CVE-2024-39551

Summary: CVE-2024-39551 is an Uncontrolled Resource Consumption vulnerability in the H.323 ALG of Juniper Networks Junos OS on SRX Series and MX Series with SPC3 and MS-MPC/MIC. An unauthenticated network attacker can send specific packets to trigger traffic loss/DoS. Continued receipt sustains t...

CVE-2013-4688

CVE-2013-4688 affects Juniper Junos SRX devices running 10.4 prior to 10.4R11, where the MSRPC Application Layer Gateway (ALG) is enabled. A remote, unauthenticated attacker can crash the process by sending crafted MSRPC requests, causing a denial of service (daemon crash). The issue is rooted in...

CVE-2013-4690

CVE-2013-4690 describes a memory-padding initialization flaw in Juniper Junos OS on SRX1400/3400/3600 platforms (versions listed) that can leak sensitive data by reading Ethernet-packet padding. The root cause is improper initialization of memory locations used during padding, enabling remote att...

CVE-2014-0615

CVE-2014-0615 affects Juniper Junos releases listed in the description, where local users gain privileges via certain combinations of Junos OS CLI commands and arguments. The vulnerability is a local-privilege-escalation issue impacting multiple branches (e.g., 10.4/R16 and earlier, 11.x, 12.x, 1...

CVE-2014-9708

CVE-2014-9708 relates to Embedthis Appweb, where versions before 4.6.6 and 5.x before 5.2.1 are vulnerable to a remote denial of service caused by a NULL pointer dereference when handling a Range header with an empty value (e.g., “Range: x=,”). The vulnerability is triggered by processing a craft...

CVE-2020-1606

CVE-2020-1606 is a path-traversal flaw in Junos OS/J-Web that allows an authenticated J-Web user to read files world-readable and delete world-writable ones. Affected Junos OS releases include 12.3 (before 12.3R12-S13), 12.3X48 (before 12.3X48-D85) on SRX, 14.1X53 (before 14.1X53-D51), 15.1F6 (be...

CVE-2021-0234

CVE-2021-0234 affects Juniper Networks Junos OS on QFX5100-96S with QFX 5e Series image. The issue is an improper initialization that prevents ddos-protection changes from taking effect beyond default DDoS settings configured via CLI. The ddos-protection (jddosd) daemon keeps the device functioni...

CVE-2021-0295

The CVE-2021-0295 issue affects Juniper Networks Junos OS on QFX10K Series switches (e.g., QFX10002/10008/10016). It’s caused by DVMRP packets looping on a multi-homed ESI when VXLAN is configured, leading to a packet forwarding loop that triggers a partial DoS. Affected versions include multiple...

CVE-2022-22167

CVE-2022-22167 describes a traffic classification vulnerability in Juniper Networks Junos OS on SRX Series gateways where enabling no-syn-check causes JDPI to misclassify certain TCP flows, leading the policy to permit traffic that should be denied via the pre-id-default-policy. Affected are SRX ...

CVE-2022-22224

The CVE-2022-22224 issue affects Juniper Networks Junos OS and Junos OS Evolved, where processing a malformed OSPF TLV can cause the periodic packet management daemon (PPMD) to enter an infinite loop. This unblocks an unauthenticated adjacent attacker to induce a DoS by affecting OSPF neighbor re...

CVE-2022-22225

TOCTOU race condition in Juniper Junos OS and Junos OS Evolved’s Routing Protocol Daemon (rpd) allows an unauthenticated attacker on an established BGP session to trigger a DoS by crashing rpd when a route in a BGP multipath flap scenario is a contributing route. Affected versions include Junos O...

CVE-2022-22226

CVE-2022-22226 affects Juniper Junos OS on EX4300-MP, EX4600, and QFX5000 Series in VXLAN scenarios. The issue is an Uncontrolled Memory Allocation in the Packet Forwarding Engine (PFE) that can be triggered by specific crafted packets from an adjacent attacker, leading to PFE crashes and memory ...

