CVE-2020-1617

CVE-2020-1617 affects Junos OS on non-AFI/AFT platforms. An improper memory initialization in the packet forwarding architecture can be triggered when a genuine packet is inspected by sFlow through a specific firewall policer, causing a reboot and, after reboot, a core file and another reboot on ...

CVE-2022-22161

CVE-2022-22161 describes an Uncontrolled Resource Consumption vulnerability in the Juniper Networks Junos OS kernel. An unauthenticated network-based attacker can flood the out-of-band management port, causing 100% CPU usage and making the device unresponsive; continued floods yield a sustained D...

CVE-2022-22177

CVE-2022-22177 affects Juniper Networks Junos OS and Junos OS Evolved. The issue is an illegal memory vulnerability in the snmpd daemon that can be triggered by crafted SNMP input, causing the snmpd process to segfault or halt and resulting in a sustained Denial of Service until manual restart. A...

CVE-2022-22220

The CVE-2022-22220 issue is a TOCTOU race condition in Juniper Junos OS/rpd that can crash the process when a BGP flow route with a redirect IP is received while the next-hop reachability is flapping, enabling a network-based DoS. Affected software includes Junos OS and Junos OS Evolved across li...

CVE-2022-22221

CVE-2022-22221 affects Juniper Networks Junos OS on SRX/EX Series via the download manager. The root cause is an Improper Neutralization of Special Elements in the download functionality, enabling a locally authenticated attacker with low privileges to gain full control of the device. Impact is s...

CVE-2023-22417

CVE-2023-22417 affects Juniper Networks Junos OS on SRX Series, where the Flow Processing Daemon (flowd) can leak memory in IPsec VPN scenarios when DH/ECDH groups are configured, potentially crashing the flowd process and causing DoS. Affected versions include SRX/JunOS releases prior to the fix...

CVE-2024-30388

CVE-2024-30388 (Junos OS, PFE) : An improper isolation vulnerability in the Packet Forwarding Engine on QFX5000 Series and EX Series allows an unauthenticated adjacent attacker to trigger an LACP flap by receiving a specific malformed LACP packet, causing traffic loss (DoS). Affected: Junos OS on...

CVE-2024-30397

CVE-2024-30397 affects Juniper Networks Junos OS, specifically the pkid daemon responsible for certificate verification. An improper check for unusual or exceptional conditions allows an unauthenticated network attacker to trigger a DoS by causing pkid to consume CPU and become unresponsive, brea...

CVE-2025-30653

CVE-2025-30653 describes an Expired Pointer Dereference in Juniper Networks Junos OS and Junos OS Evolved RPD (Routing Protocol Daemon). When an MPLS LSP is configured with node-link-protection and transport-class and an LSP flaps, rpd can crash and restart, causing a Denial of Service. Affected ...

CVE-2019-0065

Junos OS on MX Series is affected by CVE-2019-0065 due to a malformed SIP packet that, when the SIP ALG is enabled, can crash the MS-PIC component on MS-MIC or MS-MPC and cause a sustained DoS. Affected releases include MX Series across multiple track versions prior to fixed builds: 16.1R7-S5, 16...

CVE-2019-0068

CVE-2019-0068 affects Juniper Networks Junos OS on SRX Series, where the SRX flowd process may crash and restart when handling specific multicast packets. A remote, unauthenticated attacker can trigger a sustained Denial of Service by repeatedly sending the crafted multicast traffic, causing the ...

CVE-2021-31361

CVE-2021-31361 affects Juniper Networks Junos OS on QFX Series and PTX Series. The issue stems from an improper check and handling of exceptional conditions, allowing an unauthenticated network attacker to increase FPC CPU utilization by sending certain IP packets encapsulated in VXLAN, causing a...

CVE-2021-31369

CVE-2021-31369 affects Juniper Networks Junos OS on MX Series with MS-MPC/MS-MIC. The issue is an Allocation of Resources Without Limits or Throttling vulnerability that allows an unauthenticated network attacker to cause a partial Denial of Service by generating high-rate traffic. If a Class of ...

