Juniper Junos 17.2

utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.

Junos OS: vMX: Default credentials supplied in vMX configuration

Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services

Junos: snmpd denial of service upon receipt of crafted SNMP packet

Junos OS: Firewall filter terms named "internal-1" and "internal-2" being ignored

Junos OS: authd allows assignment of IP address requested by DHCP subscriber logging in with Option 50 (Requested IP Address)

Junos OS: Unauthenticated remote root access possible when RSH service is enabled

Junos OS: J-Web: Cross-site scripting attack allows an attacker to gain control of another users session.

Junos OS: Specially crafted packets sent to port 111 on any interface triggers responses from the management interface

Junos OS: PTX1000 System, PTX10002-60C System: After upgrading, configured firewall filters may be applied on incorrect interfaces

Junos OS: Persistent XSS vulnerability in J-Web

Junos OS: RPD daemon crashes due to receipt of specific Draft-Rosen MVPN control packet in Draft-Rosen MVPN configuration

Junos OS: When a DHCPv6 Relay-Agent is configured upon receipt of a specific DHCPv6 client message, Remote Code Execution may occur.

Junos OS: Session fixation vulnerability in J-Web

Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv6 packets and arbitrarily execute commands on the target device.

Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv4 packets and arbitrarily execute commands on the target device.

Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv4 packets may take over the code execution of the JDHCPD process.

Junos OS: Improper handling of specific IPv6 packets sent by clients eventually kernel crash (vmcore) the device.

Junos OS: BGP session termination upon receipt of specific BGP FlowSpec advertisement.

Junos OS and Junos OS Evolved: Invalid BGP UPDATE sent to peer device may cause BGP session to terminate.

Junos OS: EX and QFX5K Series: Storm Control does not work as expected when Redundant Trunk Group is configured

Junos OS: Path traversal vulnerability in J-Web

Junos OS: Mbuf leak due to processing MPLS packets in VPLS network.

MX Series: In BBE configurations, receipt of a crafted IPv6 exception packet causes a Denial of Service

Junos OS: rpd daemon cores due to malformed BGP UPDATE packet

Junos OS: MX Series: In BBE configurations, receipt of a specific MPLS or IPv6 packet causes a Denial of Service

Junos OS: Upon receipt of specific sequences of genuine packets destined to the device the kernel will crash and restart (vmcore)

Junos OS: Insufficient validation of environment variables in telnet client may lead to stack-based buffer overflow

Junos OS: NFX Series: Local Command Execution Vulnerability in JDMD Leads to Privilege Escalation

Junos: Buffer overflow in sockets library

Junos OS: Insecure management daemon (MGD) configuration may allow local privilege escalation

Junos OS: Junos Fusion: Hard-coded credentials on satellite devices allows a locally authenticated attacker to elevate their privileges.

Junos OS: MX Series: uncontrolled recursion and crash in Broadband Edge subscriber management daemon (bbe-smgd).

Junos OS: