CVE-2025-21594

Summary (CVE-2025-21594) : Affects Juniper Networks Junos OS on MX Series. The issue is an improper check in the packet forwarding engine (pfe) that can block a port pool when processing crafted IPv6 traffic in a DS-Lite/NAT scenario, causing Denial of Service. In the affected scenarios, ports as...

CVE-2024-30398

CVE-2024-30398 – Juniper Junos OS SRX4600 PFE DoS . An improper restriction of operations within the bounds of a memory buffer in the Packet Forwarding Engine (PFE) allows an unauthenticated, network-based attacker to cause a DoS when processing a high amount of specific traffic on SRX4600 device...

CVE-2019-0059

CVE-2019-0059 describes a memory leak in Junos OS routing protocol process (rdp) that can cause a Denial of Service when specific BGP state commands are received from a peered host. Affected are Junos OS 18.1 versions prior to 18.1R2-S4 and 18.1R3-S1; and 18.1X75 all versions. Versions before 18....

CVE-2021-0252

CVE-2021-0252 affects Juniper Networks Junos OS on NFX Series devices. The issue is a local code execution vulnerability via the Junos Device Management Daemon (JDMD) that can lead to privilege escalation. Affected: NFX Series with Junos OS 18.1R1 and later versions prior to 18.2R3-S5; 18.3 versi...

CVE-2022-22156

CVE-2022-22156 affects Juniper Networks Junos OS. The issue is an improper certificate validation when fetching system scripts via HTTPS, enabling potential Man-in-the-Middle attacks that could compromise integrity and confidentiality. Affected products include Junos OS across multiple released v...

CVE-2024-30409

Vulnerability (CVE-2024-30409) in Juniper Networks Junos OS and Junos OS Evolved telemtry processing can crash the forwarding information base telemetry daemon (fibtd) via an improper check for unusual or exceptional conditions. A network-based authenticated attacker can cause a limited Denial of...

CVE-2025-21598

CVE-2025-21598 is an out-of-bounds read vulnerability in Junos OS and Junos OS Evolved -rpd (routing protocol daemon). An unauthenticated, network-based attacker can send malformed BGP packets to a device with BGP trace options enabled, crashing rpd. Affected ranges include multiple Junos OS and ...

CVE-2025-30647

CVE-2025-30647 affects Junos OS on Juniper MX Series. A memory leak in the packet forwarding engine (PFE) during subscriber management (login/logout) can progressively exhaust memory, enabling an unauthenticated adjacent attacker to cause a Denial-of-Service. Affected versions are: before 21.2R3-...

CVE-2025-30657

CVE-2025-30657 affects Juniper Networks Junos OS SRRD. A specific BGP update triggers improper encoding/escaping when SRRD processes data forwarded from the routing protocol daemon (rpd), causing a crash and a momentary DoS in jflow processing. The impact is a network-borne DoS with no traffic-fo...

CVE-2020-1632

CVE-2020-1632 describes a DoS in Juniper Junos OS and Junos OS Evolved where receipt of a crafted BGP UPDATE can cause peers to terminate sessions by advertising an invalid UPDATE, particularly when at least one BGP session does not support RFC 4893 4-byte AS. Affected software ranges across many...

CVE-2021-0280

CVE-2021-0280 affects Juniper Junos OS on PTX and QFX10K with Paradise (PE) chipset line cards. Root cause: Improper initialization in the DDoS policer path of the Packet Forwarding Engine, causing ddos-protection CLI changes to not apply beyond default DDoS settings. Impact: BFD session flapping...

CVE-2021-0289

The CVE-2021-0289 issue in Juniper Junos OS is a TOCTOU race condition between the Device Control Daemon (DCD) and the firewall process (dfwd) that can bypass a user-defined ARP Policer on AE interfaces. Affected software includes Junos OS across multiple releases (from 5.6R1 up to but excluding ...

