Vulnerabilities

Juniper Junos 19.3

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

189CVEs

CVE-2020-1664

Junos OS: Buffer overflow vulnerability in device control daemon

Published 2020-10-16 · Modified

7.8EPSS 0.004

CVE-2021-0223

Junos OS: telnetd.real Local Privilege Escalation vulnerabilities in SUID binaries

Published 2021-01-15 · Modified

7.8EPSS 0.004

CVE-2021-0204

Junos OS: dexp Local Privilege Escalation vulnerabilities in SUID binaries

Published 2021-01-15 · Modified

7.8EPSS 0.003

CVE-2021-31359

Junos OS and Junos OS Evolved: Local Privilege Escalation vulnerability

Published 2021-10-19 · Modified

7.8EPSS 0.002

CVE-2022-22162

Junos OS: A low privileged user can elevate their privileges to the ones of the highest privileged j-web user logged in

Published 2022-01-19 · Modified

7.8EPSS 0.002

CVE-2021-0245

Junos OS: Junos Fusion: Hard-coded credentials on satellite devices allows a locally authenticated attacker to elevate their privileges.

Published 2021-04-22 · Modified

7.8EPSS 0.002

CVE-2022-22221

Junos OS: SRX and EX Series: Local privilege escalation flaw in "download" functionality

Published 2022-07-20 · Modified

7.8EPSS 0.002

CVE-2021-0255

Junos OS: ethtraceroute Local Privilege Escalation vulnerability in SUID binaries

Published 2021-04-22 · Modified

7.8EPSS 0.002

CVE-2020-1653

Junos OS: Kernel crash (vmcore) or FPC crash due to mbuf leak

Published 2020-07-17 · Modified

7.5EPSS 0.016

CVE-2020-1640

Junos OS: Receipt of certain genuine BGP packets from any BGP Speaker causes RPD to crash.

Published 2020-07-17 · Modified

7.5EPSS 0.014

CVE-2021-31379

Junos OS: MX Series: MPC 7/8/9/10/11 cards with MAP-E: PFE halts when an attacker sends malformed IPv4 or IPv6 traffic inside the MAP-E tunnel.

Published 2021-10-19 · Modified

7.5EPSS 0.013

CVE-2020-1638

Junos OS & Junos OS Evolved: A specific IPv4 packet can lead to FPC restart.

Published 2020-04-08 · Modified

7.5EPSS 0.013

CVE-2021-0227

Junos OS: SRX Series: Denial of Service in J-Web upon receipt of crafted HTTP packets

Published 2021-04-22 · Modified

7.5EPSS 0.013

CVE-2021-0206

Junos OS: NFX Series, SRX Series: PFE may crash upon receipt of specific packet when SSL Proxy is configured.

Published 2021-01-15 · Modified

7.5EPSS 0.013

CVE-2020-1662

Junos OS and Junos OS Evolved: RPD crash due to BGP session flapping.

Published 2020-10-16 · Modified

7.5EPSS 0.013

CVE-2020-1644

Junos OS and Junos OS Evolved: RPD crash due to specific BGP UPDATE packets

Published 2020-07-17 · Modified

7.5EPSS 0.013

CVE-2020-1671

Junos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash.

Published 2020-10-16 · Modified

7.5EPSS 0.013

CVE-2021-0207

NFX250, NFX350, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series: Certain genuine traffic received by the Junos OS device will be discarded instead of forwarded.

Published 2021-01-15 · Modified

7.5EPSS 0.013

CVE-2020-1679

Junos OS: PTX/QFX Series: Kernel Routing Table (KRT) queue stuck after packet sampling a malformed packet when the tunnel-observation mpls-over-udp configuration is enabled.

