Vulnerabilities

Juniper Junos 21.4

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

238CVEs

CVE-2025-59961

Junos OS and Junos OS Evolved: Unix socket used to control the jdhcpd process is world-writable

Published 2026-01-15 · Analyzed

6.8EPSS 0.001

CVE-2025-52986

Junos OS and Junos OS Evolved: When RIB sharding is configured each time a show command is executed RPD memory leaks

Published 2025-07-11 · Analyzed

6.8EPSS 0.001

CVE-2026-21912

Junos OS: MX10k Series: 'show system firmware' CLI command may lead to LC480 or LC2101 line card reset

Published 2026-01-15 · Analyzed

6.8EPSS 0.001

CVE-2025-21590

Junos OS: An local attacker with shell access can execute arbitrary code

Published 2025-03-12 · Analyzed

6.7KEVEPSS 0.017

CVE-2023-22404

Junos OS: SRX Series and MX Series with SPC3: When IPsec VPN is configured iked will core when a specifically formatted payload is received

Published 2023-01-12 · Modified

6.5EPSS 0.006

CVE-2022-22202

Junos OS: PTX Series: FPCs may restart unexpectedly upon receipt of specific MPLS packets with certain multi-unit interface configurations

Published 2022-07-20 · Modified

6.5EPSS 0.005

CVE-2024-21603

Junos OS: MX Series: Gathering statistics in a scaled SCU/DCU configuration will lead to a device crash

Published 2024-01-12 · Modified

6.5EPSS 0.005

CVE-2023-44184

Junos OS and Junos OS Evolved: High CPU load due to specific NETCONF command

Published 2023-10-12 · Analyzed

6.5EPSS 0.005

CVE-2022-22237

Junos OS: Peers not configured for TCP-AO can establish a BGP or LDP session even if authentication is configured locally

Published 2022-10-18 · Modified

6.5EPSS 0.004

CVE-2024-21600

Junos OS: PTX Series: In an FTI scenario MPLS packets hitting reject next-hop will cause a host path wedge condition

Published 2024-01-12 · Modified

6.5EPSS 0.003

CVE-2023-44183

Junos OS: QFX5000 Series, EX4600 Series: In a VxLAN scenario an adjacent attacker within the VxLAN sending genuine packets may cause a DMA memory leak to occur.

Published 2023-10-12 · Modified

6.5EPSS 0.003

CVE-2023-1697

Junos OS: QFX10000 Series, PTX1000 Series: The dcpfe process will crash when a malformed ethernet frame is received

Published 2023-04-17 · Modified

6.5EPSS 0.003

CVE-2022-22230

Junos OS and Junos OS Evolved: RPD crash upon receipt of specific OSPFv3 LSAs

Published 2022-10-18 · Modified

6.5EPSS 0.003

CVE-2022-22250

Junos OS and Junos OS Evolved: An FPC crash might be seen due to an EVPN MAC entry moving from local to remote

Published 2022-10-18 · Modified

6.5EPSS 0.003

CVE-2023-22405

Junos OS: QFX5k Series, EX46xx Series: MAC limiting feature stops working after PFE restart or device reboot

Published 2023-01-12 · Modified

6.5EPSS 0.003

CVE-2023-22406

Junos OS and Junos OS Evolved: A memory leak which will ultimately lead to an rpd crash will be observed when a peer interface flaps continuously in a Segment Routing scenario using OSPF

Published 2023-01-12 · Modified

6.5EPSS 0.003

CVE-2023-22414

Junos OS: PTX Series and QFX10000 Series: An FPC memory leak is observed when specific EVPN VXLAN Multicast packets are processed

Published 2023-01-12 · Modified

6.5EPSS 0.003

CVE-2023-28959

Junos OS: QFX10002: PFE wedges and restarts upon receipt of specific malformed packets

Published 2023-04-17 · Modified

6.5EPSS 0.003

CVE-2023-28970

Junos OS: JRR200: Kernel crash upon receipt of a specific packet

Published 2023-04-17 · Modified

6.5EPSS 0.003

CVE-2023-28981

Junos OS and Junos OS Evolved: If malformed IPv6 router advertisements are received, memory corruption will occur which causes an rpd crash

