CVE-2018-0007

CVE-2018-0007 describes a memory corruption vulnerability in Junos OS triggered by unauthenticated LLDP packets on local segments, potentially leading to denial of service and, if authenticated on the device, arbitrary code execution with privilege escalation. The issue affects Junos OS releases ...

CVE-2018-0019

Summary of CVE-2018-0019 (Junos SNMP mib2d DoS) Affected product: Juniper Networks Junos OS, specifically the SNMP MIB-II subagent daemon (mib2d). Root cause / vulnerability: A remote attacker could cause mib2d to crash, yielding a denial-of-service condition for the SNMP subsystem. The published...

CVE-2019-0003

CVE-2019-0003 describes a vulnerability in Juniper Junos OS where a flowspec BGP update containing a specific term-order can trigger a reachable assertion failure, crashing the routing protocol daemon (rpd) and producing a core. The issue affects Junos OS releases across SRX, EX, and QFX platform...

CVE-2019-0008

CVE-2019-0008 describes a stack-based buffer overflow in the Junos OS Packet Forwarding Engine manager (FXPC) on QFX5000-series, EX4300, and EX4600 devices. A sequence of valid BGP or IPv6 BFD packets may crash the fxpc daemon or potentially enable remote code execution. Affected Junos OS release...

CVE-2021-31364

CVE-2021-31364 affects Juniper Networks Junos OS flowd on SRX300/ SRX500/ SRX1500/ SRX5000 Series with SPC2. Root cause is an improper check for unusual conditions combined with a race condition in flowd, triggered by specific traffic that creates the same session and logs session-close as a poli...

CVE-2022-22155

CVE-2022-22155 affects Juniper Networks Junos OS on the ACX5448 router. An Uncontrolled Resource Consumption vulnerability allows memory leakage in the FPC when IPv6 neighbor state changes flap in a timed sequence, leading to a DoS and requiring a manual PFE restart. Affected versions include ACX...

CVE-2022-22160

CVE-2022-22160 affects Juniper Junos OS MX Series where the subscriber management daemon (smgd) is vulnerable to an unchecked error condition. An unauthenticated adjacent attacker can trigger a crash of smgd (in environments with dual-stack session groups and a pp0 interface), causing the daemon ...

CVE-2022-22243

CVE-2022-22243 is an XPath Injection vulnerability in Juniper Networks Junos OS J-Web component. It enables an authenticated attacker to add an XPath command to the XPath stream, potentially chaining to other unspecified vulnerabilities and causing partial loss of confidentiality. Affected softwa...

CVE-2023-22414

The CVE-2023-22414 issue affects Juniper Networks Junos OS PTX Series and QFX10000 Series, caused by a Missing Release of Memory after Effective Lifetime in the Flexible PIC Concentrator (FPC). It enables an adjacent, unauthenticated attacker on the same network to trigger a heap memory leak and ...

CVE-2025-30658

CVE-2025-30658 affects Junos OS on SRX Series with Anti-Virus enabled. A memory leak in the Anti-Virus jbufs is triggered by certain HTTP responses, enabling an unauthenticated, network-based attacker to cause a DoS by exhausting jbuf memory and halting transit traffic. Affected versions (per Jun...

CVE-2018-0016

CVE-2018-0016 affects Junos OS 15.1 (and related 15.1.x and 15.1X5x/15.1X53 lines) where CLNS routing or ES-IS is configured. A specially crafted CLNP datagram can crash the kernel or enable remote code execution on interfaces that have CLNS routing/ESIS enabled; devices with CLNS disabled are no...

CVE-2021-0257

CVE-2021-0257 affects Juniper Junos OS on MX Series and EX9200 Series with Trio-based MPCs where IRB interfaces are mapped to a VPLS or Bridge-Domain. The issue is a memory leak in the MPC that can lead to an out-of-memory condition and an MPC restart, causing temporary traffic interruptions. Aff...

