CVE-2021-31370

CVE-2021-31370 concerns Juniper Networks Junos OS on QFX5000 Series and EX4600 Series, where an Incomplete List of Disallowed Inputs vulnerability in the Packet Forwarding Engine (PFE) can be exploited by an adjacent unauthenticated attacker sending a high rate of specific multicast traffic. This...

CVE-2022-22218

On SRX Series devices running Junos OS, CVE-2022-22218 describes an improper check during CMPv2 auto re-enrollment that allows a network-based, unauthenticated attacker to trigger a Denial of Service by crashing the pkid process. The issue affects Junos OS on SRX Series across multiple releases (...

CVE-2023-22414

The CVE-2023-22414 issue affects Juniper Networks Junos OS PTX Series and QFX10000 Series, caused by a Missing Release of Memory after Effective Lifetime in the Flexible PIC Concentrator (FPC). It enables an adjacent, unauthenticated attacker on the same network to trigger a heap memory leak and ...

CVE-2023-36841

CVE-2023-36841 affects Juniper Networks Junos OS on MX Series with PPPoE-configured interfaces (tcp-mss enabled). An unauthenticated network attacker sending malformed TCP traffic can trigger an infinite loop in the Packet Forwarding Engine (PFE), leading to DoS as resources are exhausted and a m...

CVE-2023-44182

CVE-2023-44182 affects Juniper Networks Junos OS and Junos OS Evolved, via an unchecked return value in multiple user interfaces (CLI, XML API, XML Management Protocol, NETCONF, gNMI, and J-Web) that can cause privilege demotion/elevation based on operator actions. Affected are Junos OS versions ...

CVE-2024-39561

CVE-2024-39561 affects Juniper Junos OS on SRX4600/SRX5000 Series. The vulnerability stems from an improper check in the flow daemon (flowd) that can allow TCP packets with SYN/FIN or SYN/RST flags to bypass the intended block when no-syn-check and Express Path are enabled, causing such packets t...

CVE-2021-0253

CVE-2021-0253 : A local command execution vulnerability in Juniper Junos OS on the NFX Series can allow privilege escalation via the Junos Device Management Daemon (JDMD). Affected are NFX Series devices with Junos OS versions starting at 17.2R1 (17.2 up to 17.2R1) and later, with specific exclus...

CVE-2021-0288

CVE-2021-0288 affects Juniper Junos OS on MX Series and EX9200 Series with Trio-based MPCs. The vulnerability stems from how specific MPLS packets are processed, potentially causing the FPC to crash and triggering a DoS if packets continue to arrive. Affected versions are listed in the core CVE d...

CVE-2021-31366

CVE-2021-31366 is an Unchecked Return Value vulnerability in the authd (authentication daemon) of Juniper Networks Junos OS on MX Series configured for subscriber management/BBE. A adjacent attacker can trigger a crash by sending a specific username, causing a DoS affecting AAA services on affect...

CVE-2022-22160

CVE-2022-22160 affects Juniper Junos OS MX Series where the subscriber management daemon (smgd) is vulnerable to an unchecked error condition. An unauthenticated adjacent attacker can trigger a crash of smgd (in environments with dual-stack session groups and a pp0 interface), causing the daemon ...

CVE-2022-22217

CVE-2022-22217 affects Juniper Junos OS on QFX10K Series switches (QFX10002/10008/10016). The root cause is an improper check that allows malformed MLD packets looping on a multi-homed ESI with VXLAN to be forwarded back to the peer, violating split horizon and causing a Denial of Service. Affect...

CVE-2022-22246

CVE-2022-22246 is a PHP Local File Inclusion vulnerability in the J-Web component of Juniper Networks Junos OS. A low-privileged authenticated attacker could include and execute an untrusted PHP file stored on the server, potentially leading to a complete system compromise when chained with other...

CVE-2023-22405

CVE-2023-22405 describes a DoS in Juniper Networks Junos OS caused by an improper preservation of consistency between independent representations of shared state in the Packet Forwarding Engine (PFE). When devices run with service-provider/SP style switching and MAC limiting on an Aggregated Ethe...