CVE-2022-22197

The CVE describes an Operation on a Resource after Expiration or Release vulnerability in Juniper Networks Junos OS and Junos OS Evolved’s Routing Protocol Daemon (rpd). An unauthenticated attacker with an established BGP session can cause a Denial of Service when proxy-generate route-target filt...

CVE-2024-30387

CVE-2024-30387 describes a Missing Synchronization vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on ACX5448 and ACX710. When an interface flaps while the system gathers statistics, two processes access a shared resource concurrently, causing a PFE crash and rest...

CVE-2021-0217

This CVE (CVE-2021-0217) affects Juniper Networks Junos OS on EX Series and QFX Series switches with DHCP local/relay server enabled. A memory exhaustion issue in processing certain DHCP packets can exhaust DMA memory, causing a DoS and potential fxpc process crash or traffic forwarding disruptio...

CVE-2021-0285

CVE-2021-0285 describes an uncontrolled resource consumption vulnerability in Juniper Networks Junos OS on QFX5000 Series and EX4600 Series switches. The issue allows an attacker to send large volumes of legitimate traffic to a device, causing ICCP interruptions and an unstable MC-LAG control con...

CVE-2021-31360

Summary: CVE-2021-31360 is a local privilege escalation in Juniper Networks Junos OS and Junos OS Evolved CLI. A low-privileged user can overwrite local files as root, potentially causing system integrity issues or a sustained DoS requiring manual recovery. The issue only affects systems where th...

CVE-2024-21586

CVE-2024-21586 is a vulnerability in the Packet Forwarding Engine (PFE) of Juniper Junos OS on SRX and NFX series. The issue, caused by an improper check for unusual or exceptional conditions, allows an unauthenticated, network-based attacker to trigger a crash of the PFE when specific valid traf...

CVE-2024-30389

CVE-2024-30389 affects Juniper Junos OS on EX4300 Series. The root cause is an Incorrect Behavior Order in the Packet Forwarding Engine (PFE): when an output firewall filter is applied to an interface, it may fail to recognize matching packets and permit traffic, causing an integrity impact to ne...

CVE-2025-30651

CVE-2025-30651 affects Juniper Networks Junos OS and Junos OS Evolved. A Buffer Access with Incorrect Length Value in the routing protocol daemon (rpd) can be triggered by a specific ICMPv6 packet to an interface configured with protocol router-advertisement, causing rpd to crash and restart and ...

CVE-2025-30660

CVE-2025-30660 affects Junos OS on Juniper MX Series with the Packet Forwarding Engine (pfe). The issue stems from an improper check for unusual conditions and can allow an unauthenticated, network-based attacker to trigger a DoS by processing a high rate of specific GRE traffic, causing the PFE ...

CVE-2026-33799

CVE-2026-33799 describes an Out-of-bounds Write in the SNMP daemon (snmpd) of Juniper Networks Junos OS and Junos OS Evolved. An authenticated remote attacker can send specific valid SNMPv3 queries to trigger a memory leak, causing snmpd memory exhaustion over time, a resulting process crash, and...

CVE-2021-31350

CVE-2021-31350 affects Juniper Junos OS and Junos OS Evolved via the Juniper Extension Toolkit (JET) gRPC API. The issue stems from jsd authenticating a user and passing configuration operations to mgd (root-owned), enabling network-based, low-privilege attackers to perform root-level operations....

CVE-2021-31363

CVE-2021-31363 affects Juniper Networks Junos OS and Junos OS Evolved. In MPLS P2MP, a Loop with Unreachable Exit Condition in the Routing Protocol Daemon (RPD) allows an unauthenticated adjacent attacker to cause high RPD load and routing protocol flaps. If a system with sensor-based-stats enabl...

CVE-2022-22153

CVE-2022-22153 affects Junos OS flowd on SRX Series and MX Series with SPC3. A high-rate fragmented-traffic condition (fragmented packets > ~5%) can cause latency or packet loss due to insufficient algorithmic complexity and unthrottled resource allocation. Affected versions are prior to 18.2R...