CVE-2021-0294

CVE-2021-0294 affects Junos OS 18.4R2-S5 on QFX5000 Series and EX4600 Series; when storm-control enhanced is configured, the enhanced storm control filter group may not be installed, causing storm control to fail and potentially high CPU usage or packet loss from excessive broadcast/unknown unica...

CVE-2021-31370

CVE-2021-31370 concerns Juniper Networks Junos OS on QFX5000 Series and EX4600 Series, where an Incomplete List of Disallowed Inputs vulnerability in the Packet Forwarding Engine (PFE) can be exploited by an adjacent unauthenticated attacker sending a high rate of specific multicast traffic. This...

CVE-2021-31373

Juniper Networks Junos OS SRX Series J-Web exposes a persistent XSS when authenticated users access the J-Web interface. An attacker could inject scripts to steal data or hijack sessions. Affected: SRX Series across multiple releases prior to specific fixed deployments (e.g., 18.2R3-S8; 18.3R3-S5...

CVE-2022-22157

Summary: CVE-2022-22157 describes a traffic-classification vulnerability in Juniper Networks Junos OS on SRX Series gateways where the Deep Packet Inspection (JDPI) rules can be bypassed when the device is configured with no-syn-check. The issue stems from JDPI misclassifying out-of-state asymmet...

CVE-2022-22206

The CVE-2022-22206 issue is a buffer overflow in the PFE of Juniper Networks Junos OS on SRX series (Enhanced Web Filtering safe-search). An unauthenticated network attacker can trigger a Denial of Service by sending specific traffic, causing the PFE to crash and sustain DoS if traffic continues....

CVE-2022-22210

CVE-2022-22210 affects Junos OS on QFX5000 and MX Series. A NULL pointer dereference in the Packet Forwarding Engine (PFE) L2ALM path crashes when a specific VXLAN packet is processed, causing an FPC reboot and sustained DoS for adjacent attackers. Affected versions: QFX5000/MX Series 20.3 prior ...

CVE-2022-22214

CVE-2022-22214 describes an improper input validation in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS and Junos OS Evolved. An adjacent attacker can trigger a specific transit IPv6 packet over MPLS that causes an FPC to crash and reboot, with continued receipt leading to a sust...

CVE-2022-22217

CVE-2022-22217 affects Juniper Junos OS on QFX10K Series switches (QFX10002/10008/10016). The root cause is an improper check that allows malformed MLD packets looping on a multi-homed ESI with VXLAN to be forwarded back to the peer, violating split horizon and causing a Denial of Service. Affect...

CVE-2023-36841

CVE-2023-36841 affects Juniper Networks Junos OS on MX Series with PPPoE-configured interfaces (tcp-mss enabled). An unauthenticated network attacker sending malformed TCP traffic can trigger an infinite loop in the Packet Forwarding Engine (PFE), leading to DoS as resources are exhausted and a m...

CVE-2024-21613

CVE-2024-21613 affects Juniper Networks Junos OS and Junos OS Evolved. The issue is a Missing Release of Memory after Effective Lifetime in the Routing Protocol Daemon (RPD) that, when traffic engineering is enabled for OSPF or ISIS and a link flap occurs, causes a patroot memory leak leading to ...

CVE-2024-39515

CVE-2024-39515 affects Juniper Junos OS and Junos OS Evolved when BGP traceoptions are enabled. An unauthenticated network-based attacker can send a specifically malformed BGP packet to cause the routing protocol daemon (rpd) to crash and restart, producing a Denial of Service. Sustained processi...

CVE-2024-39516

CVE-2024-39516 is an Out-of-Bounds Read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. An unauthenticated network attacker can send a specially malformed BGP packet to cause rpd to crash and restart, producing a DoS. The issue affects iBGP/eB...

CVE-2024-39551

Summary: CVE-2024-39551 is an Uncontrolled Resource Consumption vulnerability in the H.323 ALG of Juniper Networks Junos OS on SRX Series and MX Series with SPC3 and MS-MPC/MIC. An unauthenticated network attacker can send specific packets to trigger traffic loss/DoS. Continued receipt sustains t...

