Juniper Junos

Junos OS and Junos OS Evolved: The rpd process will crash when a malformed incoming RESV message is processed

Junos OS: MX Series: MPC3E memory leak with PTP configuration

Junos OS: jdhcpd will hang on receiving a specific DHCP packet

Junos OS: BGP flap on NSR-enabled devices causes memory leak

Junos OS: PTX Series and QFX10000 Series: Received flow-routes which aren't installed as the hardware doesn't support them, lead to an FPC heap memory leak

Junos OS: MX Series: Memory leak in bbe-smgd process if BFD liveness detection for DHCP subscribers is enabled

Junos OS and Junos OS Evolved: A link flap causes patroot memory leak which leads to rpd crash

Junos OS: QFX5000 Series, EX2300, EX3400, EX4100, EX4400 and EX4600: Packet flooding will occur when IGMP traffic is sent to an isolated VLAN

Junos OS and Junos OS Evolved: An l2cpd crash will occur when specific LLDP packets are received

Junos OS and Junos OS Evolved: The rpd will crash upon receiving a malformed BGP UPDATE message

Junos OS: User-defined ARP Policer isn't applied on Aggregated Ethernet (AE) interface until firewall process is restarted

Junos OS and Junos OS Evolved: LSP flap in a specific MPLS scenario leads to rpd crash

Junos OS: MX Series with SPC3, and SRX Series: When IPsec authentication is configured with "hmac-sha-384" and "hmac-sha-512" no authentication of traffic is performed

Junos OS: NFX350: Password hashes stored in world-readable format

Junos OS and Junos OS Evolved: Confidential information in logs can be accessed by another user

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.

jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.

Junos OS: Cross-site Scripting (XSS) vulnerability in J-Web

Junos OS: QFX10K Series: Denial of Service (DoS) upon receipt of DVMRP packets received on multi-homing ESI in VXLAN.

Juniper Junos 11.4 before 11.4R13, 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D15, 12.2 before 12.2R9, 12.3R7 before 12.3R7-S1, 12.3 before 12.3R8, 13.1 before 13.1R5, 13.2 before 13.2R6, 13.3 before 13.3R4, 14.1 before 14.1R2, and 14.2 before 14.2R1 allows remote attackers to cause a denial of service (kernel crash and restart) via a crafted fragmented OSPFv3 packet with an IPsec Authentication Header (AH).

Junos OS and Junos OS Evolved: Concurrent deletion of a routing-instance and receipt of an SNMP request cause an RPD crash

Junos OS and Junos OS Evolved: When BGP rib-sharding and update-threading are configured and a peer flaps, an rpd core is observed

Junos OS and Junos OS Evolved: Flaps of BFD sessions with authentication cause a ppmd memory leak

Junos OS: MX Series: Continuous subscriber logins will lead to a memory leak and eventually an FPC crash

Junos OS and Junos OS Evolved: When route validation is enabled, BGP connection establishment failure causes RPD crash

Junos OS and Junos OS Evolved: With BGP sharding enabled, change in indirect next-hop can cause RPD crash

Junos OS: A malicious crafted IPv6 DHCP packet may cause the JDHCPD daemon to core

Juniper Junos OS before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.1X48 before 12.3X48-D20, and 15.1X49 before 15.1X49-D30 on SRX series devices, when the Real Time Streaming Protocol Application Layer Gateway (RTSP ALG) is enabled, allow remote attackers to cause a denial of service (flowd crash) via a crafted RTSP packet.

The Routing Engine in Juniper Junos OS 13.2R5 through 13.2R8, 13.3R1 before 13.3R8, 13.3R7 before 13.3R7-S3, 14.1R1 before 14.1R6, 14.1R3 before 14.1R3-S9, 14.1R4 before 14.1R4-S7, 14.1X51 before 14.1X51-D65, 14.1X53 before 14.1X53-D12, 14.1X53 before 14.1X53-D28, 14.1X53 before 4.1X53-D35, 14.2R1 before 14.2R5, 14.2R3 before 14.2R3-S4, 14.2R4 before 14.2R4-S1, 15.1 before 15.1R3, 15.1F2 before 15.1F2-S2, and 15.1X49 before 15.1X49-D40, when LDP is enabled, allows remote attackers to cause a denial of service (RPD routing process crash) via a crafted LDP packet.

Junos: RPD core due to BGP UPDATE with malformed optional transitive attributes

Junos: Denial of service vulnerability in SNMP MIB-II subagent daemon (mib2d).

SRX Series: Firewall bypass vulnerability when UUID with leading zeros is configured.

Junos OS: Receipt of specially crafted UDP packets over MPLS may bypass stateless IP firewall rules

MS-MPC or MS-MIC crash when passing large fragmented traffic through an ALG

Junos OS: Invalid IP/mask learned from DHCP server might cause device control daemon (dcd) process crash

Junos OS: PTX Series: Denial of Service in packet processing due to heavy route churn when J-Flow sampling is enabled

Junos OS and Junos OS Evolved: OSPFv3 session might go into INIT state upon receipt of multiple crafted packets from a trusted neighbor device.

Junos OS: When using J-Web with HTTP an attacker may retrieve encryption keys via Person-in-the-Middle attacks.

Junos OS and Junos OS Evolved: Denial of Service (DoS) vulnerability in RPD upon receipt of specific BGP update