CVE-2021-0275

The CVE-2021-0275 entry identifies a Cross-site Scripting (XSS) vulnerability in Juniper Networks Junos OS J-Web that can hijack another active user session and potentially grant full device control if the compromised user has root privileges. Affected are Junos OS versions across multiple series...

CVE-2021-0281

CVE-2021-0281 affects Juniper Networks Junos OS and Junos OS Evolved. A crafted BGP origin validation/ RPki packet from the RPKI cache server can crash and restart the routing process daemon (RPD), causing a DoS. Affected releases include Junos OS 17.3 (before 17.3R3-S12), 17.4 (before 17.4R3-S5)...

CVE-2021-0294

CVE-2021-0294 affects Junos OS 18.4R2-S5 on QFX5000 Series and EX4600 Series; when storm-control enhanced is configured, the enhanced storm control filter group may not be installed, causing storm control to fail and potentially high CPU usage or packet loss from excessive broadcast/unknown unica...

CVE-2021-31353

Summary : CVE-2021-31353 is a vulnerability in Juniper Networks Junos OS and Junos OS Evolved where processing a crafted BGP update can crash the Routing Protocol Daemon (RPD), causing a DoS. The issue is tied to an improper handling of exceptional conditions and affects specific Ju nis OS/Junos ...

CVE-2021-31364

CVE-2021-31364 affects Juniper Networks Junos OS flowd on SRX300/ SRX500/ SRX1500/ SRX5000 Series with SPC2. Root cause is an improper check for unusual conditions combined with a race condition in flowd, triggered by specific traffic that creates the same session and logs session-close as a poli...

CVE-2021-31384

CVE-2021-31384 affects Juniper Networks Junos OS on SRX Series. The vulnerability stems from a Missing Authorization weakness and insufficient granularity of access control in a specific device configuration, allowing an attacker to reach J-Web administrative interfaces from any device interface,...

CVE-2022-22203

CVE-2022-22203 affects Juniper Networks Junos OS 19.4 (19.4R3-S4) on QFX5000 Series and EX4600/EX4650 platforms. Affected component: PFE (fxpc process). Root cause: Incorrect Comparison vulnerability that, when processing a specific hostbound packet, causes fxpc to crash and the FPC to reboot, en...

CVE-2023-22391

CVE-2023-22391 affects Juniper Networks Junos OS on ACX2K Series. The issue is a class-of-service (CoS) queue management flaw that misroutes specific high-priority traffic (BGP, PIM, ICMP/ICMPv6 ND, ISAKMP) into a queue, enabling an unauthenticated network-based attacker to cause a DoS by sustain...

CVE-2023-22401

CVE-2023-22401 affects Juniper Networks Junos OS and Junos OS Evolved, specifically the aftmand (Advanced Forwarding Toolkit Manager) daemon on PTX10008/PTX10016. An improper validation of an array index allows an unauthenticated, network-based attacker to trigger a DoS by querying a particular S...

CVE-2024-21617

CVE-2024-21617 affects Juniper Networks Junos OS (NSR-enabled devices). A BGP flap can cause memory leak leading to DoS; reboot temporarily restores services. Affected versions include 21.2R3-S5 and earlier, 21.3R3-S4 and earlier, 21.4R3-S4 and earlier, 22.1R3-S2 and earlier, 22.2R3-S2 and earlie...

CVE-2024-39525

CVE-2024-39525 affects Juniper Networks Junos OS and Junos OS Evolved. The issue is an improper handling of exceptional conditions in the routing protocol daemon (rpd) that can be triggered by an unauthenticated network-based attacker sending a crafted BGP packet, causing rpd to crash and restart...

CVE-2015-3005

CVE-2015-3005 is a documented XSS vulnerability in Juniper Junos OS Dynamic VPN affecting SRX devices. The issue allows remote attackers to inject arbitrary script/HTML via unspecified vectors in affected releases: Junos 12.1X44 prior to 12.1X44-D45, 12.1X46 prior to 12.1X46-D30, 12.1X47 prior to...