CVE-2015-5358

CVE-2015-5358 describes a DoS in Juniper Junos where TCP connections move to LAST_ACK when the device has more data to send, allowing remote attackers to exhaust mbufs and connections. Affected Junos versions include: 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-...

CVE-2017-10615

The CVE describes a vulnerability in the pluggable authentication module (PAM) of Juniper Networks Junos OS that may allow an unauthenticated network attacker to execute arbitrary code or crash PAM-utilizing daemons (e.g., telnetd, sshd). Affected Junos OS releases include: 14.1 starting from 14....

CVE-2019-0035

CVE-2019-0035 describes an administrative bypass on Juniper Networks Junos OS. When the insecure console port setting is enabled, an attacker with physical access can change the root password on systems booted from an OAM volume using the command set system root-authentication plain-text-password...

CVE-2020-1603

CVE-2020-1603 is a Junos OS IPv6 handling vulnerability causing a mbuf memory leak in the Routing Engine that can lead to kernel crash (vmcore) or device hang/DoS. Affected: Junos OS 16.1 versions before 16.1R7-S6; 16.1R7-S6 and later in 16.1X70-D10+; 16.2 before 16.2R2-S11; 17.1 before 17.1R2-S1...

CVE-2021-0216

CVE-2021-0216 affects Juniper Networks Junos OS on ACX5448 and ACX710. The issue is that a high rate of transit ARP packets can cause BFD sessions to flap, leading to potential routing instability and a DoS condition. Affected versions include Junos OS on ACX5448/ACX710 prior to specific fixed re...

CVE-2021-0264

CVE-2021-0264 describes a DoS vulnerability in Juniper Networks Junos OS on MX Series with MPC10/MPC11 line cards and PTX10003/PTX10008 devices. When a firewall filter term containing a syslog action is hit (configured on lo0 or a physical interface), the affected line card may crash and restart,...

CVE-2022-22246

CVE-2022-22246 is a PHP Local File Inclusion vulnerability in the J-Web component of Juniper Networks Junos OS. A low-privileged authenticated attacker could include and execute an untrusted PHP file stored on the server, potentially leading to a complete system compromise when chained with other...

CVE-2023-22394

Summary of CVE-2023-22394 — Junos OS SRX/MX SIP ALG memory leak (DoS) The vulnerability arises in Juniper Networks Junos OS when handling SIP calls with SIP ALG enabled, causing a memory leak that can degrade or disrupt SIP call processing and related applications. Affected products include Junos...

CVE-2024-39556

Summary of CVE-2024-39556 : A stack-based buffer overflow vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker with CLI access to load a crafted certificate via the set security certificates command, potentially crashing the command management da...

CVE-2025-30648

Summary: CVE-2025-30648 affects Juniper Networks Junos OS and Junos OS Evolved. An Improper Input Validation in the Juniper DHCP Daemon (jdhcpd) allows an unauthenticated, adjacent attacker to crash the jdhcpd when it receives a specifically malformed DHCP packet, causing a Denial of Service (DoS...

CVE-2013-4688

CVE-2013-4688 affects Juniper Junos SRX devices running 10.4 prior to 10.4R11, where the MSRPC Application Layer Gateway (ALG) is enabled. A remote, unauthenticated attacker can crash the process by sending crafted MSRPC requests, causing a denial of service (daemon crash). The issue is rooted in...

CVE-2013-4690

CVE-2013-4690 describes a memory-padding initialization flaw in Juniper Junos OS on SRX1400/3400/3600 platforms (versions listed) that can leak sensitive data by reading Ethernet-packet padding. The root cause is improper initialization of memory locations used during padding, enabling remote att...

CVE-2014-9708

CVE-2014-9708 relates to Embedthis Appweb, where versions before 4.6.6 and 5.x before 5.2.1 are vulnerable to a remote denial of service caused by a NULL pointer dereference when handling a Range header with an empty value (e.g., “Range: x=,”). The vulnerability is triggered by processing a craft...

