Vulnerabilities

Juniper Junos 21.1

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

161CVEs

CVE-2022-22175

Junos OS: MX Series and SRX Series: The flowd daemon will crash if the SIP ALG is enabled and specific SIP messages are processed

Published 2022-01-19 · Modified

7.5EPSS 0.007

CVE-2022-22228

Junos OS: IPv6 OAM SRv6 network-enabled devices are vulnerable to Denial of Service (DoS) due to RPD memory leak upon receipt of specific a IPv6 packet

Published 2022-10-18 · Modified

7.5EPSS 0.007

CVE-2022-22201

SRX5000 Series with SPC3, SRX4000 Series, and vSRX: When PowerMode IPsec is configured, the PFE will crash upon receipt of a malformed ESP packet

Published 2022-10-18 · Modified

7.5EPSS 0.007

CVE-2022-22236

Junos OS: SRX Series and MX Series: When specific valid SIP packets are received the PFE will crash

Published 2022-10-18 · Modified

7.5EPSS 0.007

CVE-2023-22416

Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if SIP ALG is enabled and a malformed SIP packet is received

Published 2023-01-12 · Modified

7.5EPSS 0.007

CVE-2023-28982

Junos OS and Junos OS Evolved: In a BGP rib sharding scenario when a route is frequently updated an rpd memory leak will occur

Published 2023-04-17 · Modified

7.5EPSS 0.006

CVE-2023-0026

2023-06: Out-of-Cycle Security Bulletin: Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute

Published 2023-06-21 · Modified

7.5EPSS 0.006

CVE-2023-22417

Junos OS: SRX Series: A memory leak might be observed in IPsec VPN scenario leading to an FPC crash

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2023-22403

Junos OS: QFX10K Series: An ICCP flap will be observed due to excessive specific traffic

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2023-22413

Junos OS: MX Series: The Multiservices PIC Management Daemon (mspmand) will crash when an IPsec6 tunnel processes specific IPv4 packets

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2023-36832

Junos OS: MX Series: PFE crash upon receipt of specific packet destined to an AMS interface

Published 2023-07-14 · Modified

7.5EPSS 0.006

CVE-2023-36835

Junos OS: QFX10000 Series: All traffic will be dropped after a specific valid IP packet has been received which needs to be routed over a VXLAN tunnel

Published 2023-07-14 · Modified

7.5EPSS 0.006

CVE-2022-22235

Junos OS: SRX Series: A flowd core will be observed when malformed GPRS traffic is processed

Published 2022-10-18 · Modified

7.5EPSS 0.006

CVE-2023-22399

Junos OS: QFX10K Series: PFE crash upon receipt of specific genuine packets when sFlow is enabled

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2023-22408

Junos OS: SRX 5000 Series: Upon processing of a specific SIP packet an FPC can crash

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2023-28976

Junos OS: MX Series: If a specific traffic rate goes above the DDoS threshold it will lead to an FPC crash

Published 2023-04-17 · Modified

7.5EPSS 0.006

CVE-2023-28965

Junos OS: QFX10002: Failure of storm control feature may lead to Denial of Service

Published 2023-04-17 · Modified

7.5EPSS 0.006

CVE-2023-28967

Junos OS and Junos OS Evolved: An attacker sending genuine BGP packets causes an RPD crash

Published 2023-04-17 · Modified

7.5EPSS 0.006

CVE-2023-22391

Junos OS: ACX2K Series: Receipt of a high rate of specific traffic will lead to a Denial of Service (DoS)

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2023-22393

Junos OS and Junos OS Evolved: RPD crash upon receipt of BGP route with invalid next-hop

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2023-22411

Junos OS: SRX Series: The flow processing daemon (flowd) will crash when Unified Policies are used with IPv6 and certain dynamic applications are rejected by the device

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2023-22394

Junos OS: SRX Series and MX Series: Memory leak due to receipt of specially crafted SIP calls

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2022-22173

Junos OS: CRL failing to download causes a memory leak and ultimately a DoS

Published 2022-01-19 · Modified

7.5EPSS 0.006

CVE-2023-22396

Junos OS: Receipt of crafted TCP packets destined to the device results in MBUF leak leading to a Denial of Service (DoS)

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2023-36843

Junos OS: SRX Series: The PFE will crash on receiving malformed SSL traffic when Sky ATP is enabled

Published 2023-10-12 · Modified

7.5EPSS 0.005

CVE-2023-44199

Junos OS: MX Series: In a PTP scenario a prolonged routing protocol churn can trigger an FPC reboot

Published 2023-10-12 · Modified

7.5EPSS 0.005

CVE-2023-44186

Junos OS and Junos OS Evolved: RPD crash when attempting to send a very long AS PATH to a non-4-byte-AS capable BGP neighbor

Published 2023-10-11 · Modified

7.5EPSS 0.005

CVE-2023-44181

Junos OS: QFX5k: l2 loop in the overlay impacts the stability in a EVPN/VXLAN environment

Published 2023-10-12 · Modified

7.5EPSS 0.005

CVE-2023-44192

Junos OS: QFX5000 Series: DMA memory leak is observed when specific DHCP packets are transmitted over pseudo-VTEP

Published 2023-10-12 · Modified

7.5EPSS 0.005

CVE-2023-44197

Junos OS and Junos OS Evolved: An rpd crash may occur when BGP is processing newly learned routes

Published 2023-10-12 · Modified

7.5EPSS 0.005

CVE-2023-44185

Junos OS and Junos OS Evolved: In an BGP scenario RPD crashes upon receiving and processing a specific malformed ISO VPN BGP UPDATE packet

Published 2023-10-12 · Modified

7.5EPSS 0.005

CVE-2023-44191

Junos OS: QFX5000 Series and EX4000 Series: Denial of Service (DoS) on a large scale VLAN due to PFE hogging

Published 2023-10-12 · Modified

7.5EPSS 0.005

CVE-2023-36841

Junos OS: MX Series: Receipt of malformed TCP traffic will cause a Denial of Service

Published 2023-10-12 · Modified

7.5EPSS 0.005

CVE-2023-22412

Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if the SIP ALG is enabled and specific SIP messages are processed

Published 2023-01-12 · Modified

7.5EPSS 0.005

CVE-2022-22218

Junos OS: SRX Series: Upon processing of a genuine packet the pkid process will crash during CMPv2 auto-re-enrollment

Published 2022-10-18 · Modified

7.5EPSS 0.004

CVE-2023-44198

Junos OS: SRX Series and MX Series: SIP ALG doesn't drop specifically malformed retransmitted SIP packets

Published 2023-10-12 · Modified

7.5EPSS 0.004

CVE-2022-22156

Junos OS: Certificate validation is skipped when fetching system scripts from a HTTPS URL

Published 2022-01-19 · Modified

7.4EPSS 0.006

CVE-2022-22176

Junos OS: In a scenario with dhcp-security and option-82 configured jdhcpd crashes upon receipt of a malformed DHCP packet

Published 2022-01-19 · Modified

7.4EPSS 0.004

CVE-2022-22163

Junos OS: jdhcpd crashes upon receipt of a specific DHCPv6 packet

Published 2022-01-19 · Modified

7.4EPSS 0.004

CVE-2023-28974

Junos OS: MX Series: In a BBE scenario upon receipt of specific malformed packets from subscribers the process bbe-smgd will crash

Published 2023-04-17 · Modified

7.4EPSS 0.003

Juniper Junos 21.1

Security check