CVE-2013-6014

CVE-2013-6014 describes a vulnerability in Juniper Junos where, if Proxy ARP is enabled on an unnumbered interface, remote attackers can perform ARP poisoning to obtain sensitive information, with potential for information disclosure and DoS. Affected Junos versions include 10.4 before 10.4S15, 1...

CVE-2013-6618

CVE-2013-6618 affects Juniper Junos J-Web (Sajax) via jsdm/ajax/port.php. The root cause is a lack of input validation in the Sajax handle client request that processes the rsargs parameter in an exec action, enabling remote authenticated users to execute arbitrary commands with administrative pr...

CVE-2014-2712

The CVE-2014-2712 entry describes a cross-site scripting (XSS) in Juniper Junos J-Web that affects multiple Junos releases (e.g., before 10.0S25, 10.4 before 10.4R10, 11.4 before 11.4R11, 12.1 before 12.1R9, 12.2 before 12.2R1 and related 12.1X4x/12.1X46 lines) where J-Web’s index.php accepts uns...

CVE-2015-3002

CVE-2015-3002 describes a local security issue in Juniper Junos on SRX Series devices where the log-out-on-disconnect feature is not properly enforced when configured in the system port console stanza. The vulnerability enables a physically proximate attacker who has access to the console port to...

CVE-2017-2340

CVE-2017-2340 affects Juniper Networks Junos OS on M/MX platforms with Enhanced Subscriber Management for DHCPv6 enabled. A vulnerability in IPv6 Neighbor Discovery processing can cause the Packet Forwarding Engine (PFE) to hang or crash. Affected releases include Junos OS 15.1R3–15.1R4 and 16.1 ...

CVE-2018-0020

CVE-2018-0020 affects Junos OS where receipt of a malformed BGP UPDATE can cause the routing process daemon (rpd) to crash and restart. Repeated malformed updates may lead to an extended denial-of-service on the device, though the malformed update does not propagate to other BGP peers. Affected J...

CVE-2019-0002

CVE-2019-0002 affects Junos OS on the EX2300 and EX3400 series, where a stateless firewall filter rule that uses the action 'policer' in combination with other actions may not take effect. As a result, the command output of show pfe filter hw summary may not show the RACL entry. Affected releases...

CVE-2019-0005

CVE-2019-0005 affects Juniper Junos OS on EX and QFX series (EX2300/3400/4600; QFX3K/5K). The vulnerability is that firewall filter configuration cannot match IPv6 extension headers, potentially allowing IPv6 packets that should be blocked to be forwarded; IPv4 filtering is unaffected. Affected r...

CVE-2019-0039

CVE-2019-0039 affects Junos OS where REST API is enabled, enabling brute-force login attempts due to a high default connection limit. Publicly documented details list affected Junos OS versions (e.g., 14.1X53 before 14.1X53-D49; 15.1 family before various 15.x builds; up to 18.3R1-S1), with remed...

CVE-2019-0054

CVE-2019-0054 refers to an Improper Certificate Validation weakness in Juniper Networks Junos OS, specifically the SRX Series app-id signature update client. The vulnerability allows a remote attacker to perform a Man-in-the-Middle (MitM) attack, potentially compromising integrity and confidentia...

CVE-2020-1602

CVE-2020-1602 affects Juniper Networks Junos OS and Junos OS Evolved where JDHCPD (IPv4 relay mode) can be remotely exploited by crafted IPv4 packets to take over the JDHCPD process. Affected products include Junos OS releases listed as prior to the specified versions (e.g., 15.1, 15.1R7-S6; 16.1...

CVE-2020-1649

CVE-2020-1649 affects Juniper Junos OS on MX Series with MPC7/8/9 line cards when inline IP reassembly is enabled. Continuous receipt of small fragments that cannot be reassembled can disable the packet forwarding engine (PFE), causing a sustained DoS. Affected Junos OS versions are listed across...

