017-10613 affects Juniper Junos OS kernels where a loopback filter action command in a running configuration can be triggered by an attacker with CLI access and the ability to initiate remote sessions to the loopback interface, causing the kernel to hang. Affected Junos releases include 12.1...

CVE-2018-0029

CVE-2018-0029 affects Junos OS: enabling monitor traffic interface fxp0 in promiscuous mode during a broadcast storm can crash the system (vmcore) on both single-core and multi-core REs. Affected Junos OS versions include 15.1 (and later) with specific builds listed (e.g., 15.1F6-S11, 15.1R4-S9, ...

CVE-2018-0044

An insecure SSHD configuration (PermitEmptyPasswords = yes) in Juniper Device Manager and the host OS on Juniper NFX Series devices allows remote unauthenticated access if any passwords are empty. Affected: Junos OS 18.1 versions prior to 18.1R4 on NFX Series. Root cause: SSHD permitting empty pa...

CVE-2019-0033

CVE-2019-0033: A firewall bypass vulnerability in the proxy ARP service of Juniper Networks Junos OS can cause a high CPU condition leading to a Denial of Service (DoS). Affected products: Junos OS releases across multiple lines (e.g., 12.1X46 family with builds D25–D71, 12.1X46-D73 on SRX Series...

CVE-2019-0041

CVE-2019-0041 affects Juniper Networks Junos OS on the EX4300-MP Series. With any lo0 filters applied, transit network traffic could reach the control plane via the loopback interface (lo0) and the device may fail to forward such traffic. Affected software: Junos OS 18.2 prior to 18.2R1-S2 and 18...

CVE-2019-0043

CVE-2019-0043 describes a denial-of-service vulnerability in Junos OS where receipt of a specially crafted SNMP packet can cause the RPD process to crash and restart, leading to prolonged DoS. Affected Juniper releases span multiple lines of Junos OS across SRX, EX/QFX, NFX, ACX, and other series...

CVE-2019-0051

CVE-2019-0051 affects Juniper Junos OS on SRX5000 Series. The SSL-Proxy feature cannot handle a hardware resource limitation, allowing a remote SSL/TLS server to crash the flowd daemon when clients protected by an SRX initiate a connection to a malicious server. This can yield an extended DoS con...

CVE-2020-1655

CVE-2020-1655 affects Juniper Networks Junos OS on MX Series with MPC7/8/9 line cards when inline IP reassembly is enabled. The vulnerability enables an attacker to repeatedly disable the packet forwarding engine (PFE) by sending large fragmented packets that cannot be reassembled, causing a sust...

CVE-2020-1678

CVE-2020-1678 affects Juniper Networks Junos OS and Junos OS Evolved on devices with EVPN configured. The issue is a slow memory leak triggered by receipt of specific BGP EVPN traffic, which can exhaust memory and cause the rpd process to crash. The vulnerability is evidenced by repeated queries ...

CVE-2020-1682

CVE-2020-1682 (Junos OS) affects SRX1500, SRX4100, SRX4200, NFX150, NFX250, and vSRX-based platforms. An input validation vulnerability exists in the srxpfe process that allows an attacker to crash the process by issuing specific maintenance commands, causing a Denial of Service. The srxpfe proce...

CVE-2021-0235

The CVE-2021-0235 issue affects Juniper Networks Junos OS on SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, and vSRX Series in multi-tenant environments. Root cause: incorrect permission scheme assigned to tenant system administrators, which may allow a tenant admin to misdire...

CVE-2021-0251

CVE-2021-0251 describes a NULL pointer dereference in Juniper Networks Junos OS CPCD daemon (cpcd) on MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC. The flaw allows an attacker to send malformed HTTP packets that crash mspmand and related services, causing a sustained DoS and login denial whil...

CVE-2021-0256

CVE-2021-0256 affects Juniper Junos OS (mosquitto component) where a locally authenticated user with shell access can read sensitive files (e.g., master.passwd) due to mosquitto running with setuid root. The issue affects multiple Junos OS releases listed in the CVE description (e.g., 17.3R3-S12 ...

