CVE-2014-3815

CVE-2014-3815 affects Juniper Junos SRX Series devices, where SIP ALG processing allows remote attackers to crash the flowd daemon via a crafted SIP packet. Impact described as denial of service with affected versions: Junos 12.1X46 before 12.1X46-D20 and 12.1X47 before 12.1X47-D10. Public contex...

CVE-2017-10620

The CVE describes a vulnerability in Juniper Networks Junos OS on SRX series devices where the HTTPS server certificate is not verified before downloading antivirus updates. This allows a man-in-the-middle attacker to inject bogus signatures, potentially causing service disruption or failing to d...

CVE-2017-2315

The CVE-2017-2315 issue affects Juniper Networks EX Series switches running various Junos OS versions, where IPv6 Neighbor Discovery processing can be exploited by a specially crafted IPv6 NDP packet to trigger a slow memory leak and eventual resource exhaustion, leading to DoS. Affected Junos OS...

CVE-2017-2349

The CVE-2017-2349 entry describes a remote command injection in Juniper Junos OS SRX series IDP feature. Affected releases include Junos OS 12.1X44 (before 12.1X44-D60), 12.1X46 (before 12.1X46-D50), 12.1X47 (before 12.1X47-D30, D35), 12.3X48 (before 12.3X48-D20, D30), and 15.1X49 (before 15.1X49...

CVE-2018-0009

CVE-2018-0009 affects Juniper SRX devices running Junos OS where firewall rules matching custom application UUIDs that begin with zeros can match all TCP traffic, enabling a firewall bypass. Affected releases include Junos OS: 12.1X46 before D71, 12.3X48 before D55, and 15.1X49 before D100 on SRX...

CVE-2018-0027

The CVE-2018-0027 issue affects Juniper Networks Junos OS, where receiving a crafted or malformed RSVP PATH message can cause the routing protocol daemon (RPD) to hang or crash. This may prevent processing of routing updates when RPD is unavailable, potentially leading to an extended network outa...

CVE-2018-0045

CVE-2018-0045 describes a vulnerability in Juniper Networks Junos OS where receiving a specific Draft-Rosen MVPN control packet can crash and restart the RPD daemon, with potential remote code execution. Exploitation is possible from the PE device within the MPLS core; end users on CE cannot trig...

CVE-2019-0039

CVE-2019-0039 affects Junos OS where REST API is enabled, enabling brute-force login attempts due to a high default connection limit. Publicly documented details list affected Junos OS versions (e.g., 14.1X53 before 14.1X53-D49; 15.1 family before various 15.x builds; up to 18.3R1-S1), with remed...

CVE-2020-1601

Summary of CVE-2020-1601 (Junos OS pccd DoS) Affects Juniper Networks Junos OS running as Path Computation Client (PCC) in a PCEP environment. The issue is caused by insufficient input validation in Junos’ Path Computation Element Protocol daemon (pccd), allowing an attacker to send certain malfo...

CVE-2020-1602

CVE-2020-1602 affects Juniper Networks Junos OS and Junos OS Evolved where JDHCPD (IPv4 relay mode) can be remotely exploited by crafted IPv4 packets to take over the JDHCPD process. Affected products include Junos OS releases listed as prior to the specified versions (e.g., 15.1, 15.1R7-S6; 16.1...

CVE-2020-1618

CVE-2020-1618 affects Juniper Networks Junos OS on EX and QFX Series. The vulnerability is a console-port authentication bypass that can allow a user connected to the console port to login as root without a password. This may occur in specific scenarios: during the first reboot after a factory re...

CVE-2020-1665

Juniper Junos OS IPv6 DDoS protection can fail to activate under a threshold condition on MX Series and EX9200 Series with Trio-based PFEs. This may allow the Routing Engine (RE) and/or the Flexible PIC Concentrator (FPC) to become overwhelmed, potentially disrupting network protocol operations o...

CVE-2021-0275

The CVE-2021-0275 entry identifies a Cross-site Scripting (XSS) vulnerability in Juniper Networks Junos OS J-Web that can hijack another active user session and potentially grant full device control if the compromised user has root privileges. Affected are Junos OS versions across multiple series...