CVE-2022-22180

CVE-2022-22180 affects Junos OS on EX2300/EX2300-MP/EX3400 series. Vulnerability arises from an improper check for unusual or exceptional conditions during processing of specific IPv6 packets, leading to DMA memory exhaustion and a Denial of Service. Observed symptoms include fpc0 (buf alloc) fai...

CVE-2022-22193

CVE-2022-22193 affects Juniper Networks Junos OS and Junos OS Evolved. A local, low-privilege attacker can trigger an Improper Handling of Unexpected Data Type in the Routing Protocol Daemon (rpd), potentially causing a DoS. In a BGP rib-sharding scenario, executing a specific CLI command may cra...

CVE-2022-22216

CVE-2022-22216 is a memory-disclosure vulnerability in Juniper Junos OS PFE affecting PTX1000/10000 Series and QFX10000/PTX5000 Series. The root cause is Etherleak: some Ethernet frames are not reliably padded, allowing an adjacent attacker to read fragments of system memory or data from previous...

CVE-2021-0203

The CVE-2021-0203 entry concerns Juniper Junos OS on EX Series and QFX5K Series where a Storm Control profile on the Redundant Trunk Group interface may not activate when the threshold is reached. Affected: EX Series and QFX5K Series; not affecting EX2200, EX3300, EX4200, or EX9200. Vulnerable so...

CVE-2021-0290

The CVE-2021-0290 issue is a Junos OS vulnerability where specially crafted Ethernet frames can cause an interface to permanently go down, leading to a DoS. Affected are MX Series, EX9200 Series, and SRX4600 devices with specific platform families and Junos OS versions listed in the CVE details (...

CVE-2022-22172

CVE-2022-22172 describes a memory leak in Juniper Networks Junos OS and Junos OS Evolved the Layer-2 control protocols daemon (l2cpd). An unauthenticated adjacent attacker can exploit specific LLDP packets to trigger memory exhaustion, causing a DoS. Impact includes potential STP re-convergence a...

CVE-2022-22191

CVE-2022-22191 describes a DoS in Juniper Junos OS on EX4300 switches caused by processing a flood of specific ARP traffic from the local broadcast domain. The vulnerability allows an unauthenticated network-adjacent attacker to trigger a PFEMAN watchdog timeout, causing the Packet Forwarding Eng...

CVE-2024-39564

CVE-2024-39564 describes a double-free vulnerability in Juniper’s routing process daemon (rpd) for Junos OS and Junos OS Evolved. A malformed BGP Path attribute update can trigger a memory double-free in the rpd log path, causing the process to crash and resulting in a Denial of Service. Affected...

CVE-2025-30659

CVE-2025-30659 concerns Juniper Networks Junos OS on SRX Series, where an Improper Handling of Length Parameter Inconsistency in the Packet Forwarding Engine (PFE) can be triggered by a specially malformed SVR (Secure Vector Routing) packet. An unauthenticated, network-based attacker can cause th...

CVE-2021-31354

CVE-2021-31354 affects Juniper Networks Junos OS and Junos OS Evolved when configured in Network Mode with the JAL client. It is an Out Of Bounds (OOB) vulnerability in the client’s packet-parsing logic for responses from the server, potentially allowing partial DoS or remote code execution. Expl...

CVE-2023-22404

CVE-2023-22404 describes an out-of-bounds write in Juniper Junos OS iked (SRX/MX with SPC3) that can cause DoS. An authenticated, network-based attacker can trigger iked to crash and restart during IKE negotiation by sending a specially formatted payload, disrupting other concurrent IKE negotiati...

CVE-2022-22168

CVE-2022-22168 affects Juniper Networks Junos OS in the kernel, via improper validation of input, allowing an unauthenticated adjacent attacker to trigger a Missing Release of Memory after Effective Lifetime, ultimately causing an FPC reboot and DoS. Affected: Junos OS on vMX and MX150 across mul...

CVE-2022-22170

CVE-2022-22170 describes a vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS where a Missing Release of Resource after Effective Lifetime can allow an unauthenticated attacker to cause a Denial of Service by sending specific VXLAN packets. The issue causes a heap me...