CVE-2022-22155

CVE-2022-22155 affects Juniper Networks Junos OS on the ACX5448 router. An Uncontrolled Resource Consumption vulnerability allows memory leakage in the FPC when IPv6 neighbor state changes flap in a timed sequence, leading to a DoS and requiring a manual PFE restart. Affected versions include ACX...

CVE-2022-22170

CVE-2022-22170 describes a vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS where a Missing Release of Resource after Effective Lifetime can allow an unauthenticated attacker to cause a Denial of Service by sending specific VXLAN packets. The issue causes a heap me...

CVE-2022-22176

CVE-2022-22176 — Junos OS jdhcpd DoS Affected product: Juniper Networks Junos OS. The vulnerability arises from improper validation of syntactic correctness in jdhcpd. An adjacent, unauthenticated attacker can send a malformed DHCP packet to crash jdhcpd, causing a Denial of Service. The impact i...

CVE-2023-22408

CVE-2023-22408 affects Juniper Networks Junos OS on SRX 5000 Series. The vulnerability is an improper validation of an array index in the SIP ALG, triggered by specific SIP packets with malformed SDP fields. This can allow a network-based, unauthenticated attacker to cause a Denial of Service by ...

CVE-2023-22414

The CVE-2023-22414 issue affects Juniper Networks Junos OS PTX Series and QFX10000 Series, caused by a Missing Release of Memory after Effective Lifetime in the Flexible PIC Concentrator (FPC). It enables an adjacent, unauthenticated attacker on the same network to trigger a heap memory leak and ...

CVE-2024-30382

Juniper Networks Junos OS and Junos OS Evolved are affected by CVE-2024-30382 via an Improper Handling of Exceptional Conditions in the routing protocol daemon (rpd). A network-based, unauthenticated attacker can trigger a specific routing update when CB F (CoS-based forwarding) is configured wit...

CVE-2024-30384

CVE-2024-30384 concerns Juniper Networks Junos OS on the EX4300 Series. The issue is an improper check for unusual or exceptional conditions in the Packet Forwarding Engine (PFE) that lets a locally authenticated user with low privileges trigger a PFE crash by issuing a specific CLI command. The ...

CVE-2024-39529

CVE-2024-39529 describes a Use of Externally-Controlled Format String vulnerability in the Packet Forwarding Engine (PFE) of Junos OS on SRX Series, allowing an unauthenticated, network-based attacker to cause a DoS. Affected Junos OS versions include: prior to 21.4R3-S6; 22.2 before 22.2R3-S3; 2...

CVE-2017-10607

The CVE-2017-10607 issue affects Juniper Networks Junos OS 16.1R1 and related service releases. A crafted BGP PDU sent directly to the router can crash the rpd routing process, causing a denial of service due to repeated daemon restarts. The vulnerability is confined to 16.1R1 family and is not p...

CVE-2018-0016

CVE-2018-0016 affects Junos OS 15.1 (and related 15.1.x and 15.1X5x/15.1X53 lines) where CLNS routing or ES-IS is configured. A specially crafted CLNP datagram can crash the kernel or enable remote code execution on interfaces that have CLNS routing/ESIS enabled; devices with CLNS disabled are no...

CVE-2019-0006

Summary of CVE-2019-0006 (Juniper Junos FXPC): A crafted HTTP packet can trigger an uninitialized function pointer dereference in the Packet Forwarding Engine manager (FXPC) on EX, QFX and MX Series devices in a Virtual Chassis. This can crash the fxpc daemon or potentially allow remote code exec...

CVE-2019-0075

The CVE-2019-0075 issue affects Juniper Networks Junos OS on SRX Series, specifically the srxpfe process when handling Protocol Independent Multicast (PIM) messages. A vulnerable state can cause the srxpfe process to crash and trigger an FPC reboot, potentially leading to an extended denial-of-se...

