Vulnerabilities

Juniper Junos 19.3

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

189CVEs

CVE-2020-1687

Junos OS: EX4300-MP/EX4600/QFX5K Series: High CPU load due to receipt of specific layer 2 frames in EVPN-VXLAN deployment.

Published 2020-10-16 · Modified

6.5EPSS 0.005

CVE-2022-22249

Junos OS: MX Series: An FPC crash might be seen due to mac-moves within the same bridge domain

Published 2022-10-18 · Modified

6.5EPSS 0.005

CVE-2021-0214

Junos OS: Denial of Service in ppmd upon receipt of malformed packet

Published 2021-04-22 · Modified

6.5EPSS 0.005

CVE-2021-0272

Junos OS: QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016: In EVPN-VXLAN scenarios receipt of specific genuine packets by an adjacent attacker will cause a kernel memory leak in FPC.

Published 2021-04-22 · Modified

6.5EPSS 0.004

CVE-2021-31362

Junos OS and Junos OS Evolved: An IS-IS adjacency might be taken down if a bad hello PDU is received for an existing adjacency causing a DoS

Published 2021-10-19 · Modified

6.5EPSS 0.004

CVE-2021-31370

Junos OS: QFX5000 Series and EX4600 Series: Control traffic might be dropped if a high rate of specific multicast traffic is received

Published 2021-10-19 · Modified

6.5EPSS 0.004

CVE-2021-31366

Junos OS: MX Series: In subscriber management / BBE configuration authd can crash if a subscriber with a specific username tries to login leading to a DoS

Published 2021-10-19 · Modified

6.5EPSS 0.004

CVE-2021-0257

Junos OS: MX Series, EX9200 Series: Trio-based MPCs memory leak in VPLS with integrated routing and bridging (IRB) interface

Published 2021-04-22 · Modified

6.5EPSS 0.004

CVE-2021-0228

Junos OS: MX Series: DDoS LACP violation upon receipt of specific layer 2 frames in EVPN-VXLAN deployment

Published 2021-04-22 · Modified

6.5EPSS 0.004

CVE-2021-31363

Junos OS and Junos OS Evolved: Receipt of a specific LDP message will cause a Denial of Service

Published 2021-10-19 · Modified

6.5EPSS 0.004

CVE-2021-0216

Junos OS: ACX5448, ACX710: BFD sessions might flap due to high rate of transit ARP packets

Published 2021-04-22 · Modified

6.5EPSS 0.004

CVE-2021-0242

Junos OS: EX4300: FPC crash upon receipt of specific frames on an interface without L2PT or dot1x configured

Published 2021-04-22 · Modified

6.5EPSS 0.004

CVE-2021-31365

Junos OS: EX2300, EX3400 and EX4300 Series: An Aggregated Ethernet (AE) interface will go down due to a stream of specific layer 2 frames

Published 2021-10-19 · Modified

6.5EPSS 0.004

CVE-2021-31367

Junos OS: PTX Series: An FPC heap memory leak will be triggered by certain Flowspec route operations which can lead to an FPC crash

Published 2021-10-19 · Modified

6.5EPSS 0.004

CVE-2022-22168

Junos OS: vMX and MX150: Specific packets might cause a memory leak and eventually an FPC reboot

Published 2022-01-19 · Modified

6.5EPSS 0.004

CVE-2022-22196

Junos OS and Junos OS Evolved: The rpd CPU spikes to 100% after a malformed ISIS TLV has been received

Published 2022-04-14 · Modified

6.5EPSS 0.004

CVE-2021-0288

Junos OS: MX Series, EX9200 Series: FPC may crash upon receipt of specific MPLS packet affecting Trio-based MPCs

Published 2021-07-15 · Modified

6.5EPSS 0.004

CVE-2021-0290

Junos OS: MX Series, EX9200 Series, SRX4600: Ethernet interface vulnerable to specially crafted frames

Published 2021-07-15 · Modified

6.5EPSS 0.004

CVE-2021-0224

Junos OS: ANCPD core when hitting maximum-discovery-table-entries limit

Published 2021-04-22 · Modified

6.5EPSS 0.004

CVE-2021-0237

Junos OS: EX4300-MP/EX4600/EX4650/QFX5K Series: Packet Forwarding Engine manager (FXPC) process crashes when deployed in a Virtual Chassis (VC) configuration

Published 2021-04-22 · Modified

6.5EPSS 0.004

CVE-2022-22179

Junos OS: jdhcpd crashes upon receiving a specific DHCP packet

Published 2022-01-19 · Modified

6.5EPSS 0.004

CVE-2022-22172

Junos OS and Junos OS Evolved: An l2cpd memory leak can occur when specific LLDP packets are received leading to a DoS

Published 2022-01-19 · Modified

6.5EPSS 0.004

CVE-2022-22191

Junos OS: EX4300: PFE Denial of Service (DoS) upon receipt of a flood of specific ARP traffic

Published 2022-04-14 · Modified

6.5EPSS 0.004

CVE-2022-22155

Junos OS: ACX5448: FPC memory leak due to IPv6 neighbor flaps

Published 2022-01-19 · Modified

6.5EPSS 0.004

CVE-2022-22160

Junos OS: MX Series: The bbe-smgd process crashes if an unsupported configuration exists and a PPPoE client sends a specific message

Published 2022-01-19 · Modified

6.5EPSS 0.004

CVE-2022-22217

Junos OS: QFX10K Series: Denial of Service (DoS) upon receipt of crafted MLD packets on multi-homing ESI in VXLAN

Published 2022-07-20 · Modified

6.5EPSS 0.003

CVE-2023-44183

Junos OS: QFX5000 Series, EX4600 Series: In a VxLAN scenario an adjacent attacker within the VxLAN sending genuine packets may cause a DMA memory leak to occur.

Published 2023-10-12 · Modified

6.5EPSS 0.003

CVE-2022-22214

Junos OS and Junos OS Evolved: In an MPLS scenario upon receipt of a specific IPv6 packet an FPC will crash

Published 2022-07-20 · Modified

6.5EPSS 0.003

CVE-2022-22226

Junos OS: EX4300-MP, EX4600, QFX5000 Series: In VxLAN scenarios specific packets processed cause a memory leak leading to a PFE crash

Published 2022-10-18 · Modified

6.5EPSS 0.003

CVE-2022-22230

Junos OS and Junos OS Evolved: RPD crash upon receipt of specific OSPFv3 LSAs

Published 2022-10-18 · Modified

6.5EPSS 0.003

CVE-2022-22224

Junos OS and Junos OS Evolved: PPMD goes into infinite loop upon receipt of malformed OSPF TLV

Published 2022-10-18 · Modified

6.5EPSS 0.003

CVE-2022-22250

Junos OS and Junos OS Evolved: An FPC crash might be seen due to an EVPN MAC entry moving from local to remote

Published 2022-10-18 · Modified

6.5EPSS 0.003

CVE-2023-22406

Junos OS and Junos OS Evolved: A memory leak which will ultimately lead to an rpd crash will be observed when a peer interface flaps continuously in a Segment Routing scenario using OSPF

Published 2023-01-12 · Modified

6.5EPSS 0.003

CVE-2023-22407

Junos OS and Junos OS Evolved: An RPD crash can happen due to an MPLS TE tunnel configuration change on a directly connected router

Published 2023-01-12 · Modified

6.5EPSS 0.003

CVE-2023-36850

Junos OS: MX Series: An MPC will crash upon receipt of a malformed CFM packet.

Published 2023-07-14 · Modified

6.5EPSS 0.003

CVE-2023-36848

Junos OS: MX Series: The FPC will crash on receiving a malformed CFM packet