CVE-2020-1654

CVE-2020-1654 affects Juniper Networks Junos OS on SRX Series when ICAP redirect service is enabled. A malformed HTTP message can cause DoS or RCE; continued processing may extend DoS. Affected releases include 18.1 before 18.1R3-S9; 18.2 before 18.2R2-S7 (and 18.2R3-S3); 18.3 before 18.3R1-S7, 1...

CVE-2020-1686

CVE-2020-1686 affects Junos OS where receipt of a malformed IPv6 packet can crash the system (vmcore) and restart, enabling an extended DoS when attacked via IPv6 to the Routing Engine. The issue is IPv6-specific; IPv4 packets are not affected. Affected Junos OS versions include 18.4R2-S4 and ear...

CVE-2021-0230

CVE-2021-0230 affects Juniper Networks Junos OS on SRX Series devices with link aggregation (lag). When performing operations that fetch AE interface statistics (e.g., SNMP GET), a slow kernel memory leak can consume memory, potentially impacting traffic and requiring a reboot. Affected versions ...

CVE-2021-0242

CVE-2021-0242 describes a DoS vulnerability in Juniper Junos OS on EX4300 switches where processing of DMA buffers can be exhausted by specific valid unicast frames received on an interface without L2PT or dot1x. Affected FPCs may crash and reboot as DMA buffers continually increase, with log ind...

CVE-2021-0244

CVE-2021-0244 describes a signal handler race condition in the Layer 2 Address Learning Daemon (L2ALD) of Juniper Networks Junos OS that may allow an attacker to bypass storm-control on devices. Affected software ranges across multiple Junos OS branches and versions, including EX Series, SRX Seri...

CVE-2022-22179

CVE-2022-22179 affects Juniper Networks Junos OS’s DHCP daemon (jdhcpd), caused by improper validation of input index/offset, leading to jdhcpd crash and DoS when a DHCPv4 packet with specific options is processed. Affected software ranges from Junos OS 17.4R1 onward to 21.3R1-S1/S2, with various...

CVE-2022-22204

CVE-2022-22204 affects Juniper Networks Junos OS on MX and SRX platforms when the SIP ALG is enabled. A memory release bug (improper release of memory before removing last reference) can cause a stale SIP entry to be created by certain SIP packets, and sustained traffic can exhaust the SIP call t...

CVE-2022-22231

The CVE-2022-22231 issue affects Juniper Junos OS (SRX Series) PFE where an unchecked return value to a NULL pointer dereference can crash the Packet Forwarding Engine, causing DoS. Affected: Junos OS 21.4 for SRX with UTM CF and AV enabled, specifically versions prior to 21.4R1-S2 and 21.4R2 on ...

CVE-2023-1697

The CVE-2023-1697 issue is an Improper Handling of Missing Values in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS . It causes a crash of the dcpfe process and a sustained Denial of Service (DoS) when a specific malformed ethernet frame is received. Affected products/versions in...

CVE-2023-36834

CVE-2023-36834 affects Juniper Networks Junos OS on SRX 4600 and SRX 5000 Series. In L2 transparent mode, receipt of a specific genuine packet can trigger a single PPE in the PFE to loop, rendering PPEs unavailable and causing DoS until an FPC restart. Affected versions include 20.1R1+ (up to 20....

CVE-2023-36838

CVE-2023-36838 affects Juniper Networks Junos OS on SRX Series, with an out-of-bounds read in the flow processing daemon (flowd) that a local, authenticated, low-privilege attacker can exploit by issuing a specific CLI command to crash flowd and cause a DoS. The vulnerability can produce a core d...

CVE-2023-36842

Junos OS vulnerability CVE-2023-36842 affects the DHCP daemon (jdhcpd). An improper check for unusual conditions allows an adjacent, unauthenticated attacker sending a specific DHCP packet to a non-configured interface (on devices with forward-snooped-client) to trigger an infinite loop, causing ...

CVE-2023-36850

CVE-2023-36850 describes an improper validation of index/position/offset in Juniper Networks Junos OS CFM that causes the MPC on MX Series to crash when malformed CFM packets are received, leading to a sustained DoS if CFM is not configured. Affected: Junos OS on MX Series (excluding MPC10, MPC11...

