CVE-2020-1632

CVE-2020-1632 describes a DoS in Juniper Junos OS and Junos OS Evolved where receipt of a crafted BGP UPDATE can cause peers to terminate sessions by advertising an invalid UPDATE, particularly when at least one BGP session does not support RFC 4893 4-byte AS. Affected software ranges across many...

CVE-2024-21618

CVE-2024-21618 affects Juniper Junos OS and Junos OS Evolved, where receiving a malformed LLDP packet on an interface with LLDP enabled can trigger an Access of Memory Location After End of Buffer in the Layer-2 Control Protocols Daemon (l2cpd). This causes l2cpd to crash and restart, reinitializ...

CVE-2024-30398

CVE-2024-30398 – Juniper Junos OS SRX4600 PFE DoS . An improper restriction of operations within the bounds of a memory buffer in the Packet Forwarding Engine (PFE) allows an unauthenticated, network-based attacker to cause a DoS when processing a high amount of specific traffic on SRX4600 device...

CVE-2024-30401

CVE-2024-30401 is an Out-of-bounds Read vulnerability in the aftman component of Juniper Junos OS. The interface definition code for aftman could read beyond a buffer, causing a stack-based buffer overflow that can reboot the FPC. Affected Junos OS on MX Series and EX9200-15C devices include the ...

CVE-2024-30409

Vulnerability (CVE-2024-30409) in Juniper Networks Junos OS and Junos OS Evolved telemtry processing can crash the forwarding information base telemetry daemon (fibtd) via an improper check for unusual or exceptional conditions. A network-based authenticated attacker can cause a limited Denial of...

CVE-2025-30649

CVE-2025-30649 concerns a Junos OS Improper Input Validation in the syslog stream TCP transport on MX240/MX480/MX960 with MX-SPC3. An unauthenticated network attacker can send specific spoofed packets to cause a CPU Denial of Service on MX-SPC3 SPUs, with continued receipt sustaining the DoS. Aff...

CVE-2021-0217

This CVE (CVE-2021-0217) affects Juniper Networks Junos OS on EX Series and QFX Series switches with DHCP local/relay server enabled. A memory exhaustion issue in processing certain DHCP packets can exhaust DMA memory, causing a DoS and potential fxpc process crash or traffic forwarding disruptio...

CVE-2021-31351

CVE-2021-31351 affects Juniper Networks Junos OS on MX Series where MS-MPC/MS-MIC packet processing can trigger a reset and sustained DoS due to an improper check for unusual or exceptional conditions. The affected versions span numerous releases (e.g., 17.3R3-S11 through 21.1R1) with prior relea...

CVE-2024-39564

CVE-2024-39564 describes a double-free vulnerability in Juniper’s routing process daemon (rpd) for Junos OS and Junos OS Evolved. A malformed BGP Path attribute update can trigger a memory double-free in the rpd log path, causing the process to crash and resulting in a Denial of Service. Affected...

CVE-2025-30657

CVE-2025-30657 affects Juniper Networks Junos OS SRRD. A specific BGP update triggers improper encoding/escaping when SRRD processes data forwarded from the routing protocol daemon (rpd), causing a crash and a momentary DoS in jflow processing. The impact is a network-borne DoS with no traffic-fo...

CVE-2021-0289

The CVE-2021-0289 issue in Juniper Junos OS is a TOCTOU race condition between the Device Control Daemon (DCD) and the firewall process (dfwd) that can bypass a user-defined ARP Policer on AE interfaces. Affected software includes Junos OS across multiple releases (from 5.6R1 up to but excluding ...

CVE-2021-31360

Summary: CVE-2021-31360 is a local privilege escalation in Juniper Networks Junos OS and Junos OS Evolved CLI. A low-privileged user can overwrite local files as root, potentially causing system integrity issues or a sustained DoS requiring manual recovery. The issue only affects systems where th...

CVE-2022-22191

CVE-2022-22191 describes a DoS in Juniper Junos OS on EX4300 switches caused by processing a flood of specific ARP traffic from the local broadcast domain. The vulnerability allows an unauthenticated network-adjacent attacker to trigger a PFEMAN watchdog timeout, causing the Packet Forwarding Eng...

