Juniper Junos

Junos OS: Receipt of malformed RSVP packet may lead to RPD denial of service

Junos OS: Receipt of a malformed MPLS RSVP packet leads to a Routing Protocols Daemon (RPD) crash.

Junos OS: Denial of Service in J-Web

Juniper Networks devices running affected Junos OS versions may be impacted by the receipt of a crafted BGP UPDATE which can lead to an rpd (routing process daemon) crash and restart. Repeated crashes of the rpd daemon can result in an extended denial of service condition. The affected Junos OS versions are: 15.1 prior to 15.1F2-S15, 15.1F5-S7, 15.1F6-S5, 15.1F7, 15.1R4-S7, 15.1R5-S2, 15.1R6; 15.1X49 prior to 15.1X49-D78, 15.1X49-D80; 15.1X53 prior to 15.1X53-D230, 15.1X53-D63, 15.1X53-D70; 16.1 prior to 16.1R3-S3, 16.1R4; 16.2 prior to 16.2R1-S3, 16.2R2; Releases prior to Junos OS 15.1 are unaffected by this vulnerability. 17.1R1, 17.2R1, and all subsequent releases have a resolution for this vulnerability.

An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. An HTTP POST request with a specially crafted "Host" header field may cause a NULL pointer dereference and thus cause a denial of service, as demonstrated by the lack of a trailing ']' character in an IPv6 address.

Junos OS: Receipt of a specifically crafted malicious MPLS packet leads to a Junos kernel crash.

Junos: Denial of Service vulnerability in rpd daemon

Junos OS: A flowspec BGP update with a specific term-order causes routing protocol daemon (rpd) process to crash with a core.

SRX Series: Denial of service vulnerability in flowd daemon on devices configured with NAT-PT

On Juniper Networks SRX Series Services Gateways chassis clusters running Junos OS 12.1X46 prior to 12.1X46-D65, 12.3X48 prior to 12.3X48-D40, 12.3X48 prior to 12.3X48-D60, flowd daemon on the primary node of an SRX Series chassis cluster may crash and restart when attempting to synchronize a multicast session created via crafted multicast packets.

Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53-D40, 15.1X53 prior to 15.1X53-D40, 15.1 prior to 15.1R2, do not pad Ethernet packets with zeros, and thus some packets can contain fragments of system memory or data from previous packets. This issue is also known as 'Etherleak'

Junos OS: Stateless IP firewall filter rules stop working as expected after reboot or upgrade

Junos OS: A remote unauthenticated attacker can consume large amounts of CPU and/or memory through telnetd

Junos OS: RPD crash upon receipt of malformed PIM packet

Junos OS: jdhcpd daemon memory consumption Denial of Service when receiving specific IPv6 DHCP packets.

Junos OS: QFX and PTX Series: FPC process crashes after J-Flow processes a malformed packet

Junos OS: RPD crash when receiving a crafted BGP UPDATE

Junos OS: rpd crash on VPLS PE upon receipt of specific BGP message

Junos OS: Denial of Service vulnerability in MS-PIC, MS-MIC, MS-MPC, MS-DPC and SRX flow daemon (flowd) related to SIP ALG

Junos OS: Kernel crash (vmcore) or FPC crash due to mbuf leak

SRX Series: A remote attacker may cause a high CPU Denial of Service to the device when proxy ARP is configured.

SRX Series: A crafted packet may lead to information disclosure and firewall rule bypass during compilation of IDP policies.

Junos OS: SRX5000 series: Kernel crash (vmcore) upon receipt of a specific packet on fxp0 interface

Junos OS: RPD process crashes when BGP peer restarts

Junos OS: QFX5100/QFX5110/QFX5120/QFX5200/QFX5210/EX4600/EX4650 Series: When storm control profiling is enabled and a device is under an active storm, a Heap-based Buffer Overflow in the PFE will cause a device to hang.

Junos OS: Receipt of certain genuine BGP packets from any BGP Speaker causes RPD to crash.

Junos OS: A malformed IPv4 packet received by Junos in an NG-mVPN scenario may cause the routing protocol daemon (rpd) process to core

Junos OS: SRX Series: An attacker may cause flowd to crash by sending certain valid SIP traffic to a device with SIP ALG enabled.

Junos OS: SRX Series: flowd process crash due to processing of specific transit IP packets

Junos OS: MX Series: MPC 7/8/9/10/11 cards with MAP-E: PFE halts when an attacker sends malformed IPv4 or IPv6 traffic inside the MAP-E tunnel.

Junos OS: RPD process crashes upon receipt of a specific SNMP packet

Junos OS: The routing protocol process (rpd) may crash and generate core files upon receipt of specific valid BGP states from a peered host.

Junos OS: vMX and MX150: Denial of Service vulnerability in packet processing

Junos OS & Junos OS Evolved: A specific IPv4 packet can lead to FPC restart.

Junos OS: MX Series: An MPC10 Denial of Service (DoS) due to OSPF states transitioning to Down, causes traffic to stop forwarding through the device.

Junos OS: SRX Series: Denial of Service in J-Web upon receipt of crafted HTTP packets

Junos OS: NFX Series, SRX Series: PFE may crash upon receipt of specific packet when SSL Proxy is configured.

Junos OS: SRX Series: Denial of Service vulnerability in srxpfe related to PIM

Junos OS: SRX Series: Denial of Service vulnerability in flowd due to multicast packets

Junos: SRX cluster denial of service vulnerability in flowd due to multicast packets