CVE-2020-1603

CVE-2020-1603 is a Junos OS IPv6 handling vulnerability causing a mbuf memory leak in the Routing Engine that can lead to kernel crash (vmcore) or device hang/DoS. Affected: Junos OS 16.1 versions before 16.1R7-S6; 16.1R7-S6 and later in 16.1X70-D10+; 16.2 before 16.2R2-S11; 17.1 before 17.1R2-S1...

CVE-2022-22166

CVE-2022-22166 affects Juniper Networks Junos OS rpd (routing protocol daemon). A DoS can be triggered by receiving a BGP update with a malformed SR-TE policy tunnel attribute when BGP update tracing is enabled, causing an rpd crash that does not propagate. Affected are Junos OS 20.4 versions pri...

CVE-2022-22169

CVE-2022-22169 affects Juniper Networks Junos OS and Junos OS Evolved. An improper initialization in the routing protocol daemon (rpd) can cause OSPFv3 to enter graceful-restart GR helper mode when a attacker sends crafted packets in specific order/timing, potentially causing a DoS via a stalled ...

CVE-2022-22201

CVE-2022-22201 affects Juniper Networks Junos OS on SRX5000/SRX4000/vSRX with PowerMode IPsec. The Packet Forwarding Engine (PFE) crashes when receiving a malformed ESP packet that matches an established IPsec tunnel, due to improper validation of index/position/offset in input. Impact is Denial ...

CVE-2022-22217

CVE-2022-22217 affects Juniper Junos OS on QFX10K Series switches (QFX10002/10008/10016). The root cause is an improper check that allows malformed MLD packets looping on a multi-homed ESI with VXLAN to be forwarded back to the peer, violating split horizon and causing a Denial of Service. Affect...

CVE-2023-22394

Summary of CVE-2023-22394 — Junos OS SRX/MX SIP ALG memory leak (DoS) The vulnerability arises in Juniper Networks Junos OS when handling SIP calls with SIP ALG enabled, causing a memory leak that can degrade or disrupt SIP call processing and related applications. Affected products include Junos...

CVE-2023-22412

CVE-2023-22412 is an improper locking vulnerability in Juniper Junos OS SIP ALG that can crash the flow processing daemon (flowd) on MX Series and SRX Series when certain SIP messages are processed concurrently with SIP ALG enabled, leading to DoS. Affected firmware ranges are: MX/SRX 20.4 prior ...

CVE-2023-36841

CVE-2023-36841 affects Juniper Networks Junos OS on MX Series with PPPoE-configured interfaces (tcp-mss enabled). An unauthenticated network attacker sending malformed TCP traffic can trigger an infinite loop in the Packet Forwarding Engine (PFE), leading to DoS as resources are exhausted and a m...

CVE-2024-39561

CVE-2024-39561 affects Juniper Junos OS on SRX4600/SRX5000 Series. The vulnerability stems from an improper check in the flow daemon (flowd) that can allow TCP packets with SYN/FIN or SYN/RST flags to bypass the intended block when no-syn-check and Express Path are enabled, causing such packets t...

CVE-2024-47504

CVE-2024-47504 affects Juniper Networks Junos OS on SRX5000 Series. Vulnerability arises from improper validation of a specific input type in the packet forwarding engine (pfe), allowing an unauthenticated, network-based attacker to trigger a flowd crash and DoS by sending a malformed packet to n...

CVE-2019-0003

CVE-2019-0003 describes a vulnerability in Juniper Junos OS where a flowspec BGP update containing a specific term-order can trigger a reachable assertion failure, crashing the routing protocol daemon (rpd) and producing a core. The issue affects Junos OS releases across SRX, EX, and QFX platform...

CVE-2019-0060

The vulnerability CVE-2019-0060 affects Juniper Junos OS on SRX Series where the flowd process may crash and restart while processing specific transit IP packets through an IPSec tunnel, potentially causing a Denial of Service (DoS). Affected versions include Junos OS 15.1X49 prior to 15.1X49-D17...

CVE-2021-0258

CVE-2021-0258 describes a DoS vulnerability in Juniper Networks Junos OS where forwarding of transit TCPv6 packets on the Ethernet management interface can trigger a kernel panic. The issue arose from a TCP Parallelization feature introduced in Junos OS 17.2, active by default with concurrent net...

