Juniper Junos 21.2

Junos OS: Peers not configured for TCP-AO can establish a BGP or LDP session even if authentication is configured locally

Junos OS: vMX and MX150: Specific packets might cause a memory leak and eventually an FPC reboot

Junos OS and Junos OS Evolved: The rpd CPU spikes to 100% after a malformed ISIS TLV has been received

Junos OS: jdhcpd crashes upon receiving a specific DHCP packet

Junos OS and Junos OS Evolved: An l2cpd memory leak can occur when specific LLDP packets are received leading to a DoS

Junos OS: EX4300: PFE Denial of Service (DoS) upon receipt of a flood of specific ARP traffic

Junos OS: MX Series: The bbe-smgd process crashes if an unsupported configuration exists and a PPPoE client sends a specific message

Junos OS: QFX10K Series: Denial of Service (DoS) upon receipt of crafted MLD packets on multi-homing ESI in VXLAN

Junos OS: PTX Series: In an FTI scenario MPLS packets hitting reject next-hop will cause a host path wedge condition

Junos OS: QFX5000 Series, EX4600 Series: In a VxLAN scenario an adjacent attacker within the VxLAN sending genuine packets may cause a DMA memory leak to occur.

Junos OS: QFX5000 Series and MX Series: An l2alm crash leading to an FPC crash can be observed in VxLAN scenario

Junos OS: QFX10000 Series, PTX1000 Series: The dcpfe process will crash when a malformed ethernet frame is received

Junos OS and Junos OS Evolved: RPD crash upon receipt of specific OSPFv3 LSAs

Junos OS and Junos OS Evolved: An FPC crash might be seen due to an EVPN MAC entry moving from local to remote

Junos OS: QFX5k Series, EX46xx Series: MAC limiting feature stops working after PFE restart or device reboot

Junos OS and Junos OS Evolved: A memory leak which will ultimately lead to an rpd crash will be observed when a peer interface flaps continuously in a Segment Routing scenario using OSPF

Junos OS: PTX Series and QFX10000 Series: An FPC memory leak is observed when specific EVPN VXLAN Multicast packets are processed

Junos OS: QFX10002: PFE wedges and restarts upon receipt of specific malformed packets

Junos OS: JRR200: Kernel crash upon receipt of a specific packet

Junos OS and Junos OS Evolved: If malformed IPv6 router advertisements are received, memory corruption will occur which causes an rpd crash

Junos OS: SRX 4600 and SRX 5000 Series: The receipt of specific genuine packets by SRXes configured for L2 transparency will cause a DoS

Junos OS: MX Series: The FPC will crash on receiving a malformed CFM packet

Junos OS: MX Series: An MPC will crash upon receipt of a malformed CFM packet.

Junos OS: In an MPLS scenario the processing of specific packets to the device causes a buffer leak and ultimately a loss of connectivity

Junos OS and Junos OS Evolved: The rpd process will crash when a malformed incoming RESV message is processed

Junos OS: MX Series: MPC3E memory leak with PTP configuration

Junos OS: jdhcpd will hang on receiving a specific DHCP packet

Junos OS: BGP flap on NSR-enabled devices causes memory leak

Junos OS: PTX Series and QFX10000 Series: Received flow-routes which aren't installed as the hardware doesn't support them, lead to an FPC heap memory leak

Junos OS: MX Series: Memory leak in bbe-smgd process if BFD liveness detection for DHCP subscribers is enabled

Junos OS and Junos OS Evolved: A link flap causes patroot memory leak which leads to rpd crash

Junos OS: QFX5000 Series, EX2300, EX3400, EX4100, EX4400 and EX4600: Packet flooding will occur when IGMP traffic is sent to an isolated VLAN

Junos OS and Junos OS Evolved: An l2cpd crash will occur when specific LLDP packets are received

Junos OS: MX Series with SPC3, and SRX Series: When IPsec authentication is configured with "hmac-sha-384" and "hmac-sha-512" no authentication of traffic is performed

Junos OS and Junos OS Evolved: Confidential information in logs can be accessed by another user

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.

jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.

Junos OS: Cross-site Scripting (XSS) vulnerability in J-Web

Junos OS and Junos OS Evolved: Concurrent deletion of a routing-instance and receipt of an SNMP request cause an RPD crash