CVE-2018-0020

CVE-2018-0020 affects Junos OS where receipt of a malformed BGP UPDATE can cause the routing process daemon (rpd) to crash and restart. Repeated malformed updates may lead to an extended denial-of-service on the device, though the malformed update does not propagate to other BGP peers. Affected J...

CVE-2019-0009

Technical details about CVE-2019-0009 are not publicly available in the provided Connected documents. Monitor for updates from the sources referenced (e.g., Juniper JSA/JPD, CVE feeds) for new information or fixes.

CVE-2019-0015

Summary: CVE-2019-0015 affects Junos OS on SRX Series (multiple releases) where a token caching error allows deleted dynamic VPN users to establish connections until a reboot. Affected versions: SRX 12.3X48 before 12.3X48-D75; 15.1X49 before 15.1X49-D150; 17.3 before 17.3R3; 17.4 before 17.4R2; 1...

CVE-2021-0230

CVE-2021-0230 affects Juniper Networks Junos OS on SRX Series devices with link aggregation (lag). When performing operations that fetch AE interface statistics (e.g., SNMP GET), a slow kernel memory leak can consume memory, potentially impacting traffic and requiring a reboot. Affected versions ...

CVE-2021-0242

CVE-2021-0242 describes a DoS vulnerability in Juniper Junos OS on EX4300 switches where processing of DMA buffers can be exhausted by specific valid unicast frames received on an interface without L2PT or dot1x. Affected FPCs may crash and reboot as DMA buffers continually increase, with log ind...

CVE-2021-31375

CVE-2021-31375 describes an Improp er Input Validation vulnerability in the routing process daemon (RPD) of Juniper Networks Junos OS . When devices are configured with BGP origin validation using RP KI (RPKI) , a crafted BGP update can bypass RPKI policy checks, enabling a spoofed advertisement ...

CVE-2023-1697

The CVE-2023-1697 issue is an Improper Handling of Missing Values in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS . It causes a crash of the dcpfe process and a sustained Denial of Service (DoS) when a specific malformed ethernet frame is received. Affected products/versions in...

CVE-2023-28959

The CVE-2023-28959 entry affects Juniper Networks Junos OS on QFX10002. The issue is an improper check/handling of exceptional conditions in packet processing, triggered by a specially malformed packet sent by an unauthenticated, adjacent attacker on the local broadcast domain. Exploitation wedge...

CVE-2023-36834

CVE-2023-36834 affects Juniper Networks Junos OS on SRX 4600 and SRX 5000 Series. In L2 transparent mode, receipt of a specific genuine packet can trigger a single PPE in the PFE to loop, rendering PPEs unavailable and causing DoS until an FPC restart. Affected versions include 20.1R1+ (up to 20....

CVE-2023-44193

CVE-2023-44193 affects Juniper Networks Junos OS on MX Series hardware. The issue is an improper release of memory before removing the last reference in the Packet Forwarding Engine (PFE) that, when CFM is enabled in a VPLS scenario and a specific LDP-related command is executed, can cause an FPC...

CVE-2023-44198

CVE-2023-44198 affects Juniper Networks Junos OS SIP ALG on SRX Series and MX Series. The vulnerability stems from an improper check for unusual or exceptional conditions, enabling an unauthenticated, network-based attacker to cause an integrity impact in connected networks. When SIP ALG is enabl...

CVE-2024-39554

CVE-2024-39554 affects Juniper Networks Junos OS and Junos OS Evolved when BGP multipath is enabled. The vulnerability is in the Routing Protocol Daemon (rpd) caused by a race condition from concurrent execution using shared resources during the BGP multipath incremental calculation, which can al...

CVE-2024-47491

Summary: CVE-2024-47491 affects Juniper Networks Junos OS and Junos OS Evolved. A network-based, unauthenticated attacker can cause a DoS by sending a BGP UPDATE with a malformed path attribute to an established BGP session; the Routing Protocol Daemon (rpd) crashes and restarts, potentially lead...

