CVE-2018-0019

Summary of CVE-2018-0019 (Junos SNMP mib2d DoS) Affected product: Juniper Networks Junos OS, specifically the SNMP MIB-II subagent daemon (mib2d). Root cause / vulnerability: A remote attacker could cause mib2d to crash, yielding a denial-of-service condition for the SNMP subsystem. The published...

CVE-2019-0010

Summary: CVE-2019-0010 affects Juniper SRX Series with Junos OS UTM enabled. Crafted HTTP traffic can exhaust mbufs in SPU/JMPI, causing a system crash (DoS) and failover. The issue is observed when HTTP AV inspection is enabled; WEB Filtering alone is unaffected. Affected products/versions (per ...

CVE-2019-0035

CVE-2019-0035 describes an administrative bypass on Juniper Networks Junos OS. When the insecure console port setting is enabled, an attacker with physical access can change the root password on systems booted from an OAM volume using the command set system root-authentication plain-text-password...

CVE-2021-0294

CVE-2021-0294 affects Junos OS 18.4R2-S5 on QFX5000 Series and EX4600 Series; when storm-control enhanced is configured, the enhanced storm control filter group may not be installed, causing storm control to fail and potentially high CPU usage or packet loss from excessive broadcast/unknown unica...

CVE-2021-31353

Summary : CVE-2021-31353 is a vulnerability in Juniper Networks Junos OS and Junos OS Evolved where processing a crafted BGP update can crash the Routing Protocol Daemon (RPD), causing a DoS. The issue is tied to an improper handling of exceptional conditions and affects specific Ju nis OS/Junos ...

CVE-2021-31364

CVE-2021-31364 affects Juniper Networks Junos OS flowd on SRX300/ SRX500/ SRX1500/ SRX5000 Series with SPC2. Root cause is an improper check for unusual conditions combined with a race condition in flowd, triggered by specific traffic that creates the same session and logs session-close as a poli...

CVE-2022-22228

Juniper Junos OS rpd (routing protocol daemon) is affected by CVE-2022-22228 due to improper validation of input, causing a memory leak that can lead to a DoS when IPv6 packets are sent to configured addresses. Affected releases include 21.1 before 21.1R3-S2; 21.2 before 21.2R3-S1; 21.3 before 21...

CVE-2022-22242

CVE-2022-22242 is a reflected Cross-site Scripting (XSS) vulnerability in Juniper Networks Junos OS, specifically in the J-Web component. An unauthenticated attacker can cause malicious scripts to be reflected off J-Web into the victim’s browser within the J-Web session, potentially compromising ...

CVE-2023-22395

CVE-2023-22395 describes a Missing Release of Memory after Effective Lifetime vulnerability in Juniper Networks Junos OS. An unauthenticated, adjacent attacker can cause a Denial of Service by sending specific MPLS-scoped packets to an IRB interface, triggering a buffer (mbuf) leak. Sustained tra...

CVE-2023-22398

CVE-2023-22398 affects Juniper Networks Junos OS and Junos OS Evolved: an Access of Uninitialized Pointer in the Routing Protocol Daemon (rpd). When an MPLS ping is performed on BGP LSPs, RPD may crash, leading to a DoS with repeated executions. Affected versions include: Junos OS 15.1 (prior to ...

CVE-2025-21591

CVE-2025-21591 describes a buffer length error in the jdhcpd daemon of Juniper Junos OS when DHCP snooping is enabled, enabling an unauthenticated adjacent attacker to send malformed DHCP options and crash jdhcpd, causing DoS. Affected ranges are Junos OS 23.1 before 23.2R2-S3, 23.4 before 23.4R2...

CVE-2026-57026

CVE-2026-57026 affects Junos OS on MX Series with SPC3 and SRX Series . The issue is an Improp er Validation of Syntactic Correctness of Input in the SIP plugin, enabling an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS) . When the SIP ALG is enabled, processing a malf...

CVE-2026-57031

Summary of CVE-2026-57031 (Junos OS MX Series): A vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on MX Series devices allows adjacent subscribers configured on static interfaces to bypass ingress firewall filters, disabling both protocol-level and upstream bandwi...

