Juniper Junos 18.2

Junos OS: jdhcpd process crash when processing a specific DHCPDv6 packet in DHCPv6 relay configuration.

Junos OS: MX Series, EX9200 Series: Trio-based MPC memory leak when Integrated Routing and Bridging (IRB) interface is mapped to a VPLS instance or a Bridge-Domain

Junos OS and Junos OS Evolved: RPD crash while processing a specially crafted BGP UPDATE or KEEPALIVE message.

Junos OS: MX Series: Receipt of specific packet on MS-MPC/MS-MIC causes line card reset

Junos OS and Junos OS Evolved: An attacker sending a specific crafted BGP update message will crash RPD

Junos OS: An attacker sending spoofed RADIUS messages to a Junos OS device configured for broadband services may cause broadband subscribers to remain stuck in a "Terminating" state.

Junos OS: SRX Series: Memory leak when querying Aggregated Ethernet (AE) interface statistics

Junos OS: PTX Series, QFX10K Series: Upon receipt of specific packets BFD sessions might flap due to DDoS policer implementation in Packet Forwarding Engine

Junos OS: RPD crash while processing a specific BGP UPDATE when Multipath or add-path features are enabled

SRX Series and MX Series with SPC3: A high percentage of fragments might lead to high latency or packet drops

Junos OS: SNMP fails to properly perform authorization checks on incoming received SNMP requests.

Junos OS: Cross-Site Scripting (XSS) in J-Web

Junos OS and Junos OS Evolved: Specific packets can trigger rpd crash when BGP Origin Validation is configured with RPKI

Junos OS and Junos OS Evolved: Malformed BGP flowspec update causes RPD crash

Junos OS: EX Series and QFX Series: Memory leak issue processing specific DHCP packets

Junos OS: Upon receipt of certain protocol packets with invalid payloads a self-propagating Denial of Service may occur.

Junos OS: A race condition in the storm control profile may allow an attacker to cause a Denial of Service condition

Junos OS: MX Series: Crafted packets traversing a Broadband Network Gateway (BNG) configured with IPv6 NDP proxy could lead to Denial of Service

Junos OS: Receipt of specific DHCPv6 packet may cause jdhcpd to crash and restart

Junos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash and restart.

Junos OS and Junos OS Evolved: QFX5K Series: Underlay network traffic might not be processed upon receipt of high rate of specific genuine overlay packets in VXLAN scenario

Junos OS: SRX Series: Unified Access Control (UAC) bypass vulnerability

Junos OS: Receipt of a specific BGP update may cause RPKI policy-checks to be bypassed

Junos OS: Command injection vulnerability in 'request system software' CLI command

Junos OS: 'set system ports console insecure' allows root password recovery on OAM volumes

Junos OS: Kernel panic upon receipt of specific TCPv6 packet on management interface

Junos OS: PKI key pairs are exported with insecure file permissions

Junos OS: EX and QFX Series: Console port authentication bypass vulnerability

named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.

Junos OS: A specific SNMP command can trigger a high CPU usage Denial of Service in the RPD daemon.

Junos OS: Privilege escalation in J-Web due to arbitrary command and code execution via information disclosure from another users active session

Junos OS: PTX Series, QFX Series: Due to a race condition input loopback firewall filters applied to interfaces may not operate even when listed in the running configuration.

Junos Fusion: A Satellite Device can be controlled by rewiring it to a foreign AD causing a DoS

Junos OS: QFX10K Series, EX9200 Series, MX Series, PTX Series: Privilege escalation vulnerability in NG-RE.

Junos OS: EX4300/EX4600/QFX3500/QFX5100 Series: Stateless IP firewall filter may fail to evaluate certain packets

Junos OS: Kernel memory leak in virtual-memory due to interface flaps

Junos OS: EX Series, QFX Series, SRX Branch Series, MX Series: Memory leak in packet forwarding engine due to 802.1X authenticator port interface flaps

SRX Series: Crafted packets destined to fxp0 management interface on SRX340/SRX345 devices can lead to DoS

Junos OS: EX4300 Series: Denial of Service upon receipt of large number of specific valid packets on management interface.

Junos OS: jdhcpd process crash during processing of specially crafted DHCPv6 message