Vulnerabilities

Juniper Junos 18.2

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

170CVEs

CVE-2021-0253

Junos OS: NFX Series: Local Command Execution Vulnerability in JDMD Leads to Privilege Escalation

Published 2021-04-22 · Modified

7.8EPSS 0.005

CVE-2021-0252

Junos OS: NFX Series: Local Code Execution Vulnerability in JDMD Leads to Privilege Escalation

Published 2021-04-22 · Modified

7.8EPSS 0.005

CVE-2020-1664

Junos OS: Buffer overflow vulnerability in device control daemon

Published 2020-10-16 · Modified

7.8EPSS 0.004

CVE-2021-0223

Junos OS: telnetd.real Local Privilege Escalation vulnerabilities in SUID binaries

Published 2021-01-15 · Modified

7.8EPSS 0.004

CVE-2019-0057

NFX Series: An attacker may be able to take control of the JDM application and subsequently the entire system.

Published 2019-10-09 · Modified

7.8EPSS 0.004

CVE-2019-0061

Junos OS: Insecure management daemon (MGD) configuration may allow local privilege escalation

Published 2019-10-09 · Modified

7.8EPSS 0.004

CVE-2021-0204

Junos OS: dexp Local Privilege Escalation vulnerabilities in SUID binaries

Published 2021-01-15 · Modified

7.8EPSS 0.003

CVE-2021-0245

Junos OS: Junos Fusion: Hard-coded credentials on satellite devices allows a locally authenticated attacker to elevate their privileges.

Published 2021-04-22 · Modified

7.8EPSS 0.002

CVE-2021-0255

Junos OS: ethtraceroute Local Privilege Escalation vulnerability in SUID binaries

Published 2021-04-22 · Modified

7.8EPSS 0.002

CVE-2019-0001

Junos OS: MX Series: uncontrolled recursion and crash in Broadband Edge subscriber management daemon (bbe-smgd).

Published 2019-01-15 · Modified

7.5EPSS 0.030

CVE-2018-0049

Junos OS: Receipt of a specifically crafted malicious MPLS packet leads to a Junos kernel crash.

Published 2018-10-10 · Modified

7.5EPSS 0.022

CVE-2019-0014

Junos OS: QFX and PTX Series: FPC process crashes after J-Flow processes a malformed packet

Published 2019-01-15 · Modified

7.5EPSS 0.017

CVE-2020-1653

Junos OS: Kernel crash (vmcore) or FPC crash due to mbuf leak

Published 2020-07-17 · Modified

7.5EPSS 0.016

CVE-2019-0049

Junos OS: RPD process crashes when BGP peer restarts

Published 2019-07-11 · Modified

7.5EPSS 0.015

CVE-2020-1640

Junos OS: Receipt of certain genuine BGP packets from any BGP Speaker causes RPD to crash.

Published 2020-07-17 · Modified

7.5EPSS 0.014

CVE-2019-0060

Junos OS: SRX Series: flowd process crash due to processing of specific transit IP packets

Published 2019-10-09 · Modified

7.5EPSS 0.013

CVE-2021-31379

Junos OS: MX Series: MPC 7/8/9/10/11 cards with MAP-E: PFE halts when an attacker sends malformed IPv4 or IPv6 traffic inside the MAP-E tunnel.

Published 2021-10-19 · Modified

7.5EPSS 0.013

CVE-2019-0056

Junos OS: MX Series: An MPC10 Denial of Service (DoS) due to OSPF states transitioning to Down, causes traffic to stop forwarding through the device.

Published 2019-10-09 · Modified

7.5EPSS 0.013

CVE-2020-1627

Junos OS: vMX and MX150: Denial of Service vulnerability in packet processing

Published 2020-04-08 · Modified

7.5EPSS 0.013

CVE-2021-0227

Junos OS: SRX Series: Denial of Service in J-Web upon receipt of crafted HTTP packets

Published 2021-04-22 · Modified

7.5EPSS 0.013

CVE-2019-0068

Junos OS: SRX Series: Denial of Service vulnerability in flowd due to multicast packets

Published 2019-10-09 · Modified

7.5EPSS 0.013

CVE-2019-0075

Junos OS: SRX Series: Denial of Service vulnerability in srxpfe related to PIM

Published 2019-10-09 · Modified

7.5EPSS 0.013

CVE-2020-1657

Junos OS: SRX Series: An attacker sending spoofed packets to IPSec peers may cause a Denial of Service.

Published 2020-10-16 · Modified

7.5EPSS 0.013

CVE-2020-1662

Junos OS and Junos OS Evolved: RPD crash due to BGP session flapping.

Published 2020-10-16 · Modified

7.5EPSS 0.013

CVE-2019-0063

Junos OS: MX Series: jdhcpd crash when receiving a specific crafted DHCP response message

Published 2019-10-09 · Modified

7.5EPSS 0.013

CVE-2019-0064

Junos OS: SRX5000 Series: flowd process crash due to receipt of specific TCP packet

Published 2019-10-09 · Modified

7.5EPSS 0.013

CVE-2019-0050

Junos OS: SRX1500: Denial of service due to crash of srxpfe process under heavy traffic conditions.

Published 2019-10-09 · Modified

7.5EPSS 0.013

CVE-2020-1644

Junos OS and Junos OS Evolved: RPD crash due to specific BGP UPDATE packets

Published 2020-07-17 · Modified

7.5EPSS 0.013

CVE-2020-1671

Junos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash.

Published 2020-10-16 · Modified

7.5EPSS 0.013

CVE-2019-0037

Junos OS: jdhcpd crash upon receipt of crafted DHCPv6 solicit message

Published 2019-04-10 · Modified

7.5EPSS 0.013

CVE-2019-0065

Junos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC

Published 2019-10-09 · Modified

7.5EPSS 0.013

CVE-2021-0207

NFX250, NFX350, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series: Certain genuine traffic received by the Junos OS device will be discarded instead of forwarded.

Published 2021-01-15 · Modified

7.5EPSS 0.013

CVE-2020-1679

Junos OS: PTX/QFX Series: Kernel Routing Table (KRT) queue stuck after packet sampling a malformed packet when the tunnel-observation mpls-over-udp configuration is enabled.

Published 2020-10-16 · Modified

7.5EPSS 0.012

CVE-2022-22159

Junos OS: An attacker sending crafted packets can cause a traffic and CPU Denial of Service (DoS).

Published 2022-01-19 · Modified

7.5EPSS 0.011

CVE-2021-0261

Junos OS: Denial of Service vulnerability in J-Web and web based (HTTP/HTTPS) services caused by a high number of specific requests

Published 2021-04-22 · Modified

7.5EPSS 0.011

CVE-2020-1649

Junos OS: MX Series: PFE crash on MPC7/8/9 upon receipt of small fragments requiring reassembly

Published 2020-07-17 · Modified

7.5EPSS 0.011

CVE-2020-1601

Junos OS: Upon receipt of certain types of malformed PCEP packets the pccd process may crash.

Published 2020-01-15 · Modified

7.5EPSS 0.011

CVE-2019-0051

SRX5000 Series: Denial of Service vulnerability in SSL-Proxy feature.

Published 2019-10-09 · Modified

7.5EPSS 0.011

CVE-2020-1684

Junos OS: SRX Series: High CPU load due to processing for HTTP traffic when Application Identification is enabled.

Published 2020-10-16 · Modified

7.5EPSS 0.011

CVE-2020-1650

Junos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC

Published 2020-07-17 · Modified

7.5EPSS 0.010

Juniper Junos 18.2

Security check