CVE-2014-0615

CVE-2014-0615 affects Juniper Junos releases listed in the description, where local users gain privileges via certain combinations of Junos OS CLI commands and arguments. The vulnerability is a local-privilege-escalation issue impacting multiple branches (e.g., 10.4/R16 and earlier, 11.x, 12.x, 1...

CVE-2014-9708

CVE-2014-9708 relates to Embedthis Appweb, where versions before 4.6.6 and 5.x before 5.2.1 are vulnerable to a remote denial of service caused by a NULL pointer dereference when handling a Range header with an empty value (e.g., “Range: x=,”). The vulnerability is triggered by processing a craft...

CVE-2019-0001

CVE-2019-0001 affects Juniper Networks Junos OS on MX Series with dynamic VLANs. A malformed packet can trigger an uncontrolled recursion in the Broadband Edge subscriber management daemon (bbe-smgd), causing high CPU and a crash, with repeated packets leading to extended DoS. Affected Junos rele...

CVE-2020-1606

CVE-2020-1606 is a path-traversal flaw in Junos OS/J-Web that allows an authenticated J-Web user to read files world-readable and delete world-writable ones. Affected Junos OS releases include 12.3 (before 12.3R12-S13), 12.3X48 (before 12.3X48-D85) on SRX, 14.1X53 (before 14.1X53-D51), 15.1F6 (be...

CVE-2021-0264

CVE-2021-0264 describes a DoS vulnerability in Juniper Networks Junos OS on MX Series with MPC10/MPC11 line cards and PTX10003/PTX10008 devices. When a firewall filter term containing a syslog action is hit (configured on lo0 or a physical interface), the affected line card may crash and restart,...

CVE-2022-22203

CVE-2022-22203 affects Juniper Networks Junos OS 19.4 (19.4R3-S4) on QFX5000 Series and EX4600/EX4650 platforms. Affected component: PFE (fxpc process). Root cause: Incorrect Comparison vulnerability that, when processing a specific hostbound packet, causes fxpc to crash and the FPC to reboot, en...

CVE-2022-22224

The CVE-2022-22224 issue affects Juniper Networks Junos OS and Junos OS Evolved, where processing a malformed OSPF TLV can cause the periodic packet management daemon (PPMD) to enter an infinite loop. This unblocks an unauthenticated adjacent attacker to induce a DoS by affecting OSPF neighbor re...

CVE-2022-22225

TOCTOU race condition in Juniper Junos OS and Junos OS Evolved’s Routing Protocol Daemon (rpd) allows an unauthenticated attacker on an established BGP session to trigger a DoS by crashing rpd when a route in a BGP multipath flap scenario is a contributing route. Affected versions include Junos O...

CVE-2023-22392

CVE-2023-22392 describes a memory-leak DoS in Juniper Junos OS PFE caused by missing release of memory after its effective lifetime. Affected devices include PTX3000/PTX5000/QFX10000 and PTX1000/10002/10004/10008/10016 with LC110x LC… FPCs (and LC110x variants) and cover multiple older Junos rele...

CVE-2023-22401

CVE-2023-22401 affects Juniper Networks Junos OS and Junos OS Evolved, specifically the aftmand (Advanced Forwarding Toolkit Manager) daemon on PTX10008/PTX10016. An improper validation of an array index allows an unauthenticated, network-based attacker to trigger a DoS by querying a particular S...

CVE-2023-22410

The CVE-2023-22410 entry affects Juniper Networks Junos OS on MX Series with MPC10/MPC11 line cards. The issue is a memory leak in AftDdosScfdFlow caused by enabling Suspicious Control Flow Detection (scfd); when attackers send specific traffic, memory is allocated dynamically and not freed, lead...

CVE-2023-28972

CVE-2023-28972 affects Juniper Networks Junos OS on NFX Series. The vulnerability is caused by an improper link resolution before file access in console port access, allowing an attacker with physical console access to bypass login controls and change the root password via set system root-authent...

