Juniper Junos 18.3

Junos OS: Upon receipt of certain types of malformed PCEP packets the pccd process may crash.

SRX5000 Series: Denial of Service vulnerability in SSL-Proxy feature.

Junos OS: SRX Series: High CPU load due to processing for HTTP traffic when Application Identification is enabled.

Junos OS: jdhcpd process crash when processing a specific DHCPDv6 packet in DHCPv6 relay configuration.

Junos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC

Junos OS: MX Series, EX9200 Series: Trio-based MPC memory leak when Integrated Routing and Bridging (IRB) interface is mapped to a VPLS instance or a Bridge-Domain

Junos OS and Junos OS Evolved: RPD crash while processing a specially crafted BGP UPDATE or KEEPALIVE message.

Junos OS: MX Series: Receipt of specific packet on MS-MPC/MS-MIC causes line card reset

Junos OS and Junos OS Evolved: An attacker sending a specific crafted BGP update message will crash RPD

Junos OS: An attacker sending spoofed RADIUS messages to a Junos OS device configured for broadband services may cause broadband subscribers to remain stuck in a "Terminating" state.

Junos OS: SRX Series: Denial of service vulnerability in flowd daemon upon receipt of a specific fragmented packet

Junos OS: MX104 might become unresponsive if the out-of-band management port receives a flood of traffic

Junos OS: PTX Series, QFX10K Series: Upon receipt of specific packets BFD sessions might flap due to DDoS policer implementation in Packet Forwarding Engine

Junos OS: QFX5000 Series and EX4600 Series: Continuous traffic destined to a device configured with MC-LAG leading to nodes losing their control connection which can impact traffic

Junos OS: SRX Series: Memory leak when querying Aggregated Ethernet (AE) interface statistics

Junos OS and Junos OS Evolved: After receiving a specific number of crafted packets snmpd will segmentation fault (SIGSEGV) requiring a manual restart.

Junos OS: RPD crash while processing a specific BGP UPDATE when Multipath or add-path features are enabled

SRX Series and MX Series with SPC3: A high percentage of fragments might lead to high latency or packet drops

Junos OS: QFX5000 Series, EX4600: Device may run out of memory, causing traffic loss, upon receipt of specific IPv6 packets

Junos OS: SNMP fails to properly perform authorization checks on incoming received SNMP requests.

Junos OS: Cross-Site Scripting (XSS) in J-Web

Junos OS and Junos OS Evolved: Specific packets can trigger rpd crash when BGP Origin Validation is configured with RPKI

Junos OS and Junos OS Evolved: Malformed BGP flowspec update causes RPD crash

Junos OS: CRL failing to download causes a memory leak and ultimately a DoS

Junos OS: EX Series and QFX Series: Memory leak issue processing specific DHCP packets

Junos OS: Upon receipt of certain protocol packets with invalid payloads a self-propagating Denial of Service may occur.

Junos OS: A race condition in the storm control profile may allow an attacker to cause a Denial of Service condition

Junos OS: MX Series: Crafted packets traversing a Broadband Network Gateway (BNG) configured with IPv6 NDP proxy could lead to Denial of Service

Junos OS: Receipt of specific DHCPv6 packet may cause jdhcpd to crash and restart

Junos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash and restart.

Junos OS and Junos OS Evolved: QFX5K Series: Underlay network traffic might not be processed upon receipt of high rate of specific genuine overlay packets in VXLAN scenario

Junos OS: In a scenario with dhcp-security and option-82 configured jdhcpd crashes upon receipt of a malformed DHCP packet

Junos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series: In a multi-tenant environment, a tenant host administrator may configure logical firewall isolation affecting other tenant networks

Junos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3: In a multi-tenant environment, a tenant host administrator may be able to jailbreak out of their network impacting other tenant networks or gather information from other networks.

Junos OS: SRX Series: Unified Access Control (UAC) bypass vulnerability

Junos OS: Receipt of a specific BGP update may cause RPKI policy-checks to be bypassed

Junos OS: Command injection vulnerability in 'request system software' CLI command

Junos OS: 'set system ports console insecure' allows root password recovery on OAM volumes

Junos OS: Kernel panic upon receipt of specific TCPv6 packet on management interface

Junos OS: PKI key pairs are exported with insecure file permissions