CVE-2021-31375

CVE-2021-31375 describes an Improp er Input Validation vulnerability in the routing process daemon (RPD) of Juniper Networks Junos OS . When devices are configured with BGP origin validation using RP KI (RPKI) , a crafted BGP update can bypass RPKI policy checks, enabling a spoofed advertisement ...

CVE-2021-31386

CVE-2021-31386 is a Protection Mechanism Failure in Juniper Networks Junos OS J-Web HTTP service. Multiple Junos releases are affected (12.3 before 12.3R12-S20; 15.1 before 15.1R7-S11; 18.3 before 18.3R3-S6; 18.4 before 18.4R3-S10; 19.1 before 19.1R3-S7; 19.2 before 19.2R3-S4; 19.3 before 19.3R3-...

CVE-2022-22219

Summary: CVE-2022-22219 affects Junos OS and Junos OS Evolved. The issue arises from improper handling of an unexpected data type while processing EVPN routes, triggering an RPD crash on BGP route reflectors in EVPN multicast environments when one or more BGP clients have leave-sync-route-oldstyl...

CVE-2023-36842

Junos OS vulnerability CVE-2023-36842 affects the DHCP daemon (jdhcpd). An improper check for unusual conditions allows an adjacent, unauthenticated attacker sending a specific DHCP packet to a non-configured interface (on devices with forward-snooped-client) to trigger an infinite loop, causing ...

CVE-2023-44177

CVE-2023-44177 affects Juniper Networks Junos OS and Junos OS Evolved. It is a stack-based buffer overflow in the CLI command processing that allows a low-privileged attacker to cause a Denial of Service by executing targeted CLI commands. Repeated actions can sustain DoS. Affected versions inclu...

CVE-2023-44185

CVE-2023-44185 affects Juniper Junos OS and Junos OS Evolved. It is an Improper Input Validation in the routing protocol daemon (rpd) that allows an attacker to cause a Denial of Service by processing a specific malformed ISO VPN BGP UPDATE packet. Continued receipt yields a sustained DoS on the ...

CVE-2023-44197

CVE-2023-44197 describes an Out-of-Bounds Write in Juniper’s Routing Protocol Daemon (rpd) that allows an unauthenticated, network-based attacker to cause a DoS by crashing the rpd while processing BGP route updates. Affected products are Junos OS and Junos OS Evolved. Supported versions include:...

CVE-2023-44201

Summary: CVE-2023-44201 affects Juniper Networks Junos OS and Junos OS Evolved. A local authenticated attacker can exploit an incorrect permission assignment for a critical resource to read configuration changes, potentially exposing password hashes during password changes. Affected products/vers...

CVE-2024-21611

CVE-2024-21611 affects Juniper Networks Junos OS and Junos OS Evolved. In a jflow scenario with continuous route churn, the Routing Protocol Daemon (rpd) may suffer a memory leak due to a missing release of memory after its lifetime, potentially causing an unauthenticated, network-based DoS via r...

CVE-2024-47497

CVE-2024-47497 affects Juniper Junos OS on SRX, QFX, MX and EX Series. The vulnerability is an Uncontrolled Resource Consumption in the httpd process when handling certain HTTPS requests, causing unauthenticated, network-based DoS via resource exhaustion and device restart. Affected versions incl...

CVE-2024-47503

CVE-2024-47503 affects Juniper Junos OS on SRX4600/SRX5000 series. An unauthenticated, logically adjacent attacker can trigger a DoS by sending a sequence of specific PIM packets, causing flowd to crash and restart in multicast scenarios. Affected versions are those listed as 'before' certain rel...

CVE-2025-30655

CVE-2025-30655 affects Juniper Networks Junos OS and Junos OS Evolved. The issue is in the Routing Protocol Daemon (rpd) and causes a local, low-privileged attacker to trigger a Denial-of-Service by running the CLI command "show bgp neighbor" when BGP RIB sharding and update-threading are enabled...