CVE-2022-22228

Juniper Junos OS rpd (routing protocol daemon) is affected by CVE-2022-22228 due to improper validation of input, causing a memory leak that can lead to a DoS when IPv6 packets are sent to configured addresses. Affected releases include 21.1 before 21.1R3-S2; 21.2 before 21.2R3-S1; 21.3 before 21...

CVE-2023-22398

CVE-2023-22398 affects Juniper Networks Junos OS and Junos OS Evolved: an Access of Uninitialized Pointer in the Routing Protocol Daemon (rpd). When an MPLS ping is performed on BGP LSPs, RPD may crash, leading to a DoS with repeated executions. Affected versions include: Junos OS 15.1 (prior to ...

CVE-2023-22399

CVE-2023-22399 affects Juniper Networks Junos OS on QFX10K Series. The issue is a buffer overflow in the dcpfe process when sFlow monitors ECMP traffic, allowing a remote attacker to crash and restart the PFE, causing a DoS. Affected releases include all before 19.4R3-S9; 20.2 before 20.2R3-S6; 2...

CVE-2023-22410

The CVE-2023-22410 entry affects Juniper Networks Junos OS on MX Series with MPC10/MPC11 line cards. The issue is a memory leak in AftDdosScfdFlow caused by enabling Suspicious Control Flow Detection (scfd); when attackers send specific traffic, memory is allocated dynamically and not freed, lead...

CVE-2023-22411

CVE-2023-22411 – Junos OS flowd DoS via IPv6 filter path . An out-of-bounds write in the Flow Processing Daemon (flowd) on SRX Series Junos OS can crash flowd and restart the PFE, allowing a network-based attacker to induce a DoS without authentication. Affected releases (SRX Series with Unified ...

CVE-2023-28972

CVE-2023-28972 affects Juniper Networks Junos OS on NFX Series. The vulnerability is caused by an improper link resolution before file access in console port access, allowing an attacker with physical console access to bypass login controls and change the root password via set system root-authent...

CVE-2023-28979

CVE-2023-28979 affects Juniper Networks Junos OS kernels across multiple branches, enabling an adjacent attacker to bypass an integrity check in 6PE scenarios when an additional integrity check is configured. The issue causes specific malformed IPv6 packets to fail the integrity check and be forw...

CVE-2023-44204

CVE-2023-44204 affects Juniper Networks Junos OS and Junos OS Evolved, via an Improper Validation of Syntactic Correctness of Input in the Routing Protocol Daemon (rpd). A malformed BGP UPDATE packet received on an established BGP session can crash rpd, causing a DoS on both eBGP and iBGP session...

CVE-2025-21591

CVE-2025-21591 describes a buffer length error in the jdhcpd daemon of Juniper Junos OS when DHCP snooping is enabled, enabling an unauthenticated adjacent attacker to send malformed DHCP options and crash jdhcpd, causing DoS. Affected ranges are Junos OS 23.1 before 23.2R2-S3, 23.4 before 23.4R2...

CVE-2019-0001

CVE-2019-0001 affects Juniper Networks Junos OS on MX Series with dynamic VLANs. A malformed packet can trigger an uncontrolled recursion in the Broadband Edge subscriber management daemon (bbe-smgd), causing high CPU and a crash, with repeated packets leading to extended DoS. Affected Junos rele...

CVE-2020-1608

CVE-2020-1608 affects Juniper Networks Junos OS on MX Series in BBE configurations. Receipt of a specific MPLS or IPv6 packet on the core-facing interface may trigger a kernel crash (vmcore) and reboot, tied to processing for BBE clients. Affected Junos versions span multiple tracks: 17.2R2-S6 on...

CVE-2020-1637

CVE-2020-1637 concerns a bypass of Unified Access Control (UAC) on Juniper Networks SRX Series running Junos OS Enforcer. The root cause is when the Infranet Controller IP range is configured as an IP address range instead of an IP address/netmask, which can allow a user to access network resourc...

CVE-2021-0214

The CVE-2021-0214 entry describes a Denial of Service in Juniper Networks Junos OS via the PPMD (periodic packet management daemon) when handling crafted malformed packets. The impact is a crash/restart of PPMD leading to network destabilization and service interruption; continued malformed packe...