CVE-2023-44198

CVE-2023-44198 affects Juniper Networks Junos OS SIP ALG on SRX Series and MX Series. The vulnerability stems from an improper check for unusual or exceptional conditions, enabling an unauthenticated, network-based attacker to cause an integrity impact in connected networks. When SIP ALG is enabl...

CVE-2024-39540

The CVE-2024-39540 affects Juniper Junos OS on SRX Series and MX Series with SPC3. Root cause: improper check for unusual or exceptional conditions in the Packet Forwarding Engine (pfe). Impact: unauthenticated, network‑based attacker can cause a DoS by sending specific valid TCP traffic, causing...

CVE-2024-39560

Juniper Junos OS and Junos OS Evolved are affected by CVE-2024-39560 via the routing protocol daemon (rpd). The issue is an improper handling of exceptional conditions that lets a logically adjacent downstream RSVP neighbor induce kernel memory exhaustion and a DoS. Affected ranges include multip...

CVE-2025-21592

The CVE-2025-21592 entry describes an information-disclosure vulnerability in Juniper Networks Junos OS for SRX Series. A local, low-privilege user with CLI access can view contents of sensitive files by executing either show services advanced-anti-malware or show services security-intelligence, ...

CVE-2025-21595

A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS and Junos OS Evolved can cause an FPC crash and DoS. In EVPN-VXLAN, receiving specific ARP (IPv4) or NDP (IPv6) packets triggers kernel heap memory leaks and event...

CVE-2026-21905

CVE-2026-21905 affects Juniper Junos OS on SRX Series and MX Series with MX-SPC3 or MS-MPC. The vulnerability is a loop with an unreachable exit condition in the SIP application layer gateway (ALG) that can be triggered by processing multiple SIP messages over TCP. This causes the flow management...

CVE-2014-0612

CVE-2014-0612 affects Juniper Junos OS when Dynamic IPsec VPN is enabled. A DoS condition allows remote attackers to cause new Dynamic VPN connections to fail and to induce high CPU/disk usage. Affected Junos versions include 11.4R10-S1, 11.4R11, 12.1X44 pre-D26 and pre-D30, 12.1X45 pre-D20, and ...

CVE-2014-6447

CVE-2014-6447 affects Juniper Networks Junos J-Web error handling, causing potential XSS or J-Web DoS. Affected Junos OS versions include: 12.1X44 (before 12.1X44-D45), 12.1X46 (before 12.1X46-D30), 12.1X47 (before 12.1X47-D20), 12.3 (before 12.3R8), 12.3X48 (before 12.3X48-D10), 13.1 (before 13....

CVE-2015-7751

CVE-2015-7751 affects Juniper Junos OS prior to listed build revisions (various 12.x–15.x) where pam.conf corruption enables local users to gain root privileges. The connected docs confirm the root-privilege bypass is triggered by a corrupted pam.conf file, allowing unauthenticated or local privi...

CVE-2016-1262

CVE-2016-1262 affects Juniper Junos OS on SRX series devices when the Real Time Streaming Protocol Application Layer Gateway (RTSP ALG) is enabled. Affected versions include Junos OS before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.1X48 before 12.3X48-D20, and 15.1X49 before 15.1X49-D30. The is...

CVE-2016-1278

CVE-2016-1278 affects Juniper Junos OS on SRX Series devices. A failed upgrade to 12.1X46 can cause the device to revert to a safe mode with a flaw that allows root CLI logins without a password via the partition option of the upgrade, enabling local privilege escalation. Affected component is th...

CVE-2017-10601

CVE-2017-10601 affects Junos OS where a specific device configuration can cause a commit failure, enabling login without password during console/SSH/FTP/Telnet/Su attempts. Affected releases include Junos OS 12.3 prior to 12.3R10, 12.3R11; 12.3X48 prior to 12.3X48-D20; 13.2 prior to 13.2R8; 13.3 ...

CVE-2017-10603

The CVE describes an XML injection vulnerability in Junos OS CLI that can be exploited by a locally authenticated user to elevate privileges and execute commands as root. The issue stems from improper handling/validation of XML content received by the CLI, enabling arbitrary command execution wit...