CVE-2013-6013

CVE-2013-6013 affects Juniper Junos flowd on SRX devices, where a buffer overflow in the flow daemon may allow remote code execution via a crafted Telnet message when telnet pass-through authentication is enabled. Affected versions include Junos 10.4 before 10.4S14, 11.4 before 11.4R7-S2, 12.1.X4...

CVE-2014-2712

The CVE-2014-2712 entry describes a cross-site scripting (XSS) in Juniper Junos J-Web that affects multiple Junos releases (e.g., before 10.0S25, 10.4 before 10.4R10, 11.4 before 11.4R11, 12.1 before 12.1R9, 12.2 before 12.2R1 and related 12.1X4x/12.1X46 lines) where J-Web’s index.php accepts uns...

CVE-2016-1278

CVE-2016-1278 affects Juniper Junos OS on SRX Series devices. A failed upgrade to 12.1X46 can cause the device to revert to a safe mode with a flaw that allows root CLI logins without a password via the partition option of the upgrade, enabling local privilege escalation. Affected component is th...

CVE-2018-15504

CVE-2018-15504 affects Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. The issue is a NULL pointer dereference caused by mishandling HTTP time-related request fields, demonstrated by If-Modified-Since or If-Unmodified-Since with a month value >11. This can lead to denial of service. Th...

CVE-2019-0002

CVE-2019-0002 affects Junos OS on the EX2300 and EX3400 series, where a stateless firewall filter rule that uses the action 'policer' in combination with other actions may not take effect. As a result, the command output of show pfe filter hw summary may not show the RACL entry. Affected releases...

CVE-2019-0054

CVE-2019-0054 refers to an Improper Certificate Validation weakness in Juniper Networks Junos OS, specifically the SRX Series app-id signature update client. The vulnerability allows a remote attacker to perform a Man-in-the-Middle (MitM) attack, potentially compromising integrity and confidentia...

CVE-2019-0073

CVE-2019-0073 describes a local vulnerability in Juniper Networks Junos OS where PKI keys exported via the command run request security pki key-pair export may have insecure file permissions. This could allow a local user with shell access to read those keys. Affected releases include Junos OS 15...

CVE-2020-1619

CVE-2020-1619 describes a local privilege-escalation in Juniper Junos OS NG-RE on QFX10K, EX9200, MX and PTX Series with vmhost. Affected software includes Junos OS releases up to the listed versions prior to 16.1R7-S6, 16.2R2-S11, 17.1R2-S11/17.1R3, 17.2R1-S9/17.2R3-S3, 17.3R2-S5/17.3R3-S7, 17.4...

CVE-2020-1686

CVE-2020-1686 affects Junos OS where receipt of a malformed IPv6 packet can crash the system (vmcore) and restart, enabling an extended DoS when attacked via IPv6 to the Routing Engine. The issue is IPv6-specific; IPv4 packets are not affected. Affected Junos OS versions include 18.4R2-S4 and ear...

CVE-2021-0224

CVE-2021-0224 affects Juniper Networks Junos OS and Junos OS Evolved, specifically the ANCPD (Access Node Control Protocol daemon) when handling a high volume of BRAS subscriber connections and the maximum-discovery-table-entries limit. The issue can cause ANCPD to crash and restart, leading to a...

CVE-2021-0242

CVE-2021-0242 describes a DoS vulnerability in Juniper Junos OS on EX4300 switches where processing of DMA buffers can be exhausted by specific valid unicast frames received on an interface without L2PT or dot1x. Affected FPCs may crash and reboot as DMA buffers continually increase, with log ind...

CVE-2021-31374

The CVE affects Juniper Networks Junos OS and Junos OS Evolved. Processing a specially crafted BGP UPDATE or KEEPALIVE message can crash the Routing Process Daemon (RPD) and trigger a Denial of Service (DoS) on both IBGP and EBGP over IPv4/IPv6. Affected versions include multiple releases across ...

CVE-2022-22179

CVE-2022-22179 affects Juniper Networks Junos OS’s DHCP daemon (jdhcpd), caused by improper validation of input index/offset, leading to jdhcpd crash and DoS when a DHCPv4 packet with specific options is processed. Affected software ranges from Junos OS 17.4R1 onward to 21.3R1-S1/S2, with various...