Published 2023-04-17 · Modified

6.5EPSS 0.003

CVE-2023-36834

Junos OS: SRX 4600 and SRX 5000 Series: The receipt of specific genuine packets by SRXes configured for L2 transparency will cause a DoS

Published 2023-07-14 · Modified

6.5EPSS 0.003

CVE-2023-36848

Junos OS: MX Series: The FPC will crash on receiving a malformed CFM packet

Published 2023-07-14 · Modified

6.5EPSS 0.003

CVE-2023-36849

Junos OS and Junos OS Evolved: The l2cpd will crash when a malformed LLDP packet is received

Published 2023-07-14 · Modified

6.5EPSS 0.003

CVE-2023-36850

Junos OS: MX Series: An MPC will crash upon receipt of a malformed CFM packet.

Published 2023-07-14 · Modified

6.5EPSS 0.003

CVE-2023-22395

Junos OS: In an MPLS scenario the processing of specific packets to the device causes a buffer leak and ultimately a loss of connectivity

Published 2023-01-12 · Modified

6.5EPSS 0.003

CVE-2023-36842

Junos OS: jdhcpd will hang on receiving a specific DHCP packet

Published 2024-01-12 · Modified

6.5EPSS 0.003

CVE-2024-21599

Junos OS: MX Series: MPC3E memory leak with PTP configuration

Published 2024-01-12 · Modified

6.5EPSS 0.003

CVE-2024-21617

Junos OS: BGP flap on NSR-enabled devices causes memory leak

Published 2024-01-12 · Modified

6.5EPSS 0.003

CVE-2023-22392

Junos OS: PTX Series and QFX10000 Series: Received flow-routes which aren't installed as the hardware doesn't support them, lead to an FPC heap memory leak

Published 2023-10-12 · Modified

6.5EPSS 0.003

CVE-2024-21587

Junos OS: MX Series: Memory leak in bbe-smgd process if BFD liveness detection for DHCP subscribers is enabled

Published 2024-01-12 · Modified

6.5EPSS 0.003

CVE-2024-21613

Junos OS and Junos OS Evolved: A link flap causes patroot memory leak which leads to rpd crash

Published 2024-01-12 · Modified

6.5EPSS 0.003

CVE-2023-36839

Junos OS and Junos OS Evolved: An l2cpd crash will occur when specific LLDP packets are received

Published 2023-10-12 · Modified

6.5EPSS 0.003

CVE-2023-44203

Junos OS: QFX5000 Series, EX2300, EX3400, EX4100, EX4400 and EX4600: Packet flooding will occur when IGMP traffic is sent to an isolated VLAN

Published 2023-10-12 · Modified

6.5EPSS 0.003

CVE-2023-44204

Junos OS and Junos OS Evolved: The rpd will crash upon receiving a malformed BGP UPDATE message

Published 2023-10-12 · Analyzed

6.5EPSS 0.003

CVE-2024-39532

Junos OS and Junos OS Evolved: Confidential information in logs can be accessed by another user

Published 2024-07-11 · Analyzed

6.3EPSS 0.002

CVE-2022-22242

Junos OS: Cross-site Scripting (XSS) vulnerability in J-Web

Published 2022-10-18 · Modified

6.1EPSS 0.028

CVE-2024-39528

Junos OS and Junos OS Evolved: Concurrent deletion of a routing-instance and receipt of an SNMP request cause an RPD crash

Published 2024-07-11 · Modified

6.0EPSS 0.003

CVE-2025-21597

Junos OS and Junos OS Evolved: When BGP rib-sharding and update-threading are configured and a peer flaps, an rpd core is observed

Published 2025-04-09 · Analyzed

6.0EPSS 0.002

CVE-2024-39536

Junos OS and Junos OS Evolved: Flaps of BFD sessions with authentication cause a ppmd memory leak

Published 2024-07-11 · Analyzed

6.0EPSS 0.002

CVE-2024-39539

Junos OS: MX Series: Continuous subscriber logins will lead to a memory leak and eventually an FPC crash

Published 2024-07-11 · Analyzed

6.0EPSS 0.002

Juniper Junos 21.4

Security check