Vulnerabilities

Juniper Junos 20.2

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

178CVEs

CVE-2022-22191

Junos OS: EX4300: PFE Denial of Service (DoS) upon receipt of a flood of specific ARP traffic

Published 2022-04-14 · Modified

6.5EPSS 0.004

CVE-2022-22160

Junos OS: MX Series: The bbe-smgd process crashes if an unsupported configuration exists and a PPPoE client sends a specific message

Published 2022-01-19 · Modified

6.5EPSS 0.004

CVE-2022-22217

Junos OS: QFX10K Series: Denial of Service (DoS) upon receipt of crafted MLD packets on multi-homing ESI in VXLAN

Published 2022-07-20 · Modified

6.5EPSS 0.003

CVE-2023-44183

Junos OS: QFX5000 Series, EX4600 Series: In a VxLAN scenario an adjacent attacker within the VxLAN sending genuine packets may cause a DMA memory leak to occur.

Published 2023-10-12 · Modified

6.5EPSS 0.003

CVE-2022-22214

Junos OS and Junos OS Evolved: In an MPLS scenario upon receipt of a specific IPv6 packet an FPC will crash

Published 2022-07-20 · Modified

6.5EPSS 0.003

CVE-2023-1697

Junos OS: QFX10000 Series, PTX1000 Series: The dcpfe process will crash when a malformed ethernet frame is received

Published 2023-04-17 · Modified

6.5EPSS 0.003

CVE-2022-22226

Junos OS: EX4300-MP, EX4600, QFX5000 Series: In VxLAN scenarios specific packets processed cause a memory leak leading to a PFE crash

Published 2022-10-18 · Modified

6.5EPSS 0.003

CVE-2022-22230

Junos OS and Junos OS Evolved: RPD crash upon receipt of specific OSPFv3 LSAs

Published 2022-10-18 · Modified

6.5EPSS 0.003

CVE-2022-22250

Junos OS and Junos OS Evolved: An FPC crash might be seen due to an EVPN MAC entry moving from local to remote

Published 2022-10-18 · Modified

6.5EPSS 0.003

CVE-2022-22224

Junos OS and Junos OS Evolved: PPMD goes into infinite loop upon receipt of malformed OSPF TLV

Published 2022-10-18 · Modified

6.5EPSS 0.003

CVE-2023-22405

Junos OS: QFX5k Series, EX46xx Series: MAC limiting feature stops working after PFE restart or device reboot

Published 2023-01-12 · Modified

6.5EPSS 0.003

CVE-2023-22406

Junos OS and Junos OS Evolved: A memory leak which will ultimately lead to an rpd crash will be observed when a peer interface flaps continuously in a Segment Routing scenario using OSPF

Published 2023-01-12 · Modified

6.5EPSS 0.003

CVE-2023-22407

Junos OS and Junos OS Evolved: An RPD crash can happen due to an MPLS TE tunnel configuration change on a directly connected router

Published 2023-01-12 · Modified

6.5EPSS 0.003

CVE-2023-22414

Junos OS: PTX Series and QFX10000 Series: An FPC memory leak is observed when specific EVPN VXLAN Multicast packets are processed

Published 2023-01-12 · Modified

6.5EPSS 0.003

CVE-2023-28959

Junos OS: QFX10002: PFE wedges and restarts upon receipt of specific malformed packets

Published 2023-04-17 · Modified

6.5EPSS 0.003

CVE-2023-36848

Junos OS: MX Series: The FPC will crash on receiving a malformed CFM packet

Published 2023-07-14 · Modified

6.5EPSS 0.003

CVE-2023-36850

Junos OS: MX Series: An MPC will crash upon receipt of a malformed CFM packet.