CVE-2021-31367

CVE-2021-31367 is a memory leak CVE affecting Juniper Networks Junos OS on PTX Series. The issue is a Missing Release of Memory after Effective Lifetime in the Packet Forwarding Engine (PFE) that allows an adjacent attacker to trigger a Denial of Service (DoS) by sending legitimate BGP flowspec p...

CVE-2023-36848

The CVE refers to Juniper Junos OS MX Series PPMD vulnerability where an Improper Handling of Undefined Values on receipt of a malformed CFM packet can crash the FPC and cause DoS. Affected software includes Junos OS on MX Series with CFM enabled, with the issue present in multiple released branc...

CVE-2023-44191

CVE-2023-44191 – Juniper Junos OS DoS on large VLAN deployments (QFX5000/EX4000) Root cause: An Allocation of Resources Without Limits or Throttling vulnerability in Junos OS allows an unauthenticated, network-based attacker to trigger Denial of Service via a specific DHCP packet when many VLANs ...

CVE-2024-47494

CVE-2024-47494 affects Juniper Networks Junos OS, specifically the AgentD process and related FPC handling. A TOCTOU race condition during telemetry polling can cause AgentD to reaping an already destroyed sensor, leading to memory corruption and a DoS when the FPC crashes. The FPC auto-recovers ...

CVE-2014-0618

The CVE-2014-0618 entry affects Juniper Junos SRX Series gateways when configured as a UAC enforcer with Captive Portal enabled. A crafted HTTP message can cause the flowd daemon to crash, leading to remote denial of service. Affected versions include Junos releases prior to 10.4R16, 11.4R8, 12.1...

CVE-2014-6385

CVE-2014-6385 affects Juniper Junos OS (versions listed in the CVE) and can allow a remote adjacent attacker to cause a denial of service by processing crafted fragmented OSPFv3 packets with an IPsec AH. The connected Nessus/NVD/OpenVAS entries corroborate a fragmentation-based DoS affecting Juno...

CVE-2015-7748

CVE-2015-7748 affects Juniper Networks Junos OS on Trio (Trinity) chipset line cards. A remote attacker can crash the MPC line card by sending crafted uBFD packets, yielding a denial-of-service. Affected: Junos OS versions 13.3 before 13.3R8; 14.1 before 14.1R6; 14.2 before 14.2R5; 15.1 before 15...

CVE-2017-10604

CVE-2017-10604 affects Juniper SRX Series devices running Junos OS in cluster mode. The issue arises when account lockout is enabled: an unauthenticated user making failed root login attempts can trigger root lockout, which in turn causes cluster sync or failover errors. Affected releases are SRX...

CVE-2017-10621

CVE-2017-10621 describes a denial-of-service in the Juniper Junos OS telnetd. Connected documents indicate a remote unauthenticated attacker could trigger DoS via telnetd memory/CPU consumption. Affected Junos OS releases include multiple line items (e.g., 12.1X46 before 12.1X46-D71; 12.3X48 befo...

CVE-2017-2302

CVE-2017-2302 affects Junos OS with BGP add-path enabled (send or both send/receive) across multiple releases (e.g., 12.1X46–D55, 12.1X47–D45, 12.3R13–, 12.3X48–D35, 13.3–R10, 14.1–R8, 14.1X53–D40, 14.1X55–D35, 14.2–R6, 15.1–F2/R1, 15.1X49–D20). A network-based attacker can cause the rpd daemon t...

CVE-2017-2303

CVE-2017-2303 affects Juniper Junos OS when RIP is enabled. The vulnerability arises from how RIP advertisements are processed by the routing protocol daemon (rpd), allowing certain crafted RIP updates to crash rpd and cause a denial-of-service condition. Affected Junos versions include 12.1X46 b...

CVE-2019-0040

CVE-2019-0040 affects Juniper Junos OS on multiple 15.x–17.x releases based on FreeBSD 10 or higher. The issue is an information disclosure in rpcbind: external packets to port 111 may elicit responses from the management interface (e.g., fxp0), exposing internal addressing and the existence of t...