Published 2020-10-16 · Modified

7.5EPSS 0.012

CVE-2021-31353

Junos OS and Junos OS Evolved: RPD core upon receipt of specific BGP update

Published 2021-10-19 · Modified

7.5EPSS 0.012

CVE-2022-22197

Junos OS and Junos OS Evolved: An rpd core will be observed with proxy BGP route-target filtering enabled and certain route add and delete event happening

Published 2022-04-14 · Modified

7.5EPSS 0.011

CVE-2021-0261

Junos OS: Denial of Service vulnerability in J-Web and web based (HTTP/HTTPS) services caused by a high number of specific requests

Published 2021-04-22 · Modified

7.5EPSS 0.011

CVE-2020-1649

Junos OS: MX Series: PFE crash on MPC7/8/9 upon receipt of small fragments requiring reassembly

Published 2020-07-17 · Modified

7.5EPSS 0.011

CVE-2020-1684

Junos OS: SRX Series: High CPU load due to processing for HTTP traffic when Application Identification is enabled.

Published 2020-10-16 · Modified

7.5EPSS 0.011

CVE-2020-1672

Junos OS: jdhcpd process crash when processing a specific DHCPDv6 packet in DHCPv6 relay configuration.

Published 2020-10-16 · Modified

7.5EPSS 0.010

CVE-2020-1650

Junos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC

Published 2020-07-17 · Modified

7.5EPSS 0.010

CVE-2021-31374

Junos OS and Junos OS Evolved: RPD crash while processing a specially crafted BGP UPDATE or KEEPALIVE message.

Published 2021-10-19 · Modified

7.5EPSS 0.010

CVE-2021-31351

Junos OS: MX Series: Receipt of specific packet on MS-MPC/MS-MIC causes line card reset

Published 2021-10-19 · Modified

7.5EPSS 0.010

CVE-2021-31378

Junos OS: An attacker sending spoofed RADIUS messages to a Junos OS device configured for broadband services may cause broadband subscribers to remain stuck in a "Terminating" state.

Published 2021-10-19 · Modified

7.5EPSS 0.010

CVE-2021-31383

Junos OS and Junos OS Evolved: In Point to MultiPoint (P2MP) scenarios receipt of various crafted packets causes RPD to core.

Published 2021-10-19 · Modified

7.5EPSS 0.010

CVE-2021-0264

Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11, PTX10003, PTX10008: Line card may crash and restart when traffic is hitting a firewall filter having a term with syslog action configured

Published 2021-04-22 · Modified

7.5EPSS 0.010

CVE-2022-22185

Junos OS: SRX Series: Denial of service vulnerability in flowd daemon upon receipt of a specific fragmented packet

Published 2022-04-14 · Modified

7.5EPSS 0.010

CVE-2022-22161

Junos OS: MX104 might become unresponsive if the out-of-band management port receives a flood of traffic

Published 2022-01-19 · Modified

7.5EPSS 0.010

CVE-2021-0230

Junos OS: SRX Series: Memory leak when querying Aggregated Ethernet (AE) interface statistics

Published 2021-04-22 · Modified

7.5EPSS 0.010

CVE-2021-0285

Junos OS: QFX5000 Series and EX4600 Series: Continuous traffic destined to a device configured with MC-LAG leading to nodes losing their control connection which can impact traffic

Published 2021-07-15 · Modified

7.5EPSS 0.010

CVE-2021-0280

Junos OS: PTX Series, QFX10K Series: Upon receipt of specific packets BFD sessions might flap due to DDoS policer implementation in Packet Forwarding Engine

Published 2021-07-15 · Modified

7.5EPSS 0.010

CVE-2022-22177

Junos OS and Junos OS Evolved: After receiving a specific number of crafted packets snmpd will segmentation fault (SIGSEGV) requiring a manual restart.

Published 2022-01-19 · Modified

7.5EPSS 0.010

CVE-2022-22180

Junos OS: EX2300 Series, EX2300-MP Series, EX3400 Series: A slow memory leak due to processing of specific IPv6 packets

Published 2022-01-19 · Modified

7.5EPSS 0.009

CVE-2022-22174

Junos OS: QFX5000 Series, EX4600: Device may run out of memory, causing traffic loss, upon receipt of specific IPv6 packets

Published 2022-01-19 · Modified

7.5EPSS 0.009

CVE-2021-0260

Junos OS: SNMP fails to properly perform authorization checks on incoming received SNMP requests.