Vulnerabilities

Juniper Junos 20.4

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

208CVEs

CVE-2022-22185

Junos OS: SRX Series: Denial of service vulnerability in flowd daemon upon receipt of a specific fragmented packet

Published 2022-04-14 · Modified

7.5EPSS 0.010

CVE-2022-22161

Junos OS: MX104 might become unresponsive if the out-of-band management port receives a flood of traffic

Published 2022-01-19 · Modified

7.5EPSS 0.010

CVE-2021-0280

Junos OS: PTX Series, QFX10K Series: Upon receipt of specific packets BFD sessions might flap due to DDoS policer implementation in Packet Forwarding Engine

Published 2021-07-15 · Modified

7.5EPSS 0.010

CVE-2021-0285

Junos OS: QFX5000 Series and EX4600 Series: Continuous traffic destined to a device configured with MC-LAG leading to nodes losing their control connection which can impact traffic

Published 2021-07-15 · Modified

7.5EPSS 0.010

CVE-2022-22177

Junos OS and Junos OS Evolved: After receiving a specific number of crafted packets snmpd will segmentation fault (SIGSEGV) requiring a manual restart.

Published 2022-01-19 · Modified

7.5EPSS 0.010

CVE-2022-22178

Junos OS: MX and SRX series: Flowd core observed if the SIP ALG is enabled and a specific Session Initiation Protocol (SIP) packet is received

Published 2022-01-19 · Modified

7.5EPSS 0.009

CVE-2022-22170

Junos OS: Specific packets over VXLAN cause FPC memory leak and ultimately reset

Published 2022-01-19 · Modified

7.5EPSS 0.009

CVE-2022-22171

Junos OS: Specific packets over VXLAN cause FPC reset

Published 2022-01-19 · Modified

7.5EPSS 0.009

CVE-2022-22174

Junos OS: QFX5000 Series, EX4600: Device may run out of memory, causing traffic loss, upon receipt of specific IPv6 packets

Published 2022-01-19 · Modified

7.5EPSS 0.009

CVE-2022-22180

Junos OS: EX2300 Series, EX2300-MP Series, EX3400 Series: A slow memory leak due to processing of specific IPv6 packets

Published 2022-01-19 · Modified

7.5EPSS 0.009

CVE-2022-22198

Junos OS: MX MS-MPC or MS-MIC, or SRX SPC crashes if it receives a SIP message with a specific contact header format

Published 2022-04-14 · Modified

7.5EPSS 0.009

CVE-2024-21619

Junos OS: SRX Series and EX Series: J-Web - unauthenticated access to temporary files containing sensitive information

Published 2024-01-25 · Modified

7.5EPSS 0.009

CVE-2021-0281

Junos OS and Junos OS Evolved: Specific packets can trigger rpd crash when BGP Origin Validation is configured with RPKI

Published 2021-07-15 · Modified

7.5EPSS 0.008

CVE-2022-22223

Junos OS: QFX10000 Series: In IP/MPLS PHP node scenarios upon receipt of certain crafted packets multiple interfaces in LAG configurations may detach.

Published 2022-10-18 · Modified

7.5EPSS 0.008

CVE-2022-22206

Junos OS: SRX series: The PFE will crash when specific traffic is scanned by Enhanced Web Filtering safe-search

Published 2022-07-20 · Modified

7.5EPSS 0.008

CVE-2022-22205

Junos OS: SRX Series: An FPC memory leak can occur in an APBR scenario

Published 2022-07-20 · Modified

7.5EPSS 0.008

CVE-2023-22415

Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash when specific H.323 packets are received

Published 2023-01-12 · Modified

7.5EPSS 0.008

CVE-2022-22207

Junos OS: MX Series with MPC11: In a GNF / node slicing scenario gathering AF interface statistics can lead to a kernel crash

Published 2022-07-20 · Modified

7.5EPSS 0.008

CVE-2022-22175

Junos OS: MX Series and SRX Series: The flowd daemon will crash if the SIP ALG is enabled and specific SIP messages are processed

Published 2022-01-19 · Modified

7.5EPSS 0.007

CVE-2022-22201

SRX5000 Series with SPC3, SRX4000 Series, and vSRX: When PowerMode IPsec is configured, the PFE will crash upon receipt of a malformed ESP packet

Published 2022-10-18 · Modified

7.5EPSS 0.007

CVE-2022-22236

Junos OS: SRX Series and MX Series: When specific valid SIP packets are received the PFE will crash

Published 2022-10-18 · Modified

7.5EPSS 0.007

CVE-2023-22416

Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if SIP ALG is enabled and a malformed SIP packet is received

Published 2023-01-12 · Modified

7.5EPSS 0.007

CVE-2023-28982

Junos OS and Junos OS Evolved: In a BGP rib sharding scenario when a route is frequently updated an rpd memory leak will occur

Published 2023-04-17 · Modified

7.5EPSS 0.006

CVE-2023-0026

2023-06: Out-of-Cycle Security Bulletin: Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute

Published 2023-06-21 · Modified

7.5EPSS 0.006

CVE-2023-22403

Junos OS: QFX10K Series: An ICCP flap will be observed due to excessive specific traffic

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2023-22417

Junos OS: SRX Series: A memory leak might be observed in IPsec VPN scenario leading to an FPC crash

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2023-22413

Junos OS: MX Series: The Multiservices PIC Management Daemon (mspmand) will crash when an IPsec6 tunnel processes specific IPv4 packets

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2023-36832

Junos OS: MX Series: PFE crash upon receipt of specific packet destined to an AMS interface

Published 2023-07-14 · Modified

7.5EPSS 0.006

CVE-2023-36835

Junos OS: QFX10000 Series: All traffic will be dropped after a specific valid IP packet has been received which needs to be routed over a VXLAN tunnel

Published 2023-07-14 · Modified

7.5EPSS 0.006

CVE-2022-22235

Junos OS: SRX Series: A flowd core will be observed when malformed GPRS traffic is processed

Published 2022-10-18 · Modified

7.5EPSS 0.006

CVE-2023-22399

Junos OS: QFX10K Series: PFE crash upon receipt of specific genuine packets when sFlow is enabled

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2023-22408

Junos OS: SRX 5000 Series: Upon processing of a specific SIP packet an FPC can crash

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2023-28976

Junos OS: MX Series: If a specific traffic rate goes above the DDoS threshold it will lead to an FPC crash

Published 2023-04-17 · Modified

7.5EPSS 0.006

CVE-2023-28965

Junos OS: QFX10002: Failure of storm control feature may lead to Denial of Service

Published 2023-04-17 · Modified

7.5EPSS 0.006

CVE-2023-22391

Junos OS: ACX2K Series: Receipt of a high rate of specific traffic will lead to a Denial of Service (DoS)

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2023-22394

Junos OS: SRX Series and MX Series: Memory leak due to receipt of specially crafted SIP calls

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2023-22411

Junos OS: SRX Series: The flow processing daemon (flowd) will crash when Unified Policies are used with IPv6 and certain dynamic applications are rejected by the device

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2022-22173

Junos OS: CRL failing to download causes a memory leak and ultimately a DoS

Published 2022-01-19 · Modified

7.5EPSS 0.006

CVE-2023-22396

Junos OS: Receipt of crafted TCP packets destined to the device results in MBUF leak leading to a Denial of Service (DoS)

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2024-21606

Junos OS: SRX Series: When "tcp-encap" is configured and specific packets are received flowd will crash