CVE-2022-22197

The CVE describes an Operation on a Resource after Expiration or Release vulnerability in Juniper Networks Junos OS and Junos OS Evolved’s Routing Protocol Daemon (rpd). An unauthenticated attacker with an established BGP session can cause a Denial of Service when proxy-generate route-target filt...

CVE-2024-21586

CVE-2024-21586 is a vulnerability in the Packet Forwarding Engine (PFE) of Juniper Junos OS on SRX and NFX series. The issue, caused by an improper check for unusual or exceptional conditions, allows an unauthenticated, network-based attacker to trigger a crash of the PFE when specific valid traf...

CVE-2021-0280

CVE-2021-0280 affects Juniper Junos OS on PTX and QFX10K with Paradise (PE) chipset line cards. Root cause: Improper initialization in the DDoS policer path of the Packet Forwarding Engine, causing ddos-protection CLI changes to not apply beyond default DDoS settings. Impact: BFD session flapping...

CVE-2021-31363

CVE-2021-31363 affects Juniper Networks Junos OS and Junos OS Evolved. In MPLS P2MP, a Loop with Unreachable Exit Condition in the Routing Protocol Daemon (RPD) allows an unauthenticated adjacent attacker to cause high RPD load and routing protocol flaps. If a system with sensor-based-stats enabl...

CVE-2022-22172

CVE-2022-22172 describes a memory leak in Juniper Networks Junos OS and Junos OS Evolved the Layer-2 control protocols daemon (l2cpd). An unauthenticated adjacent attacker can exploit specific LLDP packets to trigger memory exhaustion, causing a DoS. Impact includes potential STP re-convergence a...

CVE-2022-22193

CVE-2022-22193 affects Juniper Networks Junos OS and Junos OS Evolved. A local, low-privilege attacker can trigger an Improper Handling of Unexpected Data Type in the Routing Protocol Daemon (rpd), potentially causing a DoS. In a BGP rib-sharding scenario, executing a specific CLI command may cra...

CVE-2024-30389

CVE-2024-30389 affects Juniper Junos OS on EX4300 Series. The root cause is an Incorrect Behavior Order in the Packet Forwarding Engine (PFE): when an output firewall filter is applied to an interface, it may fail to recognize matching packets and permit traffic, causing an integrity impact to ne...

CVE-2024-39552

CVE-2024-39552 affects Juniper Networks Junos OS and Junos OS Evolved: the RPD (routing protocol daemon) crashes when a malformed BGP UPDATE is received over an established BGP session, causing DoS. A network-based, unauthenticated attacker can trigger the crash via IPv4/IPv6 eBGP/iBGP traffic; i...

CVE-2025-30651

CVE-2025-30651 affects Juniper Networks Junos OS and Junos OS Evolved. A Buffer Access with Incorrect Length Value in the routing protocol daemon (rpd) can be triggered by a specific ICMPv6 packet to an interface configured with protocol router-advertisement, causing rpd to crash and restart and ...

CVE-2025-30659

CVE-2025-30659 concerns Juniper Networks Junos OS on SRX Series, where an Improper Handling of Length Parameter Inconsistency in the Packet Forwarding Engine (PFE) can be triggered by a specially malformed SVR (Secure Vector Routing) packet. An unauthenticated, network-based attacker can cause th...

CVE-2025-30660

CVE-2025-30660 affects Junos OS on Juniper MX Series with the Packet Forwarding Engine (pfe). The issue stems from an improper check for unusual conditions and can allow an unauthenticated, network-based attacker to trigger a DoS by processing a high rate of specific GRE traffic, causing the PFE ...

CVE-2021-0203

The CVE-2021-0203 entry concerns Juniper Junos OS on EX Series and QFX5K Series where a Storm Control profile on the Redundant Trunk Group interface may not activate when the threshold is reached. Affected: EX Series and QFX5K Series; not affecting EX2200, EX3300, EX4200, or EX9200. Vulnerable so...

