Vulnerabilities

Juniper Junos 18.2

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

170CVEs

CVE-2020-1670

Junos OS: EX4300 Series: High CPU load due to receipt of specific IPv4 packets

Published 2020-10-16 · Modified

6.5EPSS 0.005

CVE-2020-1668

Junos OS: EX2300 Series: High CPU load due to receipt of specific multicast packets on layer 2 interface

Published 2020-10-16 · Modified

6.5EPSS 0.005

CVE-2021-0221

Junos OS: QFX Series: Traffic loop Denial of Service (DoS) upon receipt of specific IP multicast traffic

Published 2021-01-15 · Modified

6.5EPSS 0.005

CVE-2020-1689

Junos OS: EX4300-MP/EX4600/QFX5K Series: High CPU load due to receipt of specific layer 2 frames when deployed in a Virtual Chassis configuration

Published 2020-10-16 · Modified

6.5EPSS 0.005

CVE-2020-1687

Junos OS: EX4300-MP/EX4600/QFX5K Series: High CPU load due to receipt of specific layer 2 frames in EVPN-VXLAN deployment.

Published 2020-10-16 · Modified

6.5EPSS 0.005

CVE-2021-0214

Junos OS: Denial of Service in ppmd upon receipt of malformed packet

Published 2021-04-22 · Modified

6.5EPSS 0.005

CVE-2021-0272

Junos OS: QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016: In EVPN-VXLAN scenarios receipt of specific genuine packets by an adjacent attacker will cause a kernel memory leak in FPC.

Published 2021-04-22 · Modified

6.5EPSS 0.004

CVE-2021-31362

Junos OS and Junos OS Evolved: An IS-IS adjacency might be taken down if a bad hello PDU is received for an existing adjacency causing a DoS

Published 2021-10-19 · Modified

6.5EPSS 0.004

CVE-2021-31366

Junos OS: MX Series: In subscriber management / BBE configuration authd can crash if a subscriber with a specific username tries to login leading to a DoS

Published 2021-10-19 · Modified

6.5EPSS 0.004

CVE-2021-0257

Junos OS: MX Series, EX9200 Series: Trio-based MPCs memory leak in VPLS with integrated routing and bridging (IRB) interface

Published 2021-04-22 · Modified

6.5EPSS 0.004

CVE-2021-0216

Junos OS: ACX5448, ACX710: BFD sessions might flap due to high rate of transit ARP packets

Published 2021-04-22 · Modified

6.5EPSS 0.004

CVE-2021-0228

Junos OS: MX Series: DDoS LACP violation upon receipt of specific layer 2 frames in EVPN-VXLAN deployment

Published 2021-04-22 · Modified

6.5EPSS 0.004

CVE-2021-0242

Junos OS: EX4300: FPC crash upon receipt of specific frames on an interface without L2PT or dot1x configured

Published 2021-04-22 · Modified

6.5EPSS 0.004

CVE-2021-31365

Junos OS: EX2300, EX3400 and EX4300 Series: An Aggregated Ethernet (AE) interface will go down due to a stream of specific layer 2 frames

Published 2021-10-19 · Modified

6.5EPSS 0.004

CVE-2020-1641

Junos OS: A race condition on receipt of crafted LLDP packets leads to a memory leak and an LLDP crash.

Published 2020-07-17 · Modified

6.5EPSS 0.004

CVE-2021-0288

Junos OS: MX Series, EX9200 Series: FPC may crash upon receipt of specific MPLS packet affecting Trio-based MPCs

Published 2021-07-15 · Modified

6.5EPSS 0.004

CVE-2021-0290

Junos OS: MX Series, EX9200 Series, SRX4600: Ethernet interface vulnerable to specially crafted frames

Published 2021-07-15 · Modified

6.5EPSS 0.004

CVE-2021-0224

Junos OS: ANCPD core when hitting maximum-discovery-table-entries limit

Published 2021-04-22 · Modified

6.5EPSS 0.004

CVE-2021-0237

Junos OS: EX4300-MP/EX4600/EX4650/QFX5K Series: Packet Forwarding Engine manager (FXPC) process crashes when deployed in a Virtual Chassis (VC) configuration

