Vulnerabilities

Juniper Junos 21.4

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

238CVEs

CVE-2023-28976

Junos OS: MX Series: If a specific traffic rate goes above the DDoS threshold it will lead to an FPC crash

Published 2023-04-17 · Modified

7.5EPSS 0.006

CVE-2023-22411

Junos OS: SRX Series: The flow processing daemon (flowd) will crash when Unified Policies are used with IPv6 and certain dynamic applications are rejected by the device

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2023-22394

Junos OS: SRX Series and MX Series: Memory leak due to receipt of specially crafted SIP calls

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2023-22393

Junos OS and Junos OS Evolved: RPD crash upon receipt of BGP route with invalid next-hop

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2024-21611

Junos OS and Junos OS Evolved: In a jflow scenario continuous route churn will cause a memory leak and eventually an rpd crash

Published 2024-01-12 · Modified

7.5EPSS 0.006

CVE-2023-22396

Junos OS: Receipt of crafted TCP packets destined to the device results in MBUF leak leading to a Denial of Service (DoS)

Published 2023-01-12 · Modified

7.5EPSS 0.006

CVE-2024-21606

Junos OS: SRX Series: When "tcp-encap" is configured and specific packets are received flowd will crash

Published 2024-01-12 · Modified

7.5EPSS 0.006

CVE-2023-36843

Junos OS: SRX Series: The PFE will crash on receiving malformed SSL traffic when Sky ATP is enabled

Published 2023-10-12 · Modified

7.5EPSS 0.005

CVE-2023-44186

Junos OS and Junos OS Evolved: RPD crash when attempting to send a very long AS PATH to a non-4-byte-AS capable BGP neighbor

Published 2023-10-11 · Modified

7.5EPSS 0.005

CVE-2023-44199

Junos OS: MX Series: In a PTP scenario a prolonged routing protocol churn can trigger an FPC reboot

Published 2023-10-12 · Modified

7.5EPSS 0.005

CVE-2024-21595

Junos OS: EX4100, EX4400, EX4600, QFX5000 Series: A high rate of specific ICMP traffic will cause the PFE to hang

Published 2024-01-12 · Modified

7.5EPSS 0.005

CVE-2024-21616

Junos OS: MX Series and SRX Series: Processing of a specific SIP packet causes NAT IP allocation to fail

Published 2024-01-12 · Modified

7.5EPSS 0.005

CVE-2023-44181

Junos OS: QFX5k: l2 loop in the overlay impacts the stability in a EVPN/VXLAN environment

Published 2023-10-12 · Modified

7.5EPSS 0.005

CVE-2023-36841

Junos OS: MX Series: Receipt of malformed TCP traffic will cause a Denial of Service

Published 2023-10-12 · Modified

7.5EPSS 0.005

CVE-2023-44175

Junos OS and Junos OS Evolved: Receipt of a specific genuine PIM packet causes RPD crash

Published 2023-10-12 · Modified

7.5EPSS 0.005

CVE-2023-44185

Junos OS and Junos OS Evolved: In an BGP scenario RPD crashes upon receiving and processing a specific malformed ISO VPN BGP UPDATE packet

Published 2023-10-12 · Modified

7.5EPSS 0.005

CVE-2023-44191

Junos OS: QFX5000 Series and EX4000 Series: Denial of Service (DoS) on a large scale VLAN due to PFE hogging

Published 2023-10-12 · Modified

7.5EPSS 0.005

CVE-2023-44192

Junos OS: QFX5000 Series: DMA memory leak is observed when specific DHCP packets are transmitted over pseudo-VTEP

Published 2023-10-12 · Modified

7.5EPSS 0.005

CVE-2023-44197

Junos OS and Junos OS Evolved: An rpd crash may occur when BGP is processing newly learned routes

Published 2023-10-12 · Modified

7.5EPSS 0.005

CVE-2024-21586

Junos OS: SRX Series and NFX Series: Specific valid traffic leads to a PFE crash

Published 2024-07-01 · Analyzed

7.5EPSS 0.005

CVE-2023-22412

Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if the SIP ALG is enabled and specific SIP messages are processed

