Vulnerabilities

Juniper Junos 21.1

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

161CVEs

CVE-2022-22186

Junos OS: EX4650 Series: Certain traffic received by the Junos OS device on the management interface may be forwarded to egress interfaces instead of discarded

Published 2022-04-14 · Modified

7.2EPSS 0.006

CVE-2021-31360

Junos OS and Junos OS Evolved: Denial of Service vulnerability in local file processing

Published 2021-10-19 · Modified

7.1EPSS 0.002

CVE-2024-30378

Junos OS: MX Series: bbe-smgd process crash upon execution of specific CLI commands

Published 2024-04-16 · Analyzed

6.9EPSS 0.002

CVE-2021-25220

DNS forwarders - cache poisoning vulnerability

Published 2022-03-23 · Modified

6.8EPSS 0.034

CVE-2023-28972

Junos OS: NFX Series: 'set system ports console insecure' allows root password recovery

Published 2023-04-17 · Modified

6.8EPSS 0.004

CVE-2023-22404

Junos OS: SRX Series and MX Series with SPC3: When IPsec VPN is configured iked will core when a specifically formatted payload is received

Published 2023-01-12 · Modified

6.5EPSS 0.006

CVE-2022-22215

Junos OS and Junos OS Evolved: /var/run/<pid>.env files are potentially not deleted during termination of a gRPC connection causing inode exhaustion

Published 2022-07-20 · Modified

6.5EPSS 0.006

CVE-2022-22202

Junos OS: PTX Series: FPCs may restart unexpectedly upon receipt of specific MPLS packets with certain multi-unit interface configurations

Published 2022-07-20 · Modified

6.5EPSS 0.005

CVE-2022-22249

Junos OS: MX Series: An FPC crash might be seen due to mac-moves within the same bridge domain

Published 2022-10-18 · Modified

6.5EPSS 0.005

CVE-2021-31370

Junos OS: QFX5000 Series and EX4600 Series: Control traffic might be dropped if a high rate of specific multicast traffic is received

Published 2021-10-19 · Modified

6.5EPSS 0.004

CVE-2021-31366

Junos OS: MX Series: In subscriber management / BBE configuration authd can crash if a subscriber with a specific username tries to login leading to a DoS

Published 2021-10-19 · Modified

6.5EPSS 0.004

CVE-2021-31367

Junos OS: PTX Series: An FPC heap memory leak will be triggered by certain Flowspec route operations which can lead to an FPC crash

Published 2021-10-19 · Modified

6.5EPSS 0.004

CVE-2022-22168

Junos OS: vMX and MX150: Specific packets might cause a memory leak and eventually an FPC reboot

Published 2022-01-19 · Modified

6.5EPSS 0.004

CVE-2022-22196

Junos OS and Junos OS Evolved: The rpd CPU spikes to 100% after a malformed ISIS TLV has been received

Published 2022-04-14 · Modified

6.5EPSS 0.004

CVE-2022-22179

Junos OS: jdhcpd crashes upon receiving a specific DHCP packet

Published 2022-01-19 · Modified

6.5EPSS 0.004

CVE-2022-22172

Junos OS and Junos OS Evolved: An l2cpd memory leak can occur when specific LLDP packets are received leading to a DoS

Published 2022-01-19 · Modified

6.5EPSS 0.004

CVE-2022-22191

Junos OS: EX4300: PFE Denial of Service (DoS) upon receipt of a flood of specific ARP traffic

Published 2022-04-14 · Modified

6.5EPSS 0.004

CVE-2022-22166

Junos OS: An rpd core will occur if BGP update tracing is configured and an update containing a malformed BGP SR-TE policy tunnel attribute is received

Published 2022-01-19 · Modified

6.5EPSS 0.004

CVE-2022-22160

Junos OS: MX Series: The bbe-smgd process crashes if an unsupported configuration exists and a PPPoE client sends a specific message

Published 2022-01-19 · Modified

6.5EPSS 0.004

CVE-2022-22217

Junos OS: QFX10K Series: Denial of Service (DoS) upon receipt of crafted MLD packets on multi-homing ESI in VXLAN

Published 2022-07-20 · Modified

6.5EPSS 0.003

CVE-2024-21600

Junos OS: PTX Series: In an FTI scenario MPLS packets hitting reject next-hop will cause a host path wedge condition

Published 2024-01-12 · Modified

6.5EPSS 0.003

CVE-2023-44183

Junos OS: QFX5000 Series, EX4600 Series: In a VxLAN scenario an adjacent attacker within the VxLAN sending genuine packets may cause a DMA memory leak to occur.

