CVE-2024-39545

The CVE describes an Improper Check for Unusual or Exceptional Conditions in Juniper Networks Junos OS iked (on SRX Series, MX Series with SPC3, and NFX350), where unauthenticated network-based attackers can trigger an iked crash during IPsec negotiations by sending specific mismatching parameter...

CVE-2024-47494

CVE-2024-47494 affects Juniper Networks Junos OS, specifically the AgentD process and related FPC handling. A TOCTOU race condition during telemetry polling can cause AgentD to reaping an already destroyed sensor, leading to memory corruption and a DoS when the FPC crashes. The FPC auto-recovers ...

CVE-2025-21600

CVE-2025-21600 describes an Out-of-Bounds Read in Juniper’s routing protocol daemon (rpd) used by Junos OS and Junos OS Evolved. An unauthenticated, directly connected BGP peer sending a malformed BGP packet can crash and restart rpd, causing a DoS. Affected: iBGP/eBGP with any address family, fo...

CVE-2014-2713

Affected product: Juniper Junos OS on MX Series and T4000 routers. Vulnerable component: Packet Forwarding Engine (PFE) modules, specifically Trio-based and Cassis-based PFEs. Root cause/issue: remote attacker can send a crafted IP packet to trigger a PFE restart, causing a denial of service (pot...

CVE-2016-1257

The CVE-2016-1257 entry describes a denial-of-service vulnerability in Juniper Junos OS Routing Engine (RPD) when LDP is enabled. A remote attacker can send crafted LDP packets to cause the RPD routing process to crash and restart. Affected software ranges include Junos OS releases such as 13.2R5...

CVE-2016-1275

CVE-2016-1275 affects Juniper Junos OS prior to certain releases (13.3R9, 14.1R6 to 14.1R6-S1, and 14.1 prior to 14.1R7) when VPLS routing-instances are configured. The vulnerability allows a remote, adjacent attacker to obtain sensitive mbuf information by injecting a flood of Ethernet frames wi...

CVE-2017-10604

CVE-2017-10604 affects Juniper SRX Series devices running Junos OS in cluster mode. The issue arises when account lockout is enabled: an unauthenticated user making failed root login attempts can trigger root lockout, which in turn causes cluster sync or failover errors. Affected releases are SRX...

CVE-2017-10608

CVE-2017-10608 affects Juniper SRX devices running Junos OS with Sun/MS-RPC ALG services enabled. The issue is a flowd crash triggered by processing IPv6 traffic via the Sun/MS-RPC ALG components, causing a repeated denial of service and, in clusters, potential flip-flop or complete flowd daemon ...

CVE-2017-2303

CVE-2017-2303 affects Juniper Junos OS when RIP is enabled. The vulnerability arises from how RIP advertisements are processed by the routing protocol daemon (rpd), allowing certain crafted RIP updates to crash rpd and cause a denial-of-service condition. Affected Junos versions include 12.1X46 b...

CVE-2017-2346

The CVE-2017-2346 issue affects Juniper Networks Junos OS on MX platforms, where an ALG handling of large fragmented packets can crash the MS-MPC/MS-MIC Service PIC, causing extended DoS. Impact is confined to specific Junos versions on MX hardware (e.g., 14.1X55-D30 to before 14.1X55-D35; 14.2R7...

CVE-2018-0049

CVE-2018-0049 (Juniper Junos OS) involves a NULL pointer dereference in the Junos OS kernel that can crash the device, causing a sustained Denial of Service when a crafted MPLS packet is received on an interface configured for MPLS. The vulnerability affects multiple Junos OS releases across plat...

CVE-2019-0050

CVE-2019-0050 affects Juniper Junos OS on SRX1500; the srxpfe process can crash under heavy traffic, causing DoS and potential traffic-forwarding failure. Affected releases include 15.1X49 (before D170), 17.3 (before R3-S7), 17.4 (before R2-S8, R3), 18.1 (before R3-S8), 18.2 (before R3), 18.3 (be...