CVE-2021-0263

Summary: CVE-2021-0263 describes a DoS in Juniper Junos OS PTX Series caused by heavy J-Flow sampling churn in the Multi-Service process (multi-svcs) on the FPC, which can stall the KRT queue and halt updates, impacting traffic forwarding. Affected component is the Multi-Service process running o...

CVE-2021-0287

CVE-2021-0287 affects Juniper Networks Junos OS and Junos OS Evolved in SR-ISIS/MPLS with ISIS Flexible Algorithm and sensor-based statistics. A flap of an ISIS link can crash and restart the RPD, causing Denial of Service (DoS). Affected versions include Junos OS: 19.4 prior to 19.4R1-S4 and 19....

CVE-2021-0293

CVE-2021-0293 describes a memory leak in Junos OS caused by Missing Release of Memory after Effective Lifetime. Repeated execution of the CLI command 'show system connections extensive' can cause memory to leak per invocation, depending on TCP connections, potentially leading to daemon memory pre...

CVE-2021-31376

CVE-2021-31376 affects Juniper Networks Junos OS on ACX Series (ACX500, ACX1000, ACX1100, ACX2100, ACX2200, ACX4000, ACX5048, ACX5096). The issue is an improper input validation in the FXPC (Packet Forwarding Engine manager) that can be triggered by specific DHCPv6 packets, crashing FXPC and caus...

CVE-2021-31377

CVE-2021-31377 affects Juniper Networks Junos OS. A local authenticated attacker can exploit an Incorrect Permission Assignment for a Critical Resource in a file in the Junos filesystem to cause the Routing Process Daemon (RPD) to crash and restart, resulting in a DoS . Affected versions include ...

CVE-2025-21597

CVE-2025-21597 covers an issue in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. When BGP rib-sharding and update-threading are configured, a remote, unauthenticated, logically adjacent BGP peer can cause rpd to crash and restart via a specific timing of peer...

CVE-2015-3003

CVE-2015-3003 affects Juniper Junos OS prior to specific fixes across multiple train releases: 12.1X44 (before 12.1X44-D45), 12.1X46 (before 12.1X46-D30), 12.1X47 (before 12.1X47-D20), 12.3 (before 12.3R9), 12.3X48 (before 12.3X48-D10), 13.2 (before 13.2R6), 13.3 (before 13.3R5), 14.1 (before 14....

CVE-2017-10615

The CVE describes a vulnerability in the pluggable authentication module (PAM) of Juniper Networks Junos OS that may allow an unauthenticated network attacker to execute arbitrary code or crash PAM-utilizing daemons (e.g., telnetd, sshd). Affected Junos OS releases include: 14.1 starting from 14....

CVE-2019-0056

Juniper Networks Junos OS on MX480/MX960/MX2008/MX2010/MX2020 is affected by CVE-2019-0056. The vulnerability is an Insufficient Resource Pool in OSPF that lets an attacker drive OSPF states to Down, causing a DoS affecting all IPv4/IPv6 traffic routed by OSPF. Exploitation requires a high rate o...

CVE-2021-0238

CVE-2021-0238 affects Junos OS on MX Series: repeatedly executing a CLI command may exhaust disk space, causing partial availability impact. Vulnerable versions include MX Series 17.3R1 and newer, up to but not including 17.4R3-S5, then 18.1–20.4 with various sub-versions listed; the issue does n...

CVE-2021-0288

CVE-2021-0288 affects Juniper Junos OS on MX Series and EX9200 Series with Trio-based MPCs. The vulnerability stems from how specific MPLS packets are processed, potentially causing the FPC to crash and triggering a DoS if packets continue to arrive. Affected versions are listed in the core CVE d...

CVE-2021-31366

CVE-2021-31366 is an Unchecked Return Value vulnerability in the authd (authentication daemon) of Juniper Networks Junos OS on MX Series configured for subscriber management/BBE. A adjacent attacker can trigger a crash by sending a specific username, causing a DoS affecting AAA services on affect...