CVE-2018-0021

CVE-2018-0021 affects Junos OS when MacSec CKN/CAK keys are configured with short values. If all 64 CKN digits or all 32 CAK digits are not configured, remaining digits auto-configure to 0, increasing the feasibility of dictionary/brute-force attacks to recover key material via spoofed packets. A...

CVE-2019-0057

CVE-2019-0057 : Juniper Junos OS has an improper authorization vulnerability that allows a local authenticated attacker to bypass security controls and take control of the Junos Device Manager (JDM). Affected: Junos OS versions prior to 18.2R1 and 18.2X75-D5. Documents confirm local vector with h...

CVE-2020-1606

CVE-2020-1606 is a path-traversal flaw in Junos OS/J-Web that allows an authenticated J-Web user to read files world-readable and delete world-writable ones. Affected Junos OS releases include 12.3 (before 12.3R12-S13), 12.3X48 (before 12.3X48-D85) on SRX, 14.1X53 (before 14.1X53-D51), 15.1F6 (be...

CVE-2020-1633

CVE-2020-1633 affects Juniper Networks Junos OS on MX Series where a new IPv6 NDP proxy feature for EVPN leaf nodes allows crafted NDPv6 packets to traverse a BNG and reach the EVPN leaf, causing a stale MAC entry and potential DoS. Affected are Junos OS 17.4 (and later) with specific older/MX-se...

CVE-2021-0234

CVE-2021-0234 affects Juniper Networks Junos OS on QFX5100-96S with QFX 5e Series image. The issue is an improper initialization that prevents ddos-protection changes from taking effect beyond default DDoS settings configured via CLI. The ddos-protection (jddosd) daemon keeps the device functioni...

CVE-2022-22175

The CVE covers an Improper Locking vulnerability in the SIP ALG of Juniper Junos OS on MX Series and SRX Series, causing the flowd daemon to crash and trigger DoS when specific SIP traffic is processed with SIP ALG enabled. Affected versions include Junos OS: 20.4 (before 20.4R3‑S1), 21.1 (before...

CVE-2022-22224

The CVE-2022-22224 issue affects Juniper Networks Junos OS and Junos OS Evolved, where processing a malformed OSPF TLV can cause the periodic packet management daemon (PPMD) to enter an infinite loop. This unblocks an unauthenticated adjacent attacker to induce a DoS by affecting OSPF neighbor re...

CVE-2022-22225

TOCTOU race condition in Juniper Junos OS and Junos OS Evolved’s Routing Protocol Daemon (rpd) allows an unauthenticated attacker on an established BGP session to trigger a DoS by crashing rpd when a route in a BGP multipath flap scenario is a contributing route. Affected versions include Junos O...

CVE-2022-22226

CVE-2022-22226 affects Juniper Junos OS on EX4300-MP, EX4600, and QFX5000 Series in VXLAN scenarios. The issue is an Uncontrolled Memory Allocation in the Packet Forwarding Engine (PFE) that can be triggered by specific crafted packets from an adjacent attacker, leading to PFE crashes and memory ...

CVE-2023-28976

This CVE involves an Improper Check for Unusual or Exceptional Conditions in the PFE of Juniper Networks Junos OS on MX Series. A network-based attacker can trigger a DoS by sending traffic that exceeds the DDoS threshold, causing the ingress PFE to crash and restart and potentially sustaining a ...

CVE-2024-21611

CVE-2024-21611 affects Juniper Networks Junos OS and Junos OS Evolved. In a jflow scenario with continuous route churn, the Routing Protocol Daemon (rpd) may suffer a memory leak due to a missing release of memory after its lifetime, potentially causing an unauthenticated, network-based DoS via r...

CVE-2025-21596

CVE-2025-21596 concerns Junos OS on SRX1500, SRX4100 and SRX4200. The issue stems from improper handling of exceptional conditions in the CLI when executing the local, low-privilege attacker’s command “show chassis environment pem,” which crashes the chassis daemon (chassisd) and restarts it, cre...

CVE-2025-30646

CVE-2025-30646 affects Junos OS and Junos OS Evolved. A Signed to Unsigned Conversion Error in the Layer 2 Control Protocol daemon (l2cpd) allows an unauthenticated adjacent attacker to cause the l2cpd process to crash and restart by sending a specially formed LLDP TLV, yielding a Denial of Servi...