CVE-2024-39550

Summary: CVE-2024-39550 affects Juniper Junos OS on MX Series with SPC3 line cards, where an unauthenticated, adjacent attacker can trigger memory growth in the rtlogd process via repeated port flaps, causing a slow memory leak and DoS. The issue impacts multiple release trains (e.g., 21.2R3–21.2...

CVE-2024-39556

Summary of CVE-2024-39556 : A stack-based buffer overflow vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker with CLI access to load a crafted certificate via the set security certificates command, potentially crashing the command management da...

CVE-2017-10615

The CVE describes a vulnerability in the pluggable authentication module (PAM) of Juniper Networks Junos OS that may allow an unauthenticated network attacker to execute arbitrary code or crash PAM-utilizing daemons (e.g., telnetd, sshd). Affected Junos OS releases include: 14.1 starting from 14....

CVE-2018-0007

CVE-2018-0007 describes a memory corruption vulnerability in Junos OS triggered by unauthenticated LLDP packets on local segments, potentially leading to denial of service and, if authenticated on the device, arbitrary code execution with privilege escalation. The issue affects Junos OS releases ...

CVE-2019-0003

CVE-2019-0003 describes a vulnerability in Juniper Junos OS where a flowspec BGP update containing a specific term-order can trigger a reachable assertion failure, crashing the routing protocol daemon (rpd) and producing a core. The issue affects Junos OS releases across SRX, EX, and QFX platform...

CVE-2019-0060

The vulnerability CVE-2019-0060 affects Juniper Junos OS on SRX Series where the flowd process may crash and restart while processing specific transit IP packets through an IPSec tunnel, potentially causing a Denial of Service (DoS). Affected versions include Junos OS 15.1X49 prior to 15.1X49-D17...

CVE-2020-1603

CVE-2020-1603 is a Junos OS IPv6 handling vulnerability causing a mbuf memory leak in the Routing Engine that can lead to kernel crash (vmcore) or device hang/DoS. Affected: Junos OS 16.1 versions before 16.1R7-S6; 16.1R7-S6 and later in 16.1X70-D10+; 16.2 before 16.2R2-S11; 17.1 before 17.1R2-S1...

CVE-2021-0205

CVE-2021-0205 concerns Juniper Junos OS on MX Series when IDS is configured with a dynamic firewall filter using IPv6 prefixes. The issue causes the prefix to be incorrectly matched as /32, potentially blocking legitimate traffic. Affects MX Series devices with MS-MPC/MS-MIC/MS-SPC3 cards and IDS...

CVE-2021-0250

CVE-2021-0250 is a vulnerability in Juniper Networks Junos OS (and Junos OS Evolved) where, in SRTE/BGP monitoring contexts, processing a crafted BGP update message can cause the Routing Protocol Daemon (RPD) to core, leading to a DoS. Affected: Junos OS versions 17.4R1 and later before 17.4R2-S6...

CVE-2021-0294

CVE-2021-0294 affects Junos OS 18.4R2-S5 on QFX5000 Series and EX4600 Series; when storm-control enhanced is configured, the enhanced storm control filter group may not be installed, causing storm control to fail and potentially high CPU usage or packet loss from excessive broadcast/unknown unica...

CVE-2022-22155

CVE-2022-22155 affects Juniper Networks Junos OS on the ACX5448 router. An Uncontrolled Resource Consumption vulnerability allows memory leakage in the FPC when IPv6 neighbor state changes flap in a timed sequence, leading to a DoS and requiring a manual PFE restart. Affected versions include ACX...

CVE-2022-22173

CVE-2022-22173 describes a memory leak in Juniper Networks Junos OS PKI daemon (pkid) when a CRL download fails, causing unauthenticated networked DoS by exhausting memory over time. Affected are Junos OS versions prior to specific revisions across 18.3R3-S6, 18.4 (R2-S9, R3-S10), 19.1 (R2-S3, R3...

