Juniper Junos 19.1

Junos OS: An attacker sending crafted packets can cause a traffic and CPU Denial of Service (DoS).

Junos OS: MX104 might become unresponsive if the out-of-band management port receives a flood of traffic

Junos OS: SRX Series: Denial of service vulnerability in flowd daemon upon receipt of a specific fragmented packet

Junos OS: SRX Series: Memory leak when querying Aggregated Ethernet (AE) interface statistics

Junos OS: PTX Series, QFX10K Series: Upon receipt of specific packets BFD sessions might flap due to DDoS policer implementation in Packet Forwarding Engine

Junos OS: QFX5000 Series and EX4600 Series: Continuous traffic destined to a device configured with MC-LAG leading to nodes losing their control connection which can impact traffic

Junos OS and Junos OS Evolved: After receiving a specific number of crafted packets snmpd will segmentation fault (SIGSEGV) requiring a manual restart.

Junos OS: RPD crash while processing a specific BGP UPDATE when Multipath or add-path features are enabled

Junos OS: EX2300 Series, EX2300-MP Series, EX3400 Series: A slow memory leak due to processing of specific IPv6 packets

Junos OS: QFX5000 Series, EX4600: Device may run out of memory, causing traffic loss, upon receipt of specific IPv6 packets

SRX Series and MX Series with SPC3: A high percentage of fragments might lead to high latency or packet drops

Junos OS: QFX10000 Series: In IP/MPLS PHP node scenarios upon receipt of certain crafted packets multiple interfaces in LAG configurations may detach.

Junos OS: SNMP fails to properly perform authorization checks on incoming received SNMP requests.

Junos OS: Cross-Site Scripting (XSS) in J-Web

Junos OS and Junos OS Evolved: Specific packets can trigger rpd crash when BGP Origin Validation is configured with RPKI

Junos OS and Junos OS Evolved: Malformed BGP flowspec update causes RPD crash

Junos OS: MX Series: PFE crash upon receipt of specific packet destined to an AMS interface

Junos OS: MX Series: If a specific traffic rate goes above the DDoS threshold it will lead to an FPC crash

Junos OS: CRL failing to download causes a memory leak and ultimately a DoS

Junos OS: Receipt of crafted TCP packets destined to the device results in MBUF leak leading to a Denial of Service (DoS)

Junos OS: SRX Series: Upon processing of a genuine packet the pkid process will crash during CMPv2 auto-re-enrollment

Junos OS: EX Series and QFX Series: Memory leak issue processing specific DHCP packets

Junos OS: Upon receipt of certain protocol packets with invalid payloads a self-propagating Denial of Service may occur.

Junos OS: A race condition in the storm control profile may allow an attacker to cause a Denial of Service condition

Junos OS: Certificate validation is skipped when fetching system scripts from a HTTPS URL

Junos OS: MX Series: Crafted packets traversing a Broadband Network Gateway (BNG) configured with IPv6 NDP proxy could lead to Denial of Service

Junos OS: Receipt of specific DHCPv6 packet may cause jdhcpd to crash and restart

Junos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash and restart.

Junos OS and Junos OS Evolved: QFX5K Series: Underlay network traffic might not be processed upon receipt of high rate of specific genuine overlay packets in VXLAN scenario

Junos OS: In a scenario with dhcp-security and option-82 configured jdhcpd crashes upon receipt of a malformed DHCP packet

Junos OS: jdhcpd crashes upon receipt of a specific DHCPv6 packet

Junos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series: In a multi-tenant environment, a tenant host administrator may configure logical firewall isolation affecting other tenant networks

Junos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3: In a multi-tenant environment, a tenant host administrator may be able to jailbreak out of their network impacting other tenant networks or gather information from other networks.

Junos OS: SRX Series: Unified Access Control (UAC) bypass vulnerability

Junos OS: Receipt of a specific BGP update may cause RPKI policy-checks to be bypassed

Junos OS: Command injection vulnerability in 'request system software' CLI command

Junos OS: EX4650 Series: Certain traffic received by the Junos OS device on the management interface may be forwarded to egress interfaces instead of discarded

Junos OS: Kernel panic upon receipt of specific TCPv6 packet on management interface

Junos OS and Junos OS Evolved: Denial of Service vulnerability in local file processing

Junos OS: A specific SNMP command can trigger a high CPU usage Denial of Service in the RPD daemon.