Published 2023-10-12 · Modified

6.5EPSS 0.003

CVE-2022-22214

Junos OS and Junos OS Evolved: In an MPLS scenario upon receipt of a specific IPv6 packet an FPC will crash

Published 2022-07-20 · Modified

6.5EPSS 0.003

CVE-2023-1697

Junos OS: QFX10000 Series, PTX1000 Series: The dcpfe process will crash when a malformed ethernet frame is received

Published 2023-04-17 · Modified

6.5EPSS 0.003

CVE-2022-22230

Junos OS and Junos OS Evolved: RPD crash upon receipt of specific OSPFv3 LSAs

Published 2022-10-18 · Modified

6.5EPSS 0.003

CVE-2022-22224

Junos OS and Junos OS Evolved: PPMD goes into infinite loop upon receipt of malformed OSPF TLV

Published 2022-10-18 · Modified

6.5EPSS 0.003

CVE-2022-22250

Junos OS and Junos OS Evolved: An FPC crash might be seen due to an EVPN MAC entry moving from local to remote

Published 2022-10-18 · Modified

6.5EPSS 0.003

CVE-2023-22405

Junos OS: QFX5k Series, EX46xx Series: MAC limiting feature stops working after PFE restart or device reboot

Published 2023-01-12 · Modified

6.5EPSS 0.003

CVE-2023-22406

Junos OS and Junos OS Evolved: A memory leak which will ultimately lead to an rpd crash will be observed when a peer interface flaps continuously in a Segment Routing scenario using OSPF

Published 2023-01-12 · Modified

6.5EPSS 0.003

CVE-2023-22414

Junos OS: PTX Series and QFX10000 Series: An FPC memory leak is observed when specific EVPN VXLAN Multicast packets are processed

Published 2023-01-12 · Modified

6.5EPSS 0.003

CVE-2023-28981

Junos OS and Junos OS Evolved: If malformed IPv6 router advertisements are received, memory corruption will occur which causes an rpd crash

Published 2023-04-17 · Modified

6.5EPSS 0.003

CVE-2023-28959

Junos OS: QFX10002: PFE wedges and restarts upon receipt of specific malformed packets

Published 2023-04-17 · Modified

6.5EPSS 0.003

CVE-2023-36834

Junos OS: SRX 4600 and SRX 5000 Series: The receipt of specific genuine packets by SRXes configured for L2 transparency will cause a DoS

Published 2023-07-14 · Modified

6.5EPSS 0.003

CVE-2023-36850

Junos OS: MX Series: An MPC will crash upon receipt of a malformed CFM packet.

Published 2023-07-14 · Modified

6.5EPSS 0.003

CVE-2023-36848

Junos OS: MX Series: The FPC will crash on receiving a malformed CFM packet

Published 2023-07-14 · Modified

6.5EPSS 0.003

CVE-2023-22395

Junos OS: In an MPLS scenario the processing of specific packets to the device causes a buffer leak and ultimately a loss of connectivity

Published 2023-01-12 · Modified

6.5EPSS 0.003

CVE-2022-22238

Junos OS and Junos OS Evolved: The rpd process will crash when a malformed incoming RESV message is processed

Published 2022-10-18 · Modified

6.5EPSS 0.003

CVE-2024-21599

Junos OS: MX Series: MPC3E memory leak with PTP configuration

Published 2024-01-12 · Modified

6.5EPSS 0.003

CVE-2023-22392

Junos OS: PTX Series and QFX10000 Series: Received flow-routes which aren't installed as the hardware doesn't support them, lead to an FPC heap memory leak

Published 2023-10-12 · Modified

6.5EPSS 0.003

CVE-2023-44203

Junos OS: QFX5000 Series, EX2300, EX3400, EX4100, EX4400 and EX4600: Packet flooding will occur when IGMP traffic is sent to an isolated VLAN

Published 2023-10-12 · Modified

6.5EPSS 0.003

Juniper Junos 21.1

Security check