CVE-2013-4687

CVE-2013-4687 affects Juniper Junos on SRX devices: the flowd daemon can crash when certain ALGs are enabled, triggered by crafted TCP packets. Affected versions are Junos 10.4 before 10.4S14, 11.2 and 11.4 before 11.4R6-S2, and 12.1 before 12.1R6. Impact is remote denial of service via daemon cr...

CVE-2013-4688

CVE-2013-4688 affects Juniper Junos SRX devices running 10.4 prior to 10.4R11, where the MSRPC Application Layer Gateway (ALG) is enabled. A remote, unauthenticated attacker can crash the process by sending crafted MSRPC requests, causing a denial of service (daemon crash). The issue is rooted in...

CVE-2016-1269

CVE-2016-1269 affects Juniper Networks Junos OS prior to various versions (e.g., 12.1X44-D60, 12.3R11, 16.1R1, etc.) and allows remote attackers to cause a denial of service via crafted TCP timestamps, leading to socket exhaustion. The vulnerability is documented with a high impact (CVSS v3 base ...

CVE-2016-4921

This CVE concerns a Denial of Service in Juniper Networks Junos OS when handling IPv6 traffic. The issue arises from IPv6 traffic destined to the router causing resource exhaustion and potentially a kernel panic; transit IPv6 traffic does not trigger the vulnerability, and devices not configured ...

CVE-2017-10611

CVE-2017-10611 describes a crash of the pfem process or FPC when extended statistics are enabled and interface statistics are fetched (e.g., SNMP GET), on specific Juniper platforms. Affected devices include EX2200, EX3300, XRE200 and MX Series routers with MPC7E/8E/9E PFEs, with extended-statist...

CVE-2018-0018

The CVE affects SRX Series devices running Junos OS where IDP policies are compiled. A crafted packet may bypass firewall rules during IDP policy compilation, causing information disclosure and potential control of the target or protected devices. Affected Junos OS releases are 12.1X46 before D60...

CVE-2019-0064

CVE-2019-0064 affects Juniper Networks Junos OS on SRX5000 Series devices. The issue arises when a crafted TCP packet is received that matches the configuration command set security zones security-zone tcp-rst, causing the flowd process to crash and restart, with potential extended DoS if a cont...

CVE-2020-1608

CVE-2020-1608 affects Juniper Networks Junos OS on MX Series in BBE configurations. Receipt of a specific MPLS or IPv6 packet on the core-facing interface may trigger a kernel crash (vmcore) and reboot, tied to processing for BBE clients. Affected Junos versions span multiple tracks: 17.2R2-S6 on...

CVE-2020-1657

Affected software: Juniper Junos OS on SRX Series. Vulnerable in the key-management-daemon (kmd) before established SA, allowing spoofed IPSec packets to disrupt IPSec setup and cause DoS. Affected releases include 12.3X48 (before 12.3X48-D90), 15.1X49 (before 15.1X49-D190), 17.4 (before 17.4R2-S...

CVE-2021-0268

CVE-2021-0268 concerns Juniper Networks Junos OS J-Web, due to an Improper Neutralization of CRLF Sequences in HTTP Headers (HTTP Response Splitting). The weakness can cause buffer overflows or segment faults and, per sources, may enable cross-site scripting (XSS) and cookie manipulation, with th...

CVE-2021-0295

The CVE-2021-0295 issue affects Juniper Networks Junos OS on QFX10K Series switches (e.g., QFX10002/10008/10016). It’s caused by DVMRP packets looping on a multi-homed ESI when VXLAN is configured, leading to a packet forwarding loop that triggers a partial DoS. Affected versions include multiple...

CVE-2021-31359

CVE-2021-31359 affects Juniper Networks Junos OS and Junos OS Evolved. The vulnerability is a local privilege escalation in the DHCP daemon (jdhcpd) that allows a low-privilege user to crash jdhcpd, causing DoS, or to execute arbitrary commands as root. The issue occurs when jdhcpd is running; af...