CVE-2021-0240

CVE-2021-0240 affects Juniper Networks Junos OS when configured as DHCPv6 local server or DHCPv6 Relay Agent. A malformed DHCPv6 packet can crash the JDHCPD daemon, causing it to restart; continued receipt of such packets can sustain a DoS on affected devices. Affected Junos OS versions include 1...

CVE-2021-0255

CVE-2021-0255 describes a local privilege-escalation in Juniper Junos OS due to ethtraceroute (a setuid root binary) which can be exploited by a locally authenticated user with shell access to gain root privileges and write to the local filesystem. Affected Junos OS versions span multiple branche...

CVE-2023-28984

CVE-2023-28984 describes a Use-After-Free in Juniper Networks Junos OS, specifically in the Layer 2 Address Learning Manager (l2alm) of the QFX Series. The underlying issue is a race condition involving shared resources and improper synchronization, which can cause the Packet Forwarding Engine (P...

CVE-2023-44178

CVE-2023-44178 describes a stack-based buffer overflow in the CLI command processing of Juniper Networks Junos OS. A low-privilege attacker can trigger the overflow by executing specific CLI commands, resulting in a Denial of Service (DoS); repeated actions cause a sustained DoS. Affected Junos O...

CVE-2024-21585

CVE-2024-21585 affects Juniper Networks Junos OS and Junos OS Evolved. An Improper Handling of Exceptional Conditions in BGP session processing on NSR-enabled devices can allow an unauthenticated network-based attacker to cause BGP session flaps, triggering replication of GR/LLGR state and leadin...

CVE-2024-39526

CVE-2024-39526 affects Junos OS on MX Series (MPC10/MPC11/LC9600), EX9200 (EX9200-15C), MX304, and Junos OS Evolved on PTX Series. The issue is an improper handling of exceptional conditions in DHCP packet processing; when DHCP snooping is enabled, malformed DHCP packets can cause ingress process...

CVE-2024-39533

CVE-2024-39533 affects Junos OS on QFX5000 Series and EX4600 Series where an Unimplemented or Unsupported Feature in the UI allows an unauthenticated, network-based attacker to cause a minor integrity impact on downstream networks when certain match conditions (ip-source-address, ip-destination-a...

CVE-2024-39555

Summary of vulnerability (CVE-2024-39555): Juniper Networks Junos OS and Junos OS Evolved RPD mishandles certain malformed BGP Update messages when segment routing is enabled, causing session resets and potential DoS. A remote attacker must have at least one established BGP session; affected are ...

CVE-2024-39560

Juniper Junos OS and Junos OS Evolved are affected by CVE-2024-39560 via the routing protocol daemon (rpd). The issue is an improper handling of exceptional conditions that lets a logically adjacent downstream RSVP neighbor induce kernel memory exhaustion and a DoS. Affected ranges include multip...

CVE-2024-47496

CVE-2024-47496 affects Juniper Networks Junos OS on MX Series devices with MPC1–MPC9 line cards. A NULL pointer dereference in the Packet Forwarding Engine (pfe) can crash pfe when a specific command is run, causing traffic forwarding interruption and a sustained DoS until self-recovery. Affected...

CVE-2015-5363

CVE-2015-5363 affects Juniper Networks Junos SRX Series, specifically the SRX Network Security Daemon (nsd). The vulnerability allows a remote DNS server to trigger a denial of service (crash) in nsd by sending a crafted DNS response. Affected releases include Junos 12.1X44 before 12.1X44-D50, 12...

CVE-2015-7749

CVE-2015-7749 affects Juniper Networks Junos OS vSRX virtual firewalls. The Denial of Service vulnerability originates in the PFE daemon and can be triggered by an unspecified connection request to the host-OS, potentially impacting versions prior to 15.1X49-D20. The cited CVSSv2 base score is 7....

CVE-2015-7752

CVE-2015-7752 affects Juniper Networks Junos OS SSH server on multiple releases (listed in the description). A remote attacker can cause a denial of service via unspecified SSH traffic, resulting in CPU consumption. Public exploit details are not provided in the supplied documents; remediation/fi...