CVE-2022-22230

CVE-2022-22230 describes an Improper Input Validation in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. An adjacent, unauthenticated attacker can cause a Denial of Service by triggering rpd to crash when a router generates multiple specific OSPFv3 LSAs; affec...

CVE-2022-22231

The CVE-2022-22231 issue affects Juniper Junos OS (SRX Series) PFE where an unchecked return value to a NULL pointer dereference can crash the Packet Forwarding Engine, causing DoS. Affected: Junos OS 21.4 for SRX with UTM CF and AV enabled, specifically versions prior to 21.4R1-S2 and 21.4R2 on ...

CVE-2022-22236

The CVE-2022-22236 affects Juniper Junos OS on SRX/MX series, caused by an uninitialized pointer in the SIP Application Layer Gateway (ALG) that can crash the PFE and trigger DoS when specific SIP packets arrive. Affected versions include 20.4R3-S4 and earlier for 20.4, 21.1R3-S2 and earlier, 21....

CVE-2023-22393

CVE-2023-22393 affects Juniper Networks Junos OS and Junos OS Evolved. The issue is an improper check during BGP route processing that allows an attacker to trigger a crash of the Routing Protocol Daemon (RPD) by sending a BGP route with an invalid next-hop, causing a Denial of Service (DoS). The...

CVE-2023-22415

CVE-2023-22415 is an out-of-bounds write in the H.323 ALG of Junos OS that causes the flowd daemon to crash and can lead to a DoS when specific H.323 packets are received concurrently on MX and SRX Series devices. Affected versions include Junos OS on MX/SRX prior to: 19.4R3-S10; 20.2R3-S6; 20.3R...

CVE-2023-22416

CVE-2023-22416 : A buffer overflow in the SIP ALG flowd component of Juniper Networks Junos OS on MX and SRX Series enables network-based, unauthenticated DoS on receipt of a malformed SIP packet. Affected: Junos OS releases on MX/SRX with SIP ALG enabled (various 20.4, 21.x, 22.x train versions ...

CVE-2023-28959

The CVE-2023-28959 entry affects Juniper Networks Junos OS on QFX10002. The issue is an improper check/handling of exceptional conditions in packet processing, triggered by a specially malformed packet sent by an unauthenticated, adjacent attacker on the local broadcast domain. Exploitation wedge...

CVE-2023-36834

CVE-2023-36834 affects Juniper Networks Junos OS on SRX 4600 and SRX 5000 Series. In L2 transparent mode, receipt of a specific genuine packet can trigger a single PPE in the PFE to loop, rendering PPEs unavailable and causing DoS until an FPC restart. Affected versions include 20.1R1+ (up to 20....

CVE-2023-36850

CVE-2023-36850 describes an improper validation of index/position/offset in Juniper Networks Junos OS CFM that causes the MPC on MX Series to crash when malformed CFM packets are received, leading to a sustained DoS if CFM is not configured. Affected: Junos OS on MX Series (excluding MPC10, MPC11...

CVE-2023-44183

CVE-2023-44183 affects Junos OS on QFX5000 Series and EX4600 Series, due to improper input validation in the VxLAN packet forwarding engine (PFE). An unauthenticated, adjacent attacker can send two or more genuine packets in the same VxLAN topology to trigger a DMA memory leak, under various oper...

CVE-2023-44198

CVE-2023-44198 affects Juniper Networks Junos OS SIP ALG on SRX Series and MX Series. The vulnerability stems from an improper check for unusual or exceptional conditions, enabling an unauthenticated, network-based attacker to cause an integrity impact in connected networks. When SIP ALG is enabl...

CVE-2024-39518

CVE-2024-39518 affects Juniper Junos OS on MX240, MX480, and MX960 platforms using MPC10E. The vulnerability is a heap-based buffer overflow in the telemetry sensor process (sensord) that causes memory growth and eventually DoS when a Junos Telemetry Interface subscription is active. Affected ver...