Juniper Junos 18.4

Junos OS: SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3: In a multi-tenant environment, a tenant host administrator may be able to jailbreak out of their network impacting other tenant networks or gather information from other networks.

Junos OS: SRX Series: Unified Access Control (UAC) bypass vulnerability

Junos OS: Receipt of a specific BGP update may cause RPKI policy-checks to be bypassed

Junos OS: Command injection vulnerability in 'request system software' CLI command

Junos OS: Kernel panic upon receipt of specific TCPv6 packet on management interface

Junos OS: PKI key pairs are exported with insecure file permissions

Junos OS and Junos OS Evolved: Denial of Service vulnerability in local file processing

named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.

Junos OS: A specific SNMP command can trigger a high CPU usage Denial of Service in the RPD daemon.

Junos OS: Privilege escalation in J-Web due to arbitrary command and code execution via information disclosure from another users active session

Junos OS: A specific BGP VPNv6 flowspec message causes routing protocol daemon (rpd) process to crash with a core.

Junos OS: PTX Series, QFX Series: Due to a race condition input loopback firewall filters applied to interfaces may not operate even when listed in the running configuration.

Junos Fusion: A Satellite Device can be controlled by rewiring it to a foreign AD causing a DoS

Junos OS: QFX10K Series, EX9200 Series, MX Series, PTX Series: Privilege escalation vulnerability in NG-RE.

Junos OS and Junos OS Evolved: A vulnerability allows a network based unauthenticated attacker which sends a high rate of specific traffic to cause a partial Denial of Service

Junos OS: Kernel memory leak in virtual-memory due to interface flaps

Junos OS: EX Series, QFX Series, SRX Branch Series, MX Series: Memory leak in packet forwarding engine due to 802.1X authenticator port interface flaps

Junos OS: EX4300 Series: High CPU load due to receipt of specific IPv4 packets

Junos OS: EX2300 Series: High CPU load due to receipt of specific multicast packets on layer 2 interface

Junos OS: QFX Series: Traffic loop Denial of Service (DoS) upon receipt of specific IP multicast traffic

Junos OS: EX4300-MP/EX4600/QFX5K Series: High CPU load due to receipt of specific layer 2 frames when deployed in a Virtual Chassis configuration

Junos OS: EX4300-MP/EX4600/QFX5K Series: High CPU load due to receipt of specific layer 2 frames in EVPN-VXLAN deployment.

Junos OS: Denial of Service in ppmd upon receipt of malformed packet

Junos OS: QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016: In EVPN-VXLAN scenarios receipt of specific genuine packets by an adjacent attacker will cause a kernel memory leak in FPC.

Junos OS and Junos OS Evolved: An IS-IS adjacency might be taken down if a bad hello PDU is received for an existing adjacency causing a DoS

Junos OS: QFX5000 Series and EX4600 Series: Control traffic might be dropped if a high rate of specific multicast traffic is received

Junos OS: MX Series: In subscriber management / BBE configuration authd can crash if a subscriber with a specific username tries to login leading to a DoS

Junos OS: ACX5448, ACX710: BFD sessions might flap due to high rate of transit ARP packets

Junos OS: MX Series: DDoS LACP violation upon receipt of specific layer 2 frames in EVPN-VXLAN deployment

Junos OS: EX4300: FPC crash upon receipt of specific frames on an interface without L2PT or dot1x configured

Junos OS: MX Series, EX9200 Series: Trio-based MPCs memory leak in VPLS with integrated routing and bridging (IRB) interface

Junos OS: EX2300, EX3400 and EX4300 Series: An Aggregated Ethernet (AE) interface will go down due to a stream of specific layer 2 frames

Junos OS: PTX Series: An FPC heap memory leak will be triggered by certain Flowspec route operations which can lead to an FPC crash

Junos OS: A race condition on receipt of crafted LLDP packets leads to a memory leak and an LLDP crash.

Junos OS: MX Series, EX9200 Series: FPC may crash upon receipt of specific MPLS packet affecting Trio-based MPCs

Junos OS: MX Series, EX9200 Series, SRX4600: Ethernet interface vulnerable to specially crafted frames

Junos OS: ANCPD core when hitting maximum-discovery-table-entries limit

Junos OS: EX4300-MP/EX4600/EX4650/QFX5K Series: Packet Forwarding Engine manager (FXPC) process crashes when deployed in a Virtual Chassis (VC) configuration

Junos OS: jdhcpd crashes upon receiving a specific DHCP packet

Junos OS: EX4300: PFE Denial of Service (DoS) upon receipt of a flood of specific ARP traffic