CVE-2021-0285

CVE-2021-0285 describes an uncontrolled resource consumption vulnerability in Juniper Networks Junos OS on QFX5000 Series and EX4600 Series switches. The issue allows an attacker to send large volumes of legitimate traffic to a device, causing ICCP interruptions and an unstable MC-LAG control con...

CVE-2021-0290

The CVE-2021-0290 issue is a Junos OS vulnerability where specially crafted Ethernet frames can cause an interface to permanently go down, leading to a DoS. Affected are MX Series, EX9200 Series, and SRX4600 devices with specific platform families and Junos OS versions listed in the CVE details (...

CVE-2021-31350

CVE-2021-31350 affects Juniper Junos OS and Junos OS Evolved via the Juniper Extension Toolkit (JET) gRPC API. The issue stems from jsd authenticating a user and passing configuration operations to mgd (root-owned), enabling network-based, low-privilege attackers to perform root-level operations....

CVE-2021-31354

CVE-2021-31354 affects Juniper Networks Junos OS and Junos OS Evolved when configured in Network Mode with the JAL client. It is an Out Of Bounds (OOB) vulnerability in the client’s packet-parsing logic for responses from the server, potentially allowing partial DoS or remote code execution. Expl...

CVE-2022-22153

CVE-2022-22153 affects Junos OS flowd on SRX Series and MX Series with SPC3. A high-rate fragmented-traffic condition (fragmented packets > ~5%) can cause latency or packet loss due to insufficient algorithmic complexity and unthrottled resource allocation. Affected versions are prior to 18.2R...

CVE-2022-22168

CVE-2022-22168 affects Juniper Networks Junos OS in the kernel, via improper validation of input, allowing an unauthenticated adjacent attacker to trigger a Missing Release of Memory after Effective Lifetime, ultimately causing an FPC reboot and DoS. Affected: Junos OS on vMX and MX150 across mul...

CVE-2023-22404

CVE-2023-22404 describes an out-of-bounds write in Juniper Junos OS iked (SRX/MX with SPC3) that can cause DoS. An authenticated, network-based attacker can trigger iked to crash and restart during IKE negotiation by sending a specially formatted payload, disrupting other concurrent IKE negotiati...

CVE-2021-0252

CVE-2021-0252 affects Juniper Networks Junos OS on NFX Series devices. The issue is a local code execution vulnerability via the Junos Device Management Daemon (JDMD) that can lead to privilege escalation. Affected: NFX Series with Junos OS 18.1R1 and later versions prior to 18.2R3-S5; 18.3 versi...

CVE-2022-22181

CVE-2022-22181 is a reflected XSS in Juniper Junos OS J-Web. Affected: Junos OS versions prior to 18.3R3-S5; 18.4 before 18.4R3-S9; 19.1 before 19.1R3-S6; 19.2 before 19.2R3-S3; 19.3 before 19.3R2-S6, 19.3R3-S3; 19.4 before 19.4R3-S5; 20.1 before 20.1R3-S4; 20.2 before 20.2R3-S2; 20.3 before 20.3...

CVE-2023-22396

CVE-2023-22396 describes an Uncontrolled Resource Consumption vulnerability in the TCP processing on the Routing Engine of Juniper Networks Junos OS. An unauthenticated network-based attacker can send crafted TCP packets destined to a device interface (IPv4/IPv6), causing an MBUF leak and ultimat...

CVE-2024-30387

CVE-2024-30387 describes a Missing Synchronization vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on ACX5448 and ACX710. When an interface flaps while the system gathers statistics, two processes access a shared resource concurrently, causing a PFE crash and rest...

CVE-2025-30645

The CVE describes a NULL-pointer dereference in the flowd daemon of Juniper Networks Junos OS on SRX Series. When specific, valid DS-Lite control traffic is sent, flowd can crash (segmentation fault), causing a DoS/network outage until flowd restarts. Affected are Junos OS on SRX Series: all vers...