CVE-2018-0044

An insecure SSHD configuration (PermitEmptyPasswords = yes) in Juniper Device Manager and the host OS on Juniper NFX Series devices allows remote unauthenticated access if any passwords are empty. Affected: Junos OS 18.1 versions prior to 18.1R4 on NFX Series. Root cause: SSHD permitting empty pa...

CVE-2018-0050

The CVE affects Juniper Networks Junos OS where receiving malformed MPLS RSVP traffic on an interface can crash the Routing Protocols Daemon (RPD), causing a sustained DoS. Affected versions include Junos OS 14.1 (prior to 14.1R8-S5, 14.1R9; 14.1X53-D48 on QFX), 14.2 (prior to 14.1X53-D130 on QFa...

CVE-2019-0047

CVE-2019-0047 is a reported persistent XSS vulnerability in the Junos OS J-Web interface. The description and connected sources confirm that remote attackers could leverage J-Web to perform administrative actions after a prerequisite diagnostic action by a Junos administrator. Affected are Junipe...

CVE-2019-0062

CVE-2019-0062 describes a session-fixation vulnerability in Juniper Junos OS J-Web that can allow an attacker to fix and hijack a web session and potentially gain administrative access. Affected products and versions include Juniper EX Series running Junos OS 12.3 before 12.3R12-S15; SRX Series 1...

CVE-2020-1600

CVE-2020-1600 in Juniper Junos OS RPD: A specific SNMP command in a P2MP LSP scenario can trigger an infinite loop, causing high CPU and DoS across SNMPv4/v6. Affected Junos versions include 12.3X48 prior to 12.3X48-D90; 15.1 prior to 15.1R7-S6; 15.1X49 prior to 15.1X49-D200; 15.1X53 prior to 15....

CVE-2020-1625

CVE-2020-1625 describes a kernel memory leak in Junos OS virtual-memory (temp) when IRB is configured with multiple underlay interfaces and one interface flaps, causing DoS through escalating temp memory usage. Affected Junos OS versions span multiple branches (e.g., 16.1, 17.1, 17.2, 17.3, 17.4,...

CVE-2020-1627

The CVE-2020-1627 issue affects Juniper Networks Junos OS on vMX and MX150, where crafted packets trigger special microcode processing that overwhelms the flow cache, causing the riot forwarding daemon to crash and a DoS. Affected releases include 18.1 before 18.1R3, 18.2 before 18.2R3, 18.2X75 b...

CVE-2020-1638

The CVE-2020-1638 issue affects Juniper Junos OS and Junos OS Evolved FPCs in MX Series (MPC10E/MPC11E) and PTX10001/PTX10003 lines, where processing a specific IPv4 packet can trigger an FPC restart and drop all traffic via the FPC, causing a sustained DoS. Affected ranges include: Junos OS on M...

CVE-2020-1646

CVE-2020-1646 affects Juniper Networks Junos OS and Junos OS Evolved. The issue arises when processing a specific BGP UPDATE for an EBGP peer, causing the routing process daemon (RPD) to crash and restart. The crash occurs only for EBGP UPDATE processing toward an EBGP peer; an EBGP-originating u...

CVE-2020-1653

CVE-2020-1653 affects Juniper Networks Junos OS: a stream of TCP packets to the Routing Engine may cause an mbuf leak, potentially crashing the FPC or the whole system (vmcore). The issue is triggerable by IPv4 or IPv6 and is due to TCP packet handling, not a specific config. Affected releases st...

CVE-2020-1664

CVE-2020-1664 documents a stack buffer overflow in Juniper Networks Junos OS device control daemon (DCD). The issue allows a low-privilege local user to cause a DoS or execute arbitrary code with root privileges. Affected products include Junos OS versions listed in the CVE (e.g., 17.3 through 20...

CVE-2020-1673

CVE-2020-1673 is a J-Web/XSS vulnerability in Juniper Networks Junos OS where insufficient XSS protection on HTTP/HTTPS web services can allow an unauthenticated attacker to hijack a user session and impersonate the targeted user’s admin actions. Affected products are Junos OS devices with HTTP/H...