Published 2021-04-22 · Modified

6.5EPSS 0.004

CVE-2022-22179

Junos OS: jdhcpd crashes upon receiving a specific DHCP packet

Published 2022-01-19 · Modified

6.5EPSS 0.004

CVE-2022-22160

Junos OS: MX Series: The bbe-smgd process crashes if an unsupported configuration exists and a PPPoE client sends a specific message

Published 2022-01-19 · Modified

6.5EPSS 0.004

CVE-2022-22226

Junos OS: EX4300-MP, EX4600, QFX5000 Series: In VxLAN scenarios specific packets processed cause a memory leak leading to a PFE crash

Published 2022-10-18 · Modified

6.5EPSS 0.003

CVE-2020-1688

Junos OS: SRX and NFX Series: Insufficient Web API private key protection

Published 2020-10-16 · Modified

6.5EPSS 0.003

CVE-2022-22250

Junos OS and Junos OS Evolved: An FPC crash might be seen due to an EVPN MAC entry moving from local to remote

Published 2022-10-18 · Modified

6.5EPSS 0.003

CVE-2021-0295

Junos OS: QFX10K Series: Denial of Service (DoS) upon receipt of DVMRP packets received on multi-homing ESI in VXLAN.

Published 2021-07-15 · Modified

6.1EPSS 0.011

CVE-2021-0263

Junos OS: PTX Series: Denial of Service in packet processing due to heavy route churn when J-Flow sampling is enabled

Published 2021-04-22 · Modified

5.9EPSS 0.009

CVE-2020-1629

Junos OS: A race condition vulnerability may cause RPD daemon to crash when processing a BGP NOTIFICATION message.

Published 2020-04-08 · Modified

5.9EPSS 0.007

CVE-2019-0069

Junos OS: vSRX, SRX1500, SRX4K, ACX5K, EX4600, QFX5100, QFX5110, QFX5200, QFX10K and NFX Series: console management port device authentication credentials are logged in clear text

Published 2019-10-09 · Modified

5.9EPSS 0.002

CVE-2021-0205

Junos OS: MX Series: Dynamic filter fails to match IPv6 prefix

Published 2021-01-15 · Modified

5.8EPSS 0.012

CVE-2019-0048

EX4300 Series: When a firewall filter is applied to a loopback interface, other firewall filters for multicast traffic may fail

Published 2019-07-11 · Modified

5.8EPSS 0.010

CVE-2021-0234

Junos OS: QFX5100-96S: DDoS protection does not work as expected.

Published 2021-04-22 · Modified

5.8EPSS 0.009

CVE-2020-1685

Junos OS: EX4600, QFX5K Series: Stateless firewall filter matching 'user-vlan-id' will cause incomplete discard action

Published 2020-10-16 · Modified

5.8EPSS 0.008

CVE-2019-0015

Junos OS: SRX Series: Deleted dynamic VPN users are allowed to establish VPN connections until reboot

Published 2019-01-15 · Modified

5.5EPSS 0.008

CVE-2019-0074

Junos OS: NFX150 Series, QFX10K Series, EX9200 Series, MX Series, PTX Series: Path traversal vulnerability in NFX150 and NG-RE leads to information disclosure.

Published 2019-10-09 · Modified

5.5EPSS 0.004

CVE-2019-0009

Junos OS: EX2300 and EX3400: High disk I/O operations may disrupt the communication between RE and PFE

Published 2019-01-15 · Modified

5.5EPSS 0.004

CVE-2020-1643

Junos OS: EX Series: RPD crash when executing specific "show ospf interface" commands from the CLI with OSPF authentication configured

Published 2020-07-17 · Modified

5.5EPSS 0.003

CVE-2020-1682

Junos OS: SRX1500, vSRX, SRX4K, NFX150, NFX250: Denial of service vulnerability executing local CLI command

Published 2020-10-16 · Modified

5.5EPSS 0.003

CVE-2021-0293

Junos OS: Out-of-memory condition and crashes can occur after executing a certain CLI command repeatedly

Published 2021-07-15 · Modified

5.5EPSS 0.002

CVE-2021-0238

Junos OS: MX Series: Executing CLI command repetitively may cause the system to run out of disk space

Published 2021-04-22 · Modified

5.5EPSS 0.002

CVE-2020-1630

Junos OS: Privilege escalation vulnerability in dual REs, VC or HA cluster may allow unauthorized configuration change.

Published 2020-04-08 · Modified

5.5EPSS 0.002

Juniper Junos 18.2

Security check