Published 2023-01-12 · Modified

7.5EPSS 0.005

CVE-2022-22218

Junos OS: SRX Series: Upon processing of a genuine packet the pkid process will crash during CMPv2 auto-re-enrollment

Published 2022-10-18 · Modified

7.5EPSS 0.004

CVE-2024-21597

Junos OS: MX Series: In an AF scenario traffic can bypass configured lo0 firewall filters

Published 2024-01-12 · Modified

7.5EPSS 0.004

CVE-2023-44198

Junos OS: SRX Series and MX Series: SIP ALG doesn't drop specifically malformed retransmitted SIP packets

Published 2023-10-12 · Modified

7.5EPSS 0.004

CVE-2023-28974

Junos OS: MX Series: In a BBE scenario upon receipt of specific malformed packets from subscribers the process bbe-smgd will crash

Published 2023-04-17 · Modified

7.4EPSS 0.003

CVE-2025-59960

Junos OS and Junos OS Evolved: DHCP Option 82 messages from clients being passed unmodified to the DHCP server

Published 2026-01-15 · Analyzed

7.4EPSS 0.003

CVE-2025-30648

Junos OS and Junos OS Evolved: Receipt of a specifically malformed DHCP packet causes jdhcpd process to crash

Published 2025-04-09 · Analyzed

7.4EPSS 0.002

CVE-2022-22186

Junos OS: EX4650 Series: Certain traffic received by the Junos OS device on the management interface may be forwarded to egress interfaces instead of discarded

Published 2022-04-14 · Modified

7.2EPSS 0.006

CVE-2024-47493

Junos OS: MX Series: Trio-based FPCs: Continuous physical Interface flaps causes local FPC to crash

Published 2024-10-11 · Analyzed

7.1EPSS 0.004

CVE-2024-39526

Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11/LC9600, MX304, EX9200, PTX Series: Receipt of malformed DHCP packets causes interfaces to stop processing packets

Published 2024-10-11 · Analyzed

7.1EPSS 0.004

CVE-2024-47503

Junos OS: SRX4600 and SRX5000 Series: Sequence of specific PIM packets causes a flowd crash

Published 2024-10-11 · Analyzed

7.1EPSS 0.003

CVE-2024-39543

Junos OS and Junos OS Evolved: Receipt of a large RPKI-RTR PDU packet can cause rpd to crash

Published 2024-07-11 · Analyzed

7.1EPSS 0.003

CVE-2024-39550

Junos OS: MX Series with SPC3 line card: Port flaps causes rtlogd memory leak leading to Denial of Service

Published 2024-07-11 · Modified

7.1EPSS 0.003

CVE-2024-30380

Junos OS and Junos OS Evolved: l2cpd crash upon receipt of a specific TLV

Published 2024-04-16 · Analyzed

7.1EPSS 0.003

CVE-2024-21618

Junos OS and Junos OS Evolved: When LLDP is enabled and a malformed LLDP packet is received, l2cpd crashes

Published 2024-04-12 · Analyzed

7.1EPSS 0.003

CVE-2024-21609

Junos OS: MX Series with SPC3, and SRX Series: If specific IPsec parameters are negotiated iked will crash due to a memory leak

Published 2024-04-12 · Analyzed

7.1EPSS 0.003

CVE-2024-21593

Junos OS: MX Series with MPC10, MPC11, LC9600, and MX304: A specific MPLS packet will cause a PFE crash

Published 2024-04-12 · Analyzed

7.1EPSS 0.003

CVE-2024-30388

Junos OS: QFX5000 Series and EX Series: Specific malformed LACP packets will cause flaps

Published 2024-04-12 · Analyzed

7.1EPSS 0.003

CVE-2025-52953

Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session reset

Published 2025-07-11 · Analyzed

7.1EPSS 0.003

CVE-2025-52949

Junos OS and Junos OS Evolved: In an EVPN environment, receipt of specifically malformed BGP update causes RPD crash

Published 2025-07-11 · Analyzed

7.1EPSS 0.003

Juniper Junos 21.4

Security check