CVE-2022-22205

CVE-2022-22205 affects Juniper Networks Junos OS on SRX Series via a memory leak in the APBR/AppQoE pathway of the PFE, causing DoS under specific traffic when APBR is enabled and no AppQoE SLA rule is configured. Affected are SRX releases: 20.3 before 20.3R3-S2; 20.4 before 20.4R3-S2; 21.1 befor...

CVE-2022-22210

CVE-2022-22210 affects Junos OS on QFX5000 and MX Series. A NULL pointer dereference in the Packet Forwarding Engine (PFE) L2ALM path crashes when a specific VXLAN packet is processed, causing an FPC reboot and sustained DoS for adjacent attackers. Affected versions: QFX5000/MX Series 20.3 prior ...

CVE-2022-22243

CVE-2022-22243 is an XPath Injection vulnerability in Juniper Networks Junos OS J-Web component. It enables an authenticated attacker to add an XPath command to the XPath stream, potentially chaining to other unspecified vulnerabilities and causing partial loss of confidentiality. Affected softwa...

CVE-2023-22394

Summary of CVE-2023-22394 — Junos OS SRX/MX SIP ALG memory leak (DoS) The vulnerability arises in Juniper Networks Junos OS when handling SIP calls with SIP ALG enabled, causing a memory leak that can degrade or disrupt SIP call processing and related applications. Affected products include Junos...

CVE-2023-28985

CVE-2023-28985 is an IDP-related vulnerability in Juniper Networks SRX Series and MX Series. When IDP is enabled and a specific malformed SSL packet is received, the SSL detector crashes, causing an FPC core and a sustained DoS on affected devices. Impact is limited to unauthenticated, network-ba...

CVE-2024-39551

Summary: CVE-2024-39551 is an Uncontrolled Resource Consumption vulnerability in the H.323 ALG of Juniper Networks Junos OS on SRX Series and MX Series with SPC3 and MS-MPC/MIC. An unauthenticated network attacker can send specific packets to trigger traffic loss/DoS. Continued receipt sustains t...

CVE-2025-30648

Summary: CVE-2025-30648 affects Juniper Networks Junos OS and Junos OS Evolved. An Improper Input Validation in the Juniper DHCP Daemon (jdhcpd) allows an unauthenticated, adjacent attacker to crash the jdhcpd when it receives a specifically malformed DHCP packet, causing a Denial of Service (DoS...

CVE-2018-0016

CVE-2018-0016 affects Junos OS 15.1 (and related 15.1.x and 15.1X5x/15.1X53 lines) where CLNS routing or ES-IS is configured. A specially crafted CLNP datagram can crash the kernel or enable remote code execution on interfaces that have CLNS routing/ESIS enabled; devices with CLNS disabled are no...

CVE-2018-0019

Summary of CVE-2018-0019 (Junos SNMP mib2d DoS) Affected product: Juniper Networks Junos OS, specifically the SNMP MIB-II subagent daemon (mib2d). Root cause / vulnerability: A remote attacker could cause mib2d to crash, yielding a denial-of-service condition for the SNMP subsystem. The published...

CVE-2019-0035

CVE-2019-0035 describes an administrative bypass on Juniper Networks Junos OS. When the insecure console port setting is enabled, an attacker with physical access can change the root password on systems booted from an OAM volume using the command set system root-authentication plain-text-password...

CVE-2019-0058

CVE-2019-0058 affects Juniper Networks Junos OS Veriexec subsystem on SRX Series: versions 12.3X48 prior to 12.3X48-D80 are vulnerable. A locally authenticated user can elevate privileges to gain full control of the system. The issue is documented across multiple feeds (including NVD and Nessus e...

CVE-2022-22154

CVE-2022-22154 affects Juniper Junos OS in a Junos Fusion setup via External Control of Critical State Data in the Satellite Device (SD) control state machine. A physical-cabling modification attack can reboot an SD and allow an Aggregation Device (AD) to take control, causing DoS. Affected: Juno...