CVE-2021-0281

CVE-2021-0281 affects Juniper Networks Junos OS and Junos OS Evolved. A crafted BGP origin validation/ RPki packet from the RPKI cache server can crash and restart the routing process daemon (RPD), causing a DoS. Affected releases include Junos OS 17.3 (before 17.3R3-S12), 17.4 (before 17.4R3-S5)...

CVE-2021-31371

CVE-2021-31371 affects Juniper Networks Junos OS on QFX5110/5120/5200/5210 and QFX5100 with QFX 5e Series image. The issue: internal RE-to-PFE 128.0.0.0/2 traffic may be forwarded to an egress interface, leaking configuration data (eg, heartbeats, kernel versions) to the Internet, across multiple...

CVE-2021-31386

CVE-2021-31386 is a Protection Mechanism Failure in Juniper Networks Junos OS J-Web HTTP service. Multiple Junos releases are affected (12.3 before 12.3R12-S20; 15.1 before 15.1R7-S11; 18.3 before 18.3R3-S6; 18.4 before 18.4R3-S10; 19.1 before 19.1R3-S7; 19.2 before 19.2R3-S4; 19.3 before 19.3R3-...

CVE-2022-22234

Summary (CVE-2022-22234) An Improper Preservation of Consistency Between Independent Representations of Shared State in the Packet Forwarding Engine (PFE) of Juniper Junos OS can cause a DoS when the device is very busy, e.g., during CLI show commands, potentially marking SFPs as unplugged and af...

CVE-2023-22395

CVE-2023-22395 describes a Missing Release of Memory after Effective Lifetime vulnerability in Juniper Networks Junos OS. An unauthenticated, adjacent attacker can cause a Denial of Service by sending specific MPLS-scoped packets to an IRB interface, triggering a buffer (mbuf) leak. Sustained tra...

CVE-2023-22401

CVE-2023-22401 affects Juniper Networks Junos OS and Junos OS Evolved, specifically the aftmand (Advanced Forwarding Toolkit Manager) daemon on PTX10008/PTX10016. An improper validation of an array index allows an unauthenticated, network-based attacker to trigger a DoS by querying a particular S...

CVE-2023-28961

CVE-2023-28961 affects Juniper Networks Junos OS on ACX Series devices. The vulnerability arises in IPv6 firewall filter processing where a filter term using from next-header ah cannot be installed in the packet forwarding engine (PFE) due to an unsupported IP-protocol (51) match, potentially all...

CVE-2023-44182

CVE-2023-44182 affects Juniper Networks Junos OS and Junos OS Evolved, via an unchecked return value in multiple user interfaces (CLI, XML API, XML Management Protocol, NETCONF, gNMI, and J-Web) that can cause privilege demotion/elevation based on operator actions. Affected are Junos OS versions ...

CVE-2024-39565

CVE-2024-39565 : J-Web XPath Injection in Junos OS allows an unauthenticated, network-based attacker to execute remote commands on the target device. Affected Junos OS versions include all before 21.2R3-S8; 21.4 before 21.4R3-S7; 22.2 before 22.2R3-S4; 22.3 before 22.3R3-S3; 22.4 before 22.4R3-S2...

CVE-2013-4687

CVE-2013-4687 affects Juniper Junos on SRX devices: the flowd daemon can crash when certain ALGs are enabled, triggered by crafted TCP packets. Affected versions are Junos 10.4 before 10.4S14, 11.2 and 11.4 before 11.4R6-S2, and 12.1 before 12.1R6. Impact is remote denial of service via daemon cr...

CVE-2014-3822

Summary: CVE-2014-3822 affects Juniper Junos SRX Series devices and relates to the IPv6-to-IPv4 translation path. The issue can be triggered by a malformed packet, causing a denial of service via the flowd process crash. Affected software/versions (as provided): Junos OS on SRX Series with 11.4 b...

CVE-2019-0057

CVE-2019-0057 : Juniper Junos OS has an improper authorization vulnerability that allows a local authenticated attacker to bypass security controls and take control of the Junos Device Manager (JDM). Affected: Junos OS versions prior to 18.2R1 and 18.2X75-D5. Documents confirm local vector with h...