CVE-2020-1689

The CVE-2020-1689 entry affects Junos OS on Juniper EX4300-MP, EX4600, and QFX5K Series deployed in Virtual Chassis. It describes a DoS-like high CPU load caused by receipt of a stream of specific Layer 2 frames from within the broadcast domain, potentially leading to traffic interruption. The is...

CVE-2021-0236

The CVE-2021-0236 issue affects Juniper Networks Junos OS and Junos OS Evolved, specifically MP-BGP VPNv6 FlowSpec processing. The root cause is an improper check for unusual or exceptional conditions in the RPD when handling a matching BGP FlowSpec packet, leading to a crash and restart and a su...

CVE-2021-0260

CVE-2021-0260 affects Juniper Networks Junos OS SNMP daemon (snmpd), where improper authorization allows unauthenticated attackers to read/write OIDs and expose data. Affected: Junos OS versions spanning 17.2R1+ through 19.3R2/various fixed-suffix builds (e.g., 17.2R1 and later, 17.3R3-S9+, 17.4R...

CVE-2021-0269

The CVE-2021-0269 entry concerns Juniper Networks Junos OS J-Web. The root cause is improper handling of client-side parameters, allowing an authenticated attacker to supersede or modify HTTP/S session parameters, bypass input validation rules, and alter J-Web behavior. Potential consequences inc...

CVE-2023-22409

This CVE concerns Juniper Networks Junos OS NAT functionality where an unchecked input for a loop condition in the NAT library can crash SPC3 on SRX/MX devices, causing a DoS when an inconsistent deterministic NAT configuration is used and a specific CLI command is executed. The issue is triggere...

CVE-2024-21600

CVE-2024-21600 describes an issue in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on PTX Series. An improper neutralization of equivalent special elements allows an unauthenticated, adjacent attacker to trigger a Denial of Service by causing a host path wedge when MPLS packets ...

CVE-2024-21606

CVE-2024-21606 affects Juniper Networks Junos OS on SRX Series with a Double Free vulnerability in the flowd daemon . In a remote-access VPN, if a tcp-encap-profile is configured and a sequence of specific packets is received, a flowd crash and restart can occur, caused by a faulty free operation...

CVE-2025-52989

CVE-2025-52989 describes an Improper Neutralization of Delimiters vulnerability in the UI of Juniper Networks Junos OS and Junos OS Evolved. A local, authenticated attacker with high privileges can exploit a specially crafted annotate configuration command to modify any part of the device configu...

CVE-2014-0613

CVE-2014-0613 affects Juniper Junos OS XNM command processor. Versions listed (various 10.4, 11.x, 12.x, 13.x) are impacted when xnm-ssl or xnm-clear-text is enabled, allowing remote attackers to cause a denial of service via memory consumption. OpenVAS notes a vendor fix as remediation, but does...

CVE-2014-6449

CVE-2014-6449 affects Juniper Networks Junos OS (multiple branches/versions) where TCP packet reassembly is mishandled. A remote attacker can cause a denial of service by sending a crafted sequence of packets destined to the device, leading to buffer consumption. Concretely, the vulnerability tar...

CVE-2015-5360

Juniper Junos IPv6 SEND handling DoS (CVE-2015-5360) affects Junos with SEND security-level default enabled. A remote attacker can craft SEND Protocol packets to trigger CPU exhaustion, impacting CLI responsiveness and IPv6 packet processing. Exploitation details are described in multiple sources...

CVE-2017-2312

CVE-2017-2312 affects Juniper Networks Junos OS devices with LDP enabled (IPv4 or IPv6) where a targeted LDP packet to the Routing Engine consumes incremental memory in the rpd daemon, leading to memory exhaustion and a crash/restart of rpd. Affected Junos versions include 13.3 before 13.3R10; 14...

CVE-2018-0032

CVE-2018-0032 affects Juniper Networks Junos OS where receiving a crafted BGP UPDATE can crash and restart the routing process daemon (RPD). Repeated identical crafted updates may cause an extended denial-of-service condition. Affected are specific Junos OS releases: 16.1X65 versions before 16.1X...