CVE-2023-44188

CVE-2023-44188 is a TOCTOU race condition in Juniper Networks Junos OS telemetry processing that can cause the jkdsd daemon to crash and trigger DoS when multiple telemetry requests are sent from different collectors. Affected Junos OS versions span 20.4R3-S9 and earlier (various 21.x, 22.x, 23.1...

CVE-2023-44204

CVE-2023-44204 affects Juniper Networks Junos OS and Junos OS Evolved, via an Improper Validation of Syntactic Correctness of Input in the Routing Protocol Daemon (rpd). A malformed BGP UPDATE packet received on an established BGP session can crash rpd, causing a DoS on both eBGP and iBGP session...

CVE-2024-39543

CVE-2024-39543 affects Juniper Networks Junos OS and Junos OS Evolved. The root cause is a buffer copy without input size validation in the routing protocol daemon (rpd), which allows an unauthenticated adjacent attacker to send crafted RPKI-RTR packets, crashing rpd and causing a DoS. Affected r...

CVE-2025-21593

Summary (supported by provided documents): CVE-2025-21593 is an improper resource lifecycle control vulnerability in Juniper Junos OS and Junos OS Evolved dengan rpd, exploitable by an unauthenticated network attacker on devices with SRv6 enabled. The attacker can send malformed BGP UPDATE packet...

CVE-2013-4688

CVE-2013-4688 affects Juniper Junos SRX devices running 10.4 prior to 10.4R11, where the MSRPC Application Layer Gateway (ALG) is enabled. A remote, unauthenticated attacker can crash the process by sending crafted MSRPC requests, causing a denial of service (daemon crash). The issue is rooted in...

CVE-2019-0061

CVE-2019-0061 describes a local privilege-escalation flaw in Junos OS where a misconfigured internal unix-domain socket in the management daemon (MGD) can allow a local, authenticated user to gain administrative privileges. Affected are Linux-based Junos deployments (FreeBSD unaffected); exploita...

CVE-2020-1608

CVE-2020-1608 affects Juniper Networks Junos OS on MX Series in BBE configurations. Receipt of a specific MPLS or IPv6 packet on the core-facing interface may trigger a kernel crash (vmcore) and reboot, tied to processing for BBE clients. Affected Junos versions span multiple tracks: 17.2R2-S6 on...

CVE-2020-1637

CVE-2020-1637 concerns a bypass of Unified Access Control (UAC) on Juniper Networks SRX Series running Junos OS Enforcer. The root cause is when the Infranet Controller IP range is configured as an IP address range instead of an IP address/netmask, which can allow a user to access network resourc...

CVE-2020-1645

CVE-2020-1645 affects Juniper Networks Junos MX Series when DNS filtering is enabled and packets trigger the Multiservices PIC Management Daemon (mspmand). The issue can cause mspmand to crash, leading to a restart of the Services PIC; during boot, DNS filtering and other PIC services may be bypa...

CVE-2021-0214

The CVE-2021-0214 entry describes a Denial of Service in Juniper Networks Junos OS via the PPMD (periodic packet management daemon) when handling crafted malformed packets. The impact is a crash/restart of PPMD leading to network destabilization and service interruption; continued malformed packe...

CVE-2021-0216

CVE-2021-0216 affects Juniper Networks Junos OS on ACX5448 and ACX710. The issue is that a high rate of transit ARP packets can cause BFD sessions to flap, leading to potential routing instability and a DoS condition. Affected versions include Junos OS on ACX5448/ACX710 prior to specific fixed re...

CVE-2021-0282

CVE-2021-0282 – Junos OS DoS via BGP UPDATE with Multipath/add-path enabled . Affects Juniper’s Junos OS where Multipath/add-path is enabled; processing a specific BGP UPDATE can crash and restart the routing process daemon (RPD), causing a DoS. Sustained receipt of the UPDATE can propagate the D...

