Juniper Junos

Junos: SRX cluster denial of service vulnerability in flowd due to multicast packets

Junos: RPD crash due to malformed BGP OPEN message

Junos OS: SRX Series: An attacker sending spoofed packets to IPSec peers may cause a Denial of Service.

Junos OS and Junos OS Evolved: RPD crash due to BGP session flapping.

Junos OS: High-End SRX Series: Multicast traffic might cause all FPCs to reset.

Junos OS: SRX1500: Denial of service due to crash of srxpfe process under heavy traffic conditions.

Junos OS: SRX5000 Series: flowd process crash due to receipt of specific TCP packet

Junos OS: MX Series: jdhcpd crash when receiving a specific crafted DHCP response message

Junos OS and Junos OS Evolved: RPD crash when processing a specific BGP packet

Junos OS and Junos OS Evolved: RPD crash due to specific BGP UPDATE packets

Junos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash.

Junos OS: jdhcpd crash upon receipt of crafted DHCPv6 solicit message

Junos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC

NFX250, NFX350, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series: Certain genuine traffic received by the Junos OS device will be discarded instead of forwarded.

The rpd daemon in Juniper Junos OS before 12.1X44-D60, 12.1X46 before 12.1X46-D45, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D20, 13.2 before 13.2R7, 13.2X51 before 13.2X51-D40, 13.3 before 13.3R6, 14.1 before 14.1R4, and 14.2 before 14.2R2, when configured with BGP-based L2VPN or VPLS, allows remote attackers to cause a denial of service (daemon restart) via a crafted L2VPN family BGP update.

Junos OS: PTX/QFX Series: Kernel Routing Table (KRT) queue stuck after packet sampling a malformed packet when the tunnel-observation mpls-over-udp configuration is enabled.

Junos OS: RPD process crashes due to specific BGP peer restarts condition.

Junos OS and Junos OS Evolved: RPD core upon receipt of specific BGP update

BGP packets can trigger rpd crash when BGP tracing is enabled.

Junos OS: An attacker sending crafted packets can cause a traffic and CPU Denial of Service (DoS).

Junos OS and Junos OS Evolved: An rpd core will be observed with proxy BGP route-target filtering enabled and certain route add and delete event happening

Junos OS: Denial of Service vulnerability in J-Web and web based (HTTP/HTTPS) services caused by a high number of specific requests

Junos OS: A crafted Ethernet OAM packet received by Junos may cause the Ethernet OAM connectivity fault management process (CFM) to core.

Junos OS: MX Series: PFE crash on MPC7/8/9 upon receipt of small fragments requiring reassembly

Junos OS: Upon receipt of certain types of malformed PCEP packets the pccd process may crash.

SRX5000 Series: Denial of Service vulnerability in SSL-Proxy feature.

Junos OS: SRX Series: High CPU load due to processing for HTTP traffic when Application Identification is enabled.

SRX Series: Embedded ICMP may cause the flowd process to crash

Junos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC

Junos OS: jdhcpd process crash when processing a specific DHCPDv6 packet in DHCPv6 relay configuration.

Junos: rpd core due to receipt of specially crafted BGP packet

SRX series: Junos OS: SRX series using IPv6 Sun/MS-RPC ALGs may experience flowd crash on processing packets.

Junos OS: MX Series, EX9200 Series: Trio-based MPC memory leak when Integrated Routing and Bridging (IRB) interface is mapped to a VPLS instance or a Bridge-Domain

Junos OS: MX Series: Receipt of specific packet on MS-MPC/MS-MIC causes line card reset

Junos OS: ACX Series: Packet Forwarding Engine manager (FXPC) process crashes when processing DHCPv6 packets

Junos OS and Junos OS Evolved: An attacker sending a specific crafted BGP update message will crash RPD

Junos OS and Junos OS Evolved: RPD crash while processing a specially crafted BGP UPDATE or KEEPALIVE message.

Junos OS and Junos OS Evolved: RPD crash while processing a specific BGP update information.

Junos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet

Junos OS: An attacker sending spoofed RADIUS messages to a Junos OS device configured for broadband services may cause broadband subscribers to remain stuck in a "Terminating" state.