CVE-2021-31383

CVE-2021-31383 affects Juniper Networks Junos OS and Junos OS Evolved, where in P2MP scenarios the routing protocol daemon (RPD) may crash due to a source-to-destination copy-write operation paired with a stack-based buffer overflow on certain crafted packets. This leads to a DoS that can become ...

CVE-2022-22171

CVE-2022-22171 affects Juniper Networks Junos OS, specifically the Packet Forwarding Engine (PFE). An unauthenticated network attacker can cause a DoS by sending crafted VXLAN packets that reset the PFE. Vulnerable are Junos OS versions: 19.4 before 19.4R3-S7; 20.1 before 20.1R3-S3; 20.2 before 2...

CVE-2022-22180

CVE-2022-22180 affects Junos OS on EX2300/EX2300-MP/EX3400 series. Vulnerability arises from an improper check for unusual or exceptional conditions during processing of specific IPv6 packets, leading to DMA memory exhaustion and a Denial of Service. Observed symptoms include fpc0 (buf alloc) fai...

CVE-2022-22216

CVE-2022-22216 is a memory-disclosure vulnerability in Juniper Junos OS PFE affecting PTX1000/10000 Series and QFX10000/PTX5000 Series. The root cause is Etherleak: some Ethernet frames are not reliably padded, allowing an adjacent attacker to read fragments of system memory or data from previous...

CVE-2023-22413

CVE-2023-22413 affects Juniper Networks Junos OS on MX Series with MS-MPC or MS-MIC, where an IPsec6 tunnel can trigger the Multiservices PIC Management Daemon (mspmand) to core and restart when processing specific IPv4 packets. This causes an FPC crash and impacts traffic while mspmand restarts,...

CVE-2019-0063

CVE-2019-0063 concerns Juniper Networks Junos OS on MX Series BRAS configured as BNG with DHCPv6 enabled, where a specifically crafted DHCP response on a subscriber interface can crash the jdhcpd daemon. The crash triggers an automatic restart, but repeated crafted messages may cause an extended ...

CVE-2019-0070

CVE-2019-0070 affects Juniper Networks Junos OS on NFX Series prior to 18.2R1. The issue is an improper input validation weakness that allows a local attacker to elevate privileges and take control of the entire system. Affected component: Junos OS on NFX Series; root cause: input validation fail...

CVE-2019-0071

CVE-2019-0071 affects Junos OS on EX2300/EX2300-C/EX3400 with versions 18.1R3-S4 and 18.3R1-S3. The Veriexec file-integrity subsystem can fail to initialize, effectively disabling integrity checks and allowing a locally authenticated user with shell access to install untrusted executables and esc...

CVE-2021-31385

CVE-2021-31385 describes a path traversal flaw in Juniper Networks Junos OS J-Web. The issue arises from an improper limitation of a pathname to a restricted directory, allowing a low-privileged authenticated attacker to elevate privileges to root. Affected Junos OS versions include multiple rele...

CVE-2022-22174

Summary of CVE-2022-22174 (Juniper Junos OS on QFX5000/EX4600) : A vulnerability in the processing of inbound IPv6 packets can cause a memory leak where freed memory is not released, leading to a packet DMA memory leak and a sustained Denial of Service (DoS). Impact occurs when specific IPv6 pack...

CVE-2022-22207

CVE-2022-22207 is a Use After Free vulnerability in Juniper Networks Junos OS, affecting the MX Series with affected AFT aftmand processing. The root cause is intensive polling of AF interface statistics, which can crash the kernel and cause a Denial of Service. Impact is a sustained DoS due to r...

CVE-2022-22237

Vulnerability summary (CVE-2022-22237): An Improper Authentication flaw in the kernel of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to affect confidentiality/integrity by abusing TCP-AO processing to allow a BGP/LDP peer not configured with authentication to estab...

CVE-2024-39511

The CVE-2024-39511 entry concerns Juniper Networks Junos OS: an improper input validation vulnerability in the 802.1X Authentication (dot1x) Daemon. When an operator runs a specific dot1x command, the dot1x daemon may crash, causing a Denial of Service that clears all 802.1x client authentication...