CVE-2021-0295

The CVE-2021-0295 issue affects Juniper Networks Junos OS on QFX10K Series switches (e.g., QFX10002/10008/10016). It’s caused by DVMRP packets looping on a multi-homed ESI when VXLAN is configured, leading to a packet forwarding loop that triggers a partial DoS. Affected versions include multiple...

CVE-2021-31386

CVE-2021-31386 is a Protection Mechanism Failure in Juniper Networks Junos OS J-Web HTTP service. Multiple Junos releases are affected (12.3 before 12.3R12-S20; 15.1 before 15.1R7-S11; 18.3 before 18.3R3-S6; 18.4 before 18.4R3-S10; 19.1 before 19.1R3-S7; 19.2 before 19.2R3-S4; 19.3 before 19.3R3-...

CVE-2022-22234

Summary (CVE-2022-22234) An Improper Preservation of Consistency Between Independent Representations of Shared State in the Packet Forwarding Engine (PFE) of Juniper Junos OS can cause a DoS when the device is very busy, e.g., during CLI show commands, potentially marking SFPs as unplugged and af...

CVE-2023-28979

CVE-2023-28979 affects Juniper Networks Junos OS kernels across multiple branches, enabling an adjacent attacker to bypass an integrity check in 6PE scenarios when an additional integrity check is configured. The issue causes specific malformed IPv6 packets to fail the integrity check and be forw...

CVE-2023-36831

CVE-2023-36831 affects Juniper Networks Junos OS SRX Series. The jbuf memory leak occurs when SSL Proxy and UTM Web-Filtering are enabled, leading to a DoS with service restoration only via reboot. Affected versions are: 22.2 before 22.2R3; 22.3 before 22.3R2-S1, 22.3R3; 22.4 before 22.4R1-S2, 22...

CVE-2024-21616

CVE-2024-21616 affects Juniper Networks Junos OS on MX Series and SRX Series. The issue is in the Packet Forwarding Engine (PFE) where improper validation of input syntax allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). When SIP ALG is enabled, receiving a spe...

CVE-2024-21619

CVE-2024-21619 describes a vulnerability in Juniper Networks Junos OS on SRX and EX series where an unauthenticated attacker can access sensitive configuration information via the J-Web interface. The root cause is a Missing Authentication for a Critical Function combined with a Generation of Err...

CVE-2024-39514

CVE-2024-39514 affects Junos OS and Junos OS Evolved. An attacker—adjacent, unauthenticated—can trigger a crash of the Routing Protocol Daemon (rpd) by sending specific traffic on devices with EVPN-VPWS and IGMP-snooping enabled, causing a DoS. Affected ranges are listed per release: Junos OS ver...

CVE-2014-2711

CVE-2014-2711 is a documented persistent XSS vulnerability in Juniper Junos J-Web. The J-Web interface on Junos platforms (across multiple branches and releases listed in the CVE) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, with impact limited to partia...

CVE-2017-10611

CVE-2017-10611 describes a crash of the pfem process or FPC when extended statistics are enabled and interface statistics are fetched (e.g., SNMP GET), on specific Juniper platforms. Affected devices include EX2200, EX3300, XRE200 and MX Series routers with MPC7E/8E/9E PFEs, with extended-statist...

CVE-2019-0066

CVE-2019-0066 affects Juniper Junos OS NG-mVPN: an unexpected status return value in the NG-mVPN service can be triggered by a crafted malformed IPv4 packet, allowing an unauthenticated remote attacker to cause a Denial of Service by core-dumping the routing protocol daemon (rpd). Impact is a DoS...

CVE-2021-0234

CVE-2021-0234 affects Juniper Networks Junos OS on QFX5100-96S with QFX 5e Series image. The issue is an improper initialization that prevents ddos-protection changes from taking effect beyond default DDoS settings configured via CLI. The ddos-protection (jddosd) daemon keeps the device functioni...

CVE-2021-31384

CVE-2021-31384 affects Juniper Networks Junos OS on SRX Series. The vulnerability stems from a Missing Authorization weakness and insufficient granularity of access control in a specific device configuration, allowing an attacker to reach J-Web administrative interfaces from any device interface,...