CVE-2022-22162

CVE-2022-22162 affects Juniper Networks Junos OS. The issue is a Information Disclosure/Privilege Elevation vulnerability in the CLI where a locally authenticated, low-privilege user can elevate privileges to the highest J-Web user, potentially leading to full device compromise. Affected {Juniper...

CVE-2022-22214

CVE-2022-22214 describes an improper input validation in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS and Junos OS Evolved. An adjacent attacker can trigger a specific transit IPv6 packet over MPLS that causes an FPC to crash and reboot, with continued receipt leading to a sust...

CVE-2022-22245

CVE-2022-22245 is a path traversal flaw in the J-Web component of Juniper Networks Junos OS that allows an authenticated, remote attacker to upload arbitrary files by bypassing validation, potentially compromising filesystem integrity. Affected versions range up to the listed fixed releases (e.g....

CVE-2023-22411

CVE-2023-22411 – Junos OS flowd DoS via IPv6 filter path . An out-of-bounds write in the Flow Processing Daemon (flowd) on SRX Series Junos OS can crash flowd and restart the PFE, allowing a network-based attacker to induce a DoS without authentication. Affected releases (SRX Series with Unified ...

CVE-2023-28982

CVE-2023-28982 affects Juniper Networks Junos OS and Junos OS Evolved. In a BGP rib sharding scenario, updating an active route’s attribute can cause a memory leak in the routing protocol daemon (rpd), leading to increased memory usage, a subsequent out-of-memory condition, and a DoS through rpd ...

CVE-2024-21613

CVE-2024-21613 affects Juniper Networks Junos OS and Junos OS Evolved. The issue is a Missing Release of Memory after Effective Lifetime in the Routing Protocol Daemon (RPD) that, when traffic engineering is enabled for OSPF or ISIS and a link flap occurs, causes a patroot memory leak leading to ...

CVE-2014-9708

CVE-2014-9708 relates to Embedthis Appweb, where versions before 4.6.6 and 5.x before 5.2.1 are vulnerable to a remote denial of service caused by a NULL pointer dereference when handling a Range header with an empty value (e.g., “Range: x=,”). The vulnerability is triggered by processing a craft...

CVE-2019-0061

CVE-2019-0061 describes a local privilege-escalation flaw in Junos OS where a misconfigured internal unix-domain socket in the management daemon (MGD) can allow a local, authenticated user to gain administrative privileges. Affected are Linux-based Junos deployments (FreeBSD unaffected); exploita...

CVE-2020-1660

CVE-2020-1660 affects Juniper Networks Junos OS on MX Series when DNS filtering is enabled on cards MS-PIC, MS-MIC or MS-MPC. A crafted stream processed by the Multiservices PIC Management Daemon (mspmand) may crash the Services PIC, causing the Services PIC to restart and temporarily bypass DNS ...

CVE-2021-0257

CVE-2021-0257 affects Juniper Junos OS on MX Series and EX9200 Series with Trio-based MPCs where IRB interfaces are mapped to a VPLS or Bridge-Domain. The issue is a memory leak in the MPC that can lead to an out-of-memory condition and an MPC restart, causing temporary traffic interruptions. Aff...

CVE-2021-0264

CVE-2021-0264 describes a DoS vulnerability in Juniper Networks Junos OS on MX Series with MPC10/MPC11 line cards and PTX10003/PTX10008 devices. When a firewall filter term containing a syslog action is hit (configured on lo0 or a physical interface), the affected line card may crash and restart,...

CVE-2021-31364

CVE-2021-31364 affects Juniper Networks Junos OS flowd on SRX300/ SRX500/ SRX1500/ SRX5000 Series with SPC2. Root cause is an improper check for unusual conditions combined with a race condition in flowd, triggered by specific traffic that creates the same session and logs session-close as a poli...

CVE-2022-22242

CVE-2022-22242 is a reflected Cross-site Scripting (XSS) vulnerability in Juniper Networks Junos OS, specifically in the J-Web component. An unauthenticated attacker can cause malicious scripts to be reflected off J-Web into the victim’s browser within the J-Web session, potentially compromising ...