Published 2023-07-14 · Modified

6.5EPSS 0.003

CVE-2023-36834

Junos OS: SRX 4600 and SRX 5000 Series: The receipt of specific genuine packets by SRXes configured for L2 transparency will cause a DoS

Published 2023-07-14 · Modified

6.5EPSS 0.003

CVE-2023-22395

Junos OS: In an MPLS scenario the processing of specific packets to the device causes a buffer leak and ultimately a loss of connectivity

Published 2023-01-12 · Modified

6.5EPSS 0.003

CVE-2022-22238

Junos OS and Junos OS Evolved: The rpd process will crash when a malformed incoming RESV message is processed

Published 2022-10-18 · Modified

6.5EPSS 0.003

CVE-2021-0289

Junos OS: User-defined ARP Policer isn't applied on Aggregated Ethernet (AE) interface until firewall process is restarted

Published 2021-07-15 · Modified

6.5EPSS 0.003

CVE-2022-22242

Junos OS: Cross-site Scripting (XSS) vulnerability in J-Web

Published 2022-10-18 · Modified

6.1EPSS 0.028

CVE-2021-0295

Junos OS: QFX10K Series: Denial of Service (DoS) upon receipt of DVMRP packets received on multi-homing ESI in VXLAN.

Published 2021-07-15 · Modified

6.1EPSS 0.011

CVE-2021-0263

Junos OS: PTX Series: Denial of Service in packet processing due to heavy route churn when J-Flow sampling is enabled

Published 2021-04-22 · Modified

5.9EPSS 0.009

CVE-2022-22169

Junos OS and Junos OS Evolved: OSPFv3 session might go into INIT state upon receipt of multiple crafted packets from a trusted neighbor device.

Published 2022-01-19 · Modified

5.9EPSS 0.008

CVE-2021-31386

Junos OS: When using J-Web with HTTP an attacker may retrieve encryption keys via Person-in-the-Middle attacks.

Published 2021-10-19 · Modified

5.9EPSS 0.007

CVE-2021-31364

Junos OS: SRX Series: The flowd process will crash if log session-close is configured and specific traffic is received

Published 2021-10-19 · Modified

5.9EPSS 0.007

CVE-2022-22220

Junos OS and Junos OS Evolved: Due to a race condition the rpd process can crash upon receipt of a BGP update message containing flow spec route

Published 2022-10-18 · Modified

5.9EPSS 0.005

CVE-2022-22225

Junos OS and Junos OS Evolved: In a BGP multipath scenario, when one of the contributing routes is flapping often and rapidly, rpd may crash

Published 2022-10-18 · Modified

5.9EPSS 0.005

CVE-2022-22208

Junos OS and Junos OS Evolved: An rpd crash can occur due to memory corruption caused by flapping BGP sessions

Published 2022-10-18 · Modified

5.9EPSS 0.005

CVE-2021-0205

Junos OS: MX Series: Dynamic filter fails to match IPv6 prefix

Published 2021-01-15 · Modified

5.8EPSS 0.012

CVE-2023-28961

Junos OS: ACX Series: IPv6 firewall filter is not installed in PFE when "from next-header ah" is used

Published 2023-04-17 · Modified

5.8EPSS 0.004

CVE-2021-0293

Junos OS: Out-of-memory condition and crashes can occur after executing a certain CLI command repeatedly

Published 2021-07-15 · Modified

5.5EPSS 0.002

CVE-2021-0238

Junos OS: MX Series: Executing CLI command repetitively may cause the system to run out of disk space

Published 2021-04-22 · Modified

5.5EPSS 0.002

CVE-2021-0256

Junos OS: mosquitto Local Privilege Escalation vulnerability in SUID binaries

Published 2021-04-22 · Modified

5.5EPSS 0.002

CVE-2022-22240

Junos OS and Junos OS Evolved: An rpd memory leak might be observed while running a specific cli command in a RIB sharding scenario

Published 2022-10-18 · Modified

5.5EPSS 0.002

CVE-2021-31377

Junos OS: A local authenticated attacker can cause RPD to core

Published 2021-10-19 · Modified

5.5EPSS 0.002

CVE-2023-36840

Junos OS and Junos OS Evolved: An rpd crash occurs when a specific L2VPN command is run

Published 2023-07-14 · Modified

5.5EPSS 0.002

CVE-2023-36838

Junos OS: SRX Series: A flowd core occurs when running a low privileged CLI command

Published 2023-07-14 · Modified

5.5EPSS 0.002

CVE-2022-22234

Junos OS: EX2300 and EX3400 Series: One of more SFPs might become unavailable when the system is very busy

Published 2022-10-18 · Modified

5.5EPSS 0.002

Juniper Junos 20.2

Security check