CVE-2019-0061

CVE-2019-0061 describes a local privilege-escalation flaw in Junos OS where a misconfigured internal unix-domain socket in the management daemon (MGD) can allow a local, authenticated user to gain administrative privileges. Affected are Linux-based Junos deployments (FreeBSD unaffected); exploita...

CVE-2019-0064

CVE-2019-0064 affects Juniper Networks Junos OS on SRX5000 Series devices. The issue arises when a crafted TCP packet is received that matches the configuration command set security zones security-zone tcp-rst, causing the flowd process to crash and restart, with potential extended DoS if a cont...

CVE-2020-1688

Technical details (affected products/versions/impact/fix) are not publicly available in the provided connected documents. Monitor for updates.

CVE-2021-0282

CVE-2021-0282 – Junos OS DoS via BGP UPDATE with Multipath/add-path enabled . Affects Juniper’s Junos OS where Multipath/add-path is enabled; processing a specific BGP UPDATE can crash and restart the routing process daemon (RPD), causing a DoS. Sustained receipt of the UPDATE can propagate the D...

CVE-2021-31384

CVE-2021-31384 affects Juniper Networks Junos OS on SRX Series. The vulnerability stems from a Missing Authorization weakness and insufficient granularity of access control in a specific device configuration, allowing an attacker to reach J-Web administrative interfaces from any device interface,...

CVE-2022-22184

CVE-2022-22184 : Juniper Junos OS and Junos OS Evolved (22.3R1 / 22.3R1-EVO) contain an improper input validation vulnerability in the Routing Protocol Daemon (rpd). An unauthenticated, network-based attacker can trigger a Denial of Service by sending a BGP update on an established session that c...

CVE-2022-22203

CVE-2022-22203 affects Juniper Networks Junos OS 19.4 (19.4R3-S4) on QFX5000 Series and EX4600/EX4650 platforms. Affected component: PFE (fxpc process). Root cause: Incorrect Comparison vulnerability that, when processing a specific hostbound packet, causes fxpc to crash and the FPC to reboot, en...

CVE-2022-22250

CVE-2022-22250 affects Juniper Networks Junos OS and Junos OS Evolved PFE. An improper control of a resource through its lifetime allows an unauthenticated adjacent attacker to cause a DoS via memory corruption when EVPN-MPLS MAC learned locally is deleted as remotely learned, potentially causing...

CVE-2023-22392

CVE-2023-22392 describes a memory-leak DoS in Juniper Junos OS PFE caused by missing release of memory after its effective lifetime. Affected devices include PTX3000/PTX5000/QFX10000 and PTX1000/10002/10004/10008/10016 with LC110x LC… FPCs (and LC110x variants) and cover multiple older Junos rele...

CVE-2023-36831

CVE-2023-36831 affects Juniper Networks Junos OS SRX Series. The jbuf memory leak occurs when SSL Proxy and UTM Web-Filtering are enabled, leading to a DoS with service restoration only via reboot. Affected versions are: 22.2 before 22.2R3; 22.3 before 22.3R2-S1, 22.3R3; 22.4 before 22.4R1-S2, 22...

CVE-2023-44188

CVE-2023-44188 is a TOCTOU race condition in Juniper Networks Junos OS telemetry processing that can cause the jkdsd daemon to crash and trigger DoS when multiple telemetry requests are sent from different collectors. Affected Junos OS versions span 20.4R3-S9 and earlier (various 21.x, 22.x, 23.1...

CVE-2023-44199

CVE-2023-44199 is a vulnerability in Juniper Networks Junos OS on MX Series where an improper check in the Packet Forwarding Engine (PFE) can be triggered by network-based, unauthenticated attackers to cause a Denial of Service via prolonged routing churn when PTP is configured. Affected MX Serie...

CVE-2024-21616

CVE-2024-21616 affects Juniper Networks Junos OS on MX Series and SRX Series. The issue is in the Packet Forwarding Engine (PFE) where improper validation of input syntax allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS). When SIP ALG is enabled, receiving a spe...