CVE-2019-0010

Summary: CVE-2019-0010 affects Juniper SRX Series with Junos OS UTM enabled. Crafted HTTP traffic can exhaust mbufs in SPU/JMPI, causing a system crash (DoS) and failover. The issue is observed when HTTP AV inspection is enabled; WEB Filtering alone is unaffected. Affected products/versions (per ...

CVE-2020-1606

CVE-2020-1606 is a path-traversal flaw in Junos OS/J-Web that allows an authenticated J-Web user to read files world-readable and delete world-writable ones. Affected Junos OS releases include 12.3 (before 12.3R12-S13), 12.3X48 (before 12.3X48-D85) on SRX, 14.1X53 (before 14.1X53-D51), 15.1F6 (be...

CVE-2020-1645

CVE-2020-1645 affects Juniper Networks Junos MX Series when DNS filtering is enabled and packets trigger the Multiservices PIC Management Daemon (mspmand). The issue can cause mspmand to crash, leading to a restart of the Services PIC; during boot, DNS filtering and other PIC services may be bypa...

CVE-2020-1660

CVE-2020-1660 affects Juniper Networks Junos OS on MX Series when DNS filtering is enabled on cards MS-PIC, MS-MIC or MS-MPC. A crafted stream processed by the Multiservices PIC Management Daemon (mspmand) may crash the Services PIC, causing the Services PIC to restart and temporarily bypass DNS ...

CVE-2021-0234

CVE-2021-0234 affects Juniper Networks Junos OS on QFX5100-96S with QFX 5e Series image. The issue is an improper initialization that prevents ddos-protection changes from taking effect beyond default DDoS settings configured via CLI. The ddos-protection (jddosd) daemon keeps the device functioni...

CVE-2022-22154

CVE-2022-22154 affects Juniper Junos OS in a Junos Fusion setup via External Control of Critical State Data in the Satellite Device (SD) control state machine. A physical-cabling modification attack can reboot an SD and allow an Aggregation Device (AD) to take control, causing DoS. Affected: Juno...

CVE-2022-22162

CVE-2022-22162 affects Juniper Networks Junos OS. The issue is a Information Disclosure/Privilege Elevation vulnerability in the CLI where a locally authenticated, low-privilege user can elevate privileges to the highest J-Web user, potentially leading to full device compromise. Affected {Juniper...

CVE-2022-22218

On SRX Series devices running Junos OS, CVE-2022-22218 describes an improper check during CMPv2 auto re-enrollment that allows a network-based, unauthenticated attacker to trigger a Denial of Service by crashing the pkid process. The issue affects Junos OS on SRX Series across multiple releases (...

CVE-2023-22398

CVE-2023-22398 affects Juniper Networks Junos OS and Junos OS Evolved: an Access of Uninitialized Pointer in the Routing Protocol Daemon (rpd). When an MPLS ping is performed on BGP LSPs, RPD may crash, leading to a DoS with repeated executions. Affected versions include: Junos OS 15.1 (prior to ...

CVE-2023-22401

CVE-2023-22401 affects Juniper Networks Junos OS and Junos OS Evolved, specifically the aftmand (Advanced Forwarding Toolkit Manager) daemon on PTX10008/PTX10016. An improper validation of an array index allows an unauthenticated, network-based attacker to trigger a DoS by querying a particular S...

CVE-2023-28961

CVE-2023-28961 affects Juniper Networks Junos OS on ACX Series devices. The vulnerability arises in IPv6 firewall filter processing where a filter term using from next-header ah cannot be installed in the packet forwarding engine (PFE) due to an unsupported IP-protocol (51) match, potentially all...

CVE-2023-28982

CVE-2023-28982 affects Juniper Networks Junos OS and Junos OS Evolved. In a BGP rib sharding scenario, updating an active route’s attribute can cause a memory leak in the routing protocol daemon (rpd), leading to increased memory usage, a subsequent out-of-memory condition, and a DoS through rpd ...