CVE-2022-22202

The CVE concerns Juniper Networks Junos OS on PTX Series (including PTX1000, PTX3000 NextGen, PTX5000, PTX10002-60C, PTX10008, PTX10016). It is an improper handling of exceptional conditions that allows an unauthenticated MPLS-based attacker to trigger a DoS by crashing the dcpfe process and rest...

CVE-2022-22236

The CVE-2022-22236 affects Juniper Junos OS on SRX/MX series, caused by an uninitialized pointer in the SIP Application Layer Gateway (ALG) that can crash the PFE and trigger DoS when specific SIP packets arrive. Affected versions include 20.4R3-S4 and earlier for 20.4, 21.1R3-S2 and earlier, 21....

CVE-2023-22415

CVE-2023-22415 is an out-of-bounds write in the H.323 ALG of Junos OS that causes the flowd daemon to crash and can lead to a DoS when specific H.323 packets are received concurrently on MX and SRX Series devices. Affected versions include Junos OS on MX/SRX prior to: 19.4R3-S10; 20.2R3-S6; 20.3R...

CVE-2023-44185

CVE-2023-44185 affects Juniper Junos OS and Junos OS Evolved. It is an Improper Input Validation in the routing protocol daemon (rpd) that allows an attacker to cause a Denial of Service by processing a specific malformed ISO VPN BGP UPDATE packet. Continued receipt yields a sustained DoS on the ...

CVE-2024-47506

CVE-2024-47506 describes a deadlock in Juniper Networks Junos OS on SRX Series. When ATP Cloud inspection processes large traffic, the packet forwarding engine (PFE) can enter a deadlock, causing a PFE crash and restart and enabling a network-based attacker to trigger a DoS. Affected versions are...

CVE-2025-21595

A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS and Junos OS Evolved can cause an FPC crash and DoS. In EVPN-VXLAN, receiving specific ARP (IPv4) or NDP (IPv6) packets triggers kernel heap memory leaks and event...

CVE-2025-52989

CVE-2025-52989 describes an Improper Neutralization of Delimiters vulnerability in the UI of Juniper Networks Junos OS and Junos OS Evolved. A local, authenticated attacker with high privileges can exploit a specially crafted annotate configuration command to modify any part of the device configu...

CVE-2026-33773

CVE-2026-33773 affects Junos OS on EX Series and QFX Series devices (specifically EX4100, EX4400, EX4650 and QFX5120). The issue is an Incorrect Initialization of Resource in the packet forwarding engine (pfe) where configuring the same family inet or inet6 filter as an egress filter on both an I...

CVE-2007-6372

Technical details for CVE-2007-6372 are not provided in the connected documents. Public information in the Initial Description is high-level. Monitor for updates from official advisories to obtain affected products, vectors, and fixes.

CVE-2013-4685

Juniper Junos OS contains a buffer overflow in flowd when processing HTTP messages (CVE-2013-4685). Affected are SRX devices with Captive Portal and UAC enforcer role across listed revisions: 10.4 before 10.4S14; 11.4 before 11.4R7; 12.1 before 12.1R6; and 12.1X44 before 12.1X44-D15. The vulnerab...

CVE-2013-6013

CVE-2013-6013 affects Juniper Junos flowd on SRX devices, where a buffer overflow in the flow daemon may allow remote code execution via a crafted Telnet message when telnet pass-through authentication is enabled. Affected versions include Junos 10.4 before 10.4S14, 11.4 before 11.4R7-S2, 12.1.X4...

CVE-2013-7313

CVE-2013-7313 affects the OSPF implementation in Juniper Junos (through 13.x, JunosE) and ScreenOS (through 6.3.x). The issue arises from not considering duplicate Link State ID values in Link State Advertisements (LSAs) when updating the LSA database, enabling remote attackers to cause routing d...

CVE-2014-3822

Summary: CVE-2014-3822 affects Juniper Junos SRX Series devices and relates to the IPv6-to-IPv4 translation path. The issue can be triggered by a malformed packet, causing a denial of service via the flowd process crash. Affected software/versions (as provided): Junos OS on SRX Series with 11.4 b...