Juniper Junos 18.3

utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.

Junos OS: SRX Series: A remote attacker may be able to cause a PFE buffer overflow to arbitrarily remotely execute code or commands on the target device with UTM enabled.

Junos OS: vMX: Default credentials supplied in vMX configuration

Junos OS and Junos OS Evolved: Upon receipt of a specific BGP FlowSpec message network traffic may be disrupted.

Junos OS: MX Series: Receipt of specific packets can cause services card to restart when DNS filtering is configured.

Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services

Junos OS: SRX Series: Double free vulnerability can lead to DoS or remote code execution due to the processing of a specific HTTP message when ICAP redirect service is enabled

Junos OS: Remote code execution vulnerability in overlayd service

Junos OS: SRX Series: processing a malformed HTTP message when ICAP redirect service is enabled may can lead to flowd process crash or remote code execution

Junos OS: Firewall filter terms named "internal-1" and "internal-2" being ignored

Junos OS: J-Web: Cross-site scripting attack allows an attacker to gain control of another users session.

Junos OS: J-Web has an Improper Neutralization of CRLF Sequences in its HTTP Headers which allows an attacker to carry out multiple types of attacks.

Junos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.

Junos OS: PTX1000 System, PTX10002-60C System: After upgrading, configured firewall filters may be applied on incorrect interfaces

Junos OS: Persistent XSS vulnerability in J-Web

Junos OS: Reflected Cross-site Scripting vulnerability in J-Web and web based (HTTP/HTTPS) services

Junos OS: J-Web: A path traversal vulnerability allows an authenticated attacker to elevate their privileges to root

Junos OS: When a DHCPv6 Relay-Agent is configured upon receipt of a specific DHCPv6 client message, Remote Code Execution may occur.

Junos OS: Session fixation vulnerability in J-Web

Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv6 packets and arbitrarily execute commands on the target device.

Junos OS: J-Web can be compromised through reflected client-side HTTP parameter pollution attacks.

Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv4 packets and arbitrarily execute commands on the target device.

Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv4 packets may take over the code execution of the JDHCPD process.

Junos OS: A XSS vulnerability allows an attacker to execute commands on a target J-Web session

Junos OS and Junos OS Evolved: In bidirectional LSP configurations, on MPLS egress router RPD may core upon receipt of specific malformed RSVP packet.

named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature record for a DNAME record, related to db.c and resolver.c.

Junos OS: Improper handling of specific IPv6 packets sent by clients eventually kernel crash (vmcore) the device.

Junos OS: MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC: The BRAS Subscriber Services service activation portal is vulnerable to a Denial of Service (DoS) via malformed HTTP packets

Junos OS and Junos OS Evolved: Invalid BGP UPDATE sent to peer device may cause BGP session to terminate.

Junos OS: EX and QFX5K Series: Storm Control does not work as expected when Redundant Trunk Group is configured

Junos OS: MX Series: Services card might restart due to a race condition when DNS filtering is enabled.

Junos OS: MX Series: Services card might restart when DNS filtering is enabled

Junos OS: Path traversal vulnerability in J-Web

Junos OS: SRX Series: Persistent XSS vulnerability in J-Web

Junos OS: Stored Cross-Site Scripting (XSS) vulnerability in captive portal

Junos OS: J-Web can be compromised through reflected XSS attacks

SRX Series: srxpfe process crash while JSF/UTM module parses specific HTTP packets

Junos OS: PTX1000 and PTX10000 Series, QFX10000 Series using non-AFT architectures: A specific genuine packet inspected by sFlow will cause a reboot.

Junos OS: MX Series: In BBE configurations, receipt of a specific MPLS or IPv6 packet causes a Denial of Service

Junos OS: EX2300 Series, EX3400 Series, and ACX710 might become unresponsive if the out-of-band management port receives a flood of traffic