CVE-2026-21905

CVE-2026-21905 affects Juniper Junos OS on SRX Series and MX Series with MX-SPC3 or MS-MPC. The vulnerability is a loop with an unreachable exit condition in the SIP application layer gateway (ALG) that can be triggered by processing multiple SIP messages over TCP. This causes the flow management...

CVE-2014-2712

The CVE-2014-2712 entry describes a cross-site scripting (XSS) in Juniper Junos J-Web that affects multiple Junos releases (e.g., before 10.0S25, 10.4 before 10.4R10, 11.4 before 11.4R11, 12.1 before 12.1R9, 12.2 before 12.2R1 and related 12.1X4x/12.1X46 lines) where J-Web’s index.php accepts uns...

CVE-2017-2315

The CVE-2017-2315 issue affects Juniper Networks EX Series switches running various Junos OS versions, where IPv6 Neighbor Discovery processing can be exploited by a specially crafted IPv6 NDP packet to trigger a slow memory leak and eventual resource exhaustion, leading to DoS. Affected Junos OS...

CVE-2018-0003

CVE-2018-0003 covers a kernel crash/DoS in Junos OS caused by processing specially crafted MPLS packets on MPLS-configured interfaces. Affected are many Junos OS branches (e.g., 12.1X46 <12.1X46-D71; 12.3 <12.3R12-S7; 12.3X48 <12.3X48-D55; 14.1 <14.1R8-S5/14.1R9; 14.1X53 <14.1X53-D...

CVE-2018-0022

CVE-2018-0022 documents a mbuf leak in Juniper Junos OS when VPLS routing-instances process specific MPLS packets, causing mbuf exhaustion and potential device inaccessibility requiring a restart. Affected are Junos OS with VPLS configured across multiple releases (list of versions in the CVE). T...

CVE-2018-0024

This CVE concerns an "Improper Privilege Management" flaw in a shell session of Juniper Networks Junos OS that allows an authenticated, unprivileged user to escalate to root. Affected releases include Junos OS on SRX Series (12.1X46 before 12.1X46-D45, 12.3X48 before 12.3X48-D20, 15.1X49 before 1...

CVE-2018-0054

CVE-2018-0054 affects Juniper Networks Junos OS on QFX5000 Series and EX4600 switches. A high rate of Ethernet pause frames or ARP storms on the management interface (fxp0) can cause egress congestion, leading to routing-protocol drops (e.g., BGP) and peering flaps. Affected releases include many...

CVE-2020-1619

CVE-2020-1619 describes a local privilege-escalation in Juniper Junos OS NG-RE on QFX10K, EX9200, MX and PTX Series with vmhost. Affected software includes Junos OS releases up to the listed versions prior to 16.1R7-S6, 16.2R2-S11, 17.1R2-S11/17.1R3, 17.2R1-S9/17.2R3-S3, 17.3R2-S5/17.3R3-S7, 17.4...

CVE-2020-1665

Juniper Junos OS IPv6 DDoS protection can fail to activate under a threshold condition on MX Series and EX9200 Series with Trio-based PFEs. This may allow the Routing Engine (RE) and/or the Flexible PIC Concentrator (FPC) to become overwhelmed, potentially disrupting network protocol operations o...

CVE-2023-44191

CVE-2023-44191 – Juniper Junos OS DoS on large VLAN deployments (QFX5000/EX4000) Root cause: An Allocation of Resources Without Limits or Throttling vulnerability in Junos OS allows an unauthenticated, network-based attacker to trigger Denial of Service via a specific DHCP packet when many VLANs ...

CVE-2024-47494

CVE-2024-47494 affects Juniper Networks Junos OS, specifically the AgentD process and related FPC handling. A TOCTOU race condition during telemetry polling can cause AgentD to reaping an already destroyed sensor, leading to memory corruption and a DoS when the FPC crashes. The FPC auto-recovers ...

CVE-2025-21592

The CVE-2025-21592 entry describes an information-disclosure vulnerability in Juniper Networks Junos OS for SRX Series. A local, low-privilege user with CLI access can view contents of sensitive files by executing either show services advanced-anti-malware or show services security-intelligence, ...