CVE-2018-0003

CVE-2018-0003 covers a kernel crash/DoS in Junos OS caused by processing specially crafted MPLS packets on MPLS-configured interfaces. Affected are many Junos OS branches (e.g., 12.1X46 <12.1X46-D71; 12.3 <12.3R12-S7; 12.3X48 <12.3X48-D55; 14.1 <14.1R8-S5/14.1R9; 14.1X53 <14.1X53-D...

CVE-2018-0008

The CVE-2018-0008 entry describes an authentication bypass in Junos OS where an unauthenticated root login can occur after a reboot when a commit script is used. During normal commit, certain scripts may trigger a mode change on reboot that leaves the system in a safe-mode authentication state, a...

CVE-2018-15504

CVE-2018-15504 affects Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. The issue is a NULL pointer dereference caused by mishandling HTTP time-related request fields, demonstrated by If-Modified-Since or If-Unmodified-Since with a month value >11. This can lead to denial of service. Th...

CVE-2019-0012

CVE-2019-0012 describes a DoS in Juniper Junos OS for VPLS PE: processing a crafted BGP message crashes the rpd daemon, potentially causing extended DoS due to repeated restarts. Affected are PE routers with BGP Auto discovery for LDP VPLS. Vulnerable releases include multiple Junos OS versions l...

CVE-2019-0069

The CVE-2019-0069 issue affects Juniper Junos OS on multiple platforms (vSRX, SRX1500/4000, QFX5100/5200/10K, QFX5110, NFX, ACX5000, EX4600, SRX4000, etc.) running a Linux Host OS, where console management port authentication credentials are written to a log file in clear text. The vulnerability ...

CVE-2020-1605

CVE-2020-1605 affects Juniper Networks JDHCPD (relay mode) in Junos OS/Junos OS Evolved. A crafted IPv4 packet can cause arbitrary root command execution on the target via the JDHCPD process handling. Affected are IPv4 JDHCPD services; vulnerable versions include multiple releases listed (e.g., J...

CVE-2020-1629

CVE-2020-1629 describes a race-condition vulnerability in Juniper Networks Junos OS where the Routing Protocol Daemon (RPD) may crash and restart while processing a BGP NOTIFICATION message. Affected versions include Junos OS 16.1 prior to 16.1R7-S6; 16.2 prior to 16.2R2-S11; 17.1 prior to 17.1R2...

CVE-2020-1647

CVE-2020-1647 (Junos OS SRX ICAP redirect double-free) affects Juniper Networks SRX Series with ICAP redirect service enabled. A double-free vulnerability in the ICAP processing of a specific HTTP message can lead to a Denial of Service or Remote Code Execution . The offending HTTP message may or...

CVE-2020-1650

CVE-2020-1650 affects Juniper Networks Junos OS on MX Series using MS-PIC/MS-MIC/MS-MPC service cards. A stream of specific packets can crash the MS-PIC component, enabling a sustained Denial of Service on affected MX Series devices (versions listed in the description). The connected documents pr...

CVE-2021-0266

CVE-2021-0266 affects Juniper Networks Junos OS on cSRX Series. The root cause is the use of multiple hard-coded cryptographic keys in cSRX deployments, enabling an attacker to take control of any instance via device management services. Reported affected versions include all prior to 20.2R3, 20....

CVE-2021-0273

The CVE-2021-0273 issue affects Juniper Networks Junos OS and Junos OS Evolved on ACX5800, EX9200, MX10000, MX240, MX480, MX960 with Trio line cards. The root cause is an always-incorrect control flow in the implicit LT filter terms of the PFE UCODE, causing an infinite loop when processing certa...

CVE-2021-0299

This CVE (CVE-2021-0299) affects Juniper Networks Junos OS and is triggered by processing malformed IPv6 packets. A kernel crash occurs, restarting the device and causing a Denial of Service (DoS); sustained DoS can follow with continued malformed packets. Affected are IPv6-enabled devices runnin...