CVE-2022-22221

CVE-2022-22221 affects Juniper Networks Junos OS on SRX/EX Series via the download manager. The root cause is an Improper Neutralization of Special Elements in the download functionality, enabling a locally authenticated attacker with low privileges to gain full control of the device. Impact is s...

CVE-2023-22396

CVE-2023-22396 describes an Uncontrolled Resource Consumption vulnerability in the TCP processing on the Routing Engine of Juniper Networks Junos OS. An unauthenticated network-based attacker can send crafted TCP packets destined to a device interface (IPv4/IPv6), causing an MBUF leak and ultimat...

CVE-2023-22413

CVE-2023-22413 affects Juniper Networks Junos OS on MX Series with MS-MPC or MS-MIC, where an IPsec6 tunnel can trigger the Multiservices PIC Management Daemon (mspmand) to core and restart when processing specific IPv4 packets. This causes an FPC crash and impacts traffic while mspmand restarts,...

CVE-2024-39552

CVE-2024-39552 affects Juniper Networks Junos OS and Junos OS Evolved: the RPD (routing protocol daemon) crashes when a malformed BGP UPDATE is received over an established BGP session, causing DoS. A network-based, unauthenticated attacker can trigger the crash via IPv4/IPv6 eBGP/iBGP traffic; i...

CVE-2025-30645

The CVE describes a NULL-pointer dereference in the flowd daemon of Juniper Networks Junos OS on SRX Series. When specific, valid DS-Lite control traffic is sent, flowd can crash (segmentation fault), causing a DoS/network outage until flowd restarts. Affected are Junos OS on SRX Series: all vers...

CVE-2019-0070

CVE-2019-0070 affects Juniper Networks Junos OS on NFX Series prior to 18.2R1. The issue is an improper input validation weakness that allows a local attacker to elevate privileges and take control of the entire system. Affected component: Junos OS on NFX Series; root cause: input validation fail...

CVE-2020-1617

CVE-2020-1617 affects Junos OS on non-AFI/AFT platforms. An improper memory initialization in the packet forwarding architecture can be triggered when a genuine packet is inspected by sFlow through a specific firewall policer, causing a reboot and, after reboot, a core file and another reboot on ...

CVE-2021-31369

CVE-2021-31369 affects Juniper Networks Junos OS on MX Series with MS-MPC/MS-MIC. The issue is an Allocation of Resources Without Limits or Throttling vulnerability that allows an unauthenticated network attacker to cause a partial Denial of Service by generating high-rate traffic. If a Class of ...

CVE-2022-22171

CVE-2022-22171 affects Juniper Networks Junos OS, specifically the Packet Forwarding Engine (PFE). An unauthenticated network attacker can cause a DoS by sending crafted VXLAN packets that reset the PFE. Vulnerable are Junos OS versions: 19.4 before 19.4R3-S7; 20.1 before 20.1R3-S3; 20.2 before 2...

CVE-2022-22181

CVE-2022-22181 is a reflected XSS in Juniper Junos OS J-Web. Affected: Junos OS versions prior to 18.3R3-S5; 18.4 before 18.4R3-S9; 19.1 before 19.1R3-S6; 19.2 before 19.2R3-S3; 19.3 before 19.3R2-S6, 19.3R3-S3; 19.4 before 19.4R3-S5; 20.1 before 20.1R3-S4; 20.2 before 20.2R3-S2; 20.3 before 20.3...

CVE-2022-22237

Vulnerability summary (CVE-2022-22237): An Improper Authentication flaw in the kernel of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to affect confidentiality/integrity by abusing TCP-AO processing to allow a BGP/LDP peer not configured with authentication to estab...

CVE-2024-30384

CVE-2024-30384 concerns Juniper Networks Junos OS on the EX4300 Series. The issue is an improper check for unusual or exceptional conditions in the Packet Forwarding Engine (PFE) that lets a locally authenticated user with low privileges trigger a PFE crash by issuing a specific CLI command. The ...