Juniper Junos

Junos OS: SRX Series: Specifically malformed SSL packet causes FPC crash

Junos OS: SRX Series: A device configured for vector routing crashes when receiving malformed traffic

Junos OS: MX Series: In DS-lite and NAT scenario receipt of crafted IPv6 traffic causes port block

Junos OS: SRX Series: On devices with Anti-Virus enabled, malicious server responses will cause memory to leak ultimately causing forwarding to stop

Junos OS: SRX and MX Series: When TCP packets occur in a specific sequence flowd crashes

Junos OS: EX4000: A high volume of traffic destined to the device leads to a crash and restart

Junos OS: SRX4700: When forwarding-options sampling is enabled any traffic destined to the RE will cause the forwarding line card to crash and restart

Junos OS: An invalid certificate causes a Denial of Service in the Internet Key Exchange (IKE) process

Junos OS: SRX Series: A specifically malformed GTP message will cause an FPC crash

named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature record for a DNAME record, related to db.c and resolver.c.

Junos: SRX Series denial of service vulnerability in flowd due to crafted DHCP packet

Junos OS: Improper handling of specific IPv6 packets sent by clients eventually kernel crash (vmcore) the device.

Junos OS: BGP session termination upon receipt of specific BGP FlowSpec advertisement.

Junos OS: MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC: The BRAS Subscriber Services service activation portal is vulnerable to a Denial of Service (DoS) via malformed HTTP packets

Junos OS and Junos OS Evolved: Invalid BGP UPDATE sent to peer device may cause BGP session to terminate.

Junos OS: EX and QFX5K Series: Storm Control does not work as expected when Redundant Trunk Group is configured

Junos OS: EX4300-MP Series: IP transit traffic can reach the control plane via loopback interface.

Junos OS: After removing ssh public key authentication root can still log in

Juniper Junos 12.1X44 before 12.1.X44-D20 and 12.1X45 before 12.1X45-D15, when the no-validate option is enabled, does not properly handle configuration validation errors during the config commit phase of the boot-up sequence, which allows remote attackers to bypass authentication via unspecified vectors.

Junos OS: Low-privileged user can cause script to run as root, leading to privilege escalation

Junos OS and Junos OS Evolved: When an unsigned Python op script configuration is present, a local low privileged user can compromise the system

Junos OS and Junos OS Evolved: Execution of crafted CLI commands allows for arbitrary shell injection as root

Junos OS and Junos OS Evolved: Privilege escalation to root via CLI command 'request system logout'

Junos: Privilege escalation vulnerabilities in Junos CLI

vMX: Information leak vulnerability

Junos OS: An unauthenticated attacker with local access to the device can create a backdoor with root privileges

Junos OS: Privileged local user can gain access to a Linux-based FPC as root

Junos OS: MX Series: Services card might restart due to a race condition when DNS filtering is enabled.

Junos OS: MX Series: Services card might restart when DNS filtering is enabled

Junos OS: SRX Series: Insufficient certificate verification for device to SD cloud communication

MX series, SRX series: Junos OS: Denial of service vulnerability in Flowd on devices with ALG enabled.

Junos OS and Junos OS Evolved: When BGP traceoptions are configured, receipt of malformed BGP packets causes RPD to crash

Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP path attribute leads to an RPD crash

Junos OS: MX Series and EX9200-15C: Stack-based buffer overflow in aftman

Junos OS and Junos OS Evolved: The l2ald crashes on receiving telemetry messages from a specific subscription

Junos OS: Specific unknown traffic pattern causes FPC and system to crash when packet capturing is enabled

Junos OS and Junos OS Evolved: When a static route points to a reject next-hop and a gNMI query for this route is processed, RPD crashes

Junos OS: MX Series with SPC3, SRX Series: Specific packet in response to a TCP connection establishment by the affected device can crash the PFE

Junos OS: SRX Series: Flow sessions are not getting cleared leading to a DoS

Junos OS: MX Series: When specific SIP packets are processed the MS-MPC will crash