CVE-2025-21600

CVE-2025-21600 describes an Out-of-Bounds Read in Juniper’s routing protocol daemon (rpd) used by Junos OS and Junos OS Evolved. An unauthenticated, directly connected BGP peer sending a malformed BGP packet can crash and restart rpd, causing a DoS. Affected: iBGP/eBGP with any address family, fo...

CVE-2014-3816

CVE-2014-3816 covers Juniper Junos OS privilege-escalation where remote authenticated users can gain privileges via unspecified CLI command/argument combinations. Affected releases include multiple branches across 11.4, 12.x, 13.x, and 14.x, with versions listed in the initial description. The co...

CVE-2017-10603

The CVE describes an XML injection vulnerability in Junos OS CLI that can be exploited by a locally authenticated user to elevate privileges and execute commands as root. The issue stems from improper handling/validation of XML content received by the CLI, enabling arbitrary command execution wit...

CVE-2017-10610

CVE-2017-10610 affects Juniper Networks Junos OS on SRX Series. A crafted ICMP packet inside a NAT64 IPv6→IPv4 tunnel can crash the flowd process, causing extended denial of service if NAT64 is configured. Affected releases are Junos OS 12.1X46 before 12.1X46-D71, 12.3X48 before 12.3X48-D55, and ...

CVE-2017-10618

The CVE-2017-10618 issue affects Juniper Junos OS where enabling the bgp-error-tolerance feature can be abused by a BGP UPDATE containing specially crafted transitive attributes to cause the RPD routing process to crash and restart. Affected releases include numerous Junos versions across 13.3, 1...

CVE-2017-2340

CVE-2017-2340 affects Juniper Networks Junos OS on M/MX platforms with Enhanced Subscriber Management for DHCPv6 enabled. A vulnerability in IPv6 Neighbor Discovery processing can cause the Packet Forwarding Engine (PFE) to hang or crash. Affected releases include Junos OS 15.1R3–15.1R4 and 16.1 ...

CVE-2018-0008

The CVE-2018-0008 entry describes an authentication bypass in Junos OS where an unauthenticated root login can occur after a reboot when a commit script is used. During normal commit, certain scripts may trigger a mode change on reboot that leaves the system in a safe-mode authentication state, a...

CVE-2018-0027

The CVE-2018-0027 issue affects Juniper Networks Junos OS, where receiving a crafted or malformed RSVP PATH message can cause the routing protocol daemon (RPD) to hang or crash. This may prevent processing of routing updates when RPD is unavailable, potentially leading to an extended network outa...

CVE-2019-0073

CVE-2019-0073 describes a local vulnerability in Juniper Networks Junos OS where PKI keys exported via the command run request security pki key-pair export may have insecure file permissions. This could allow a local user with shell access to read those keys. Affected releases include Junos OS 15...

CVE-2020-1602

CVE-2020-1602 affects Juniper Networks Junos OS and Junos OS Evolved where JDHCPD (IPv4 relay mode) can be remotely exploited by crafted IPv4 packets to take over the JDHCPD process. Affected products include Junos OS releases listed as prior to the specified versions (e.g., 15.1, 15.1R7-S6; 16.1...

CVE-2020-1605

CVE-2020-1605 affects Juniper Networks JDHCPD (relay mode) in Junos OS/Junos OS Evolved. A crafted IPv4 packet can cause arbitrary root command execution on the target via the JDHCPD process handling. Affected are IPv4 JDHCPD services; vulnerable versions include multiple releases listed (e.g., J...

CVE-2020-1629

CVE-2020-1629 describes a race-condition vulnerability in Juniper Networks Junos OS where the Routing Protocol Daemon (RPD) may crash and restart while processing a BGP NOTIFICATION message. Affected versions include Junos OS 16.1 prior to 16.1R7-S6; 16.2 prior to 16.2R2-S11; 17.1 prior to 17.1R2...

CVE-2020-1639

Affected product: Juniper Networks Junos OS. Issue: processing of specially crafted Ethernet OAM packets causes the CFM daemon to overflow due to improper handling of malformed data, leading to a Denial of Service (DoS) by crashing the CFM process; continued packet receipt can extend the DoS. Aff...

CVE-2020-1654

CVE-2020-1654 affects Juniper Networks Junos OS on SRX Series when ICAP redirect service is enabled. A malformed HTTP message can cause DoS or RCE; continued processing may extend DoS. Affected releases include 18.1 before 18.1R3-S9; 18.2 before 18.2R2-S7 (and 18.2R3-S3); 18.3 before 18.3R1-S7, 1...

CVE-2020-1686

CVE-2020-1686 affects Junos OS where receipt of a malformed IPv6 packet can crash the system (vmcore) and restart, enabling an extended DoS when attacked via IPv6 to the Routing Engine. The issue is IPv6-specific; IPv4 packets are not affected. Affected Junos OS versions include 18.4R2-S4 and ear...

CVE-2021-0227

CVE-2021-0227 concerns a memory buffer bound-checking issue in Juniper Networks Junos OS J-Web on SRX Series devices that can enable a Denial of Service via crafted HTTP packets. Affected products include Junos OS on SRX Series with the listed version ranges (e.g., 17.3 before 17.3R3-S9; 17.4 bef...

CVE-2021-0246

CVE-2021-0246 affects Juniper Networks Junos OS on SRX1500/SRX4100/SRX4200/SRX4600/SRX5000 Series with SPC2/SPC3 in multi-tenant deployments. The root cause is incorrect default permissions assigned to tenant system administrators, which may allow a tenant to send their traffic to other tenants w...

CVE-2021-0299

This CVE (CVE-2021-0299) affects Juniper Networks Junos OS and is triggered by processing malformed IPv6 packets. A kernel crash occurs, restarting the device and causing a Denial of Service (DoS); sustained DoS can follow with continued malformed packets. Affected are IPv6-enabled devices runnin...

CVE-2021-31355

CVE-2021-31355 is a stored cross-site scripting (XSS) vulnerability in Juniper Networks Junos OS captive portal UI. A remote authenticated user can inject script/HTML to steal data from web admin sessions and possibly trick other admins into actions. Affected: Junos OS versions across multiple re...

CVE-2021-31372

CVE-2021-31372 affects Juniper Networks Junos OS J-Web; vulnerability is due to Improper Input Validation, allowing a locally authenticated J-Web user to escalate to root. Affected Junos OS versions range across 18.3R3-S5 and later 21.2R2, with various prior branch versions; the provided document...

CVE-2022-22232

CVE-2022-22232 describes a NULL Pointer Dereference in the Packet Forwarding Engine of Juniper Junos OS on SRX Series. When Unified Threat Management (UTM) Enhanced Content Filtering (CF) is enabled and certain transit traffic is processed, the PFE may crash and restart, causing a DoS. Affected v...

CVE-2023-44194

CVE-2023-44194 affects Juniper Networks Junos OS. The vulnerability is due to incorrect default permissions in a system directory, allowing an unauthenticated, locally-present attacker to create a backdoor with root privileges. Affected versions include all before 20.4R3-S5, 21.1 before 21.1R3-S4...

CVE-2023-44201

Summary: CVE-2023-44201 affects Juniper Networks Junos OS and Junos OS Evolved. A local authenticated attacker can exploit an incorrect permission assignment for a critical resource to read configuration changes, potentially exposing password hashes during password changes. Affected products/vers...

CVE-2024-39527

CVE-2024-39527 describes an exposure of sensitive information vulnerability in the CLI of Juniper Networks Junos OS on SRX Series devices. A local, low-privileged user with CLI access can view protected files on the file system through crafted CLI commands, enabling information disclosure as desc...

CVE-2024-39532

Summary: CVE-2024-39532 affects Juniper Networks Junos OS and Junos OS Evolved. Local, authenticated attackers with high privileges can access sensitive information stored in a log file when a specific operation is performed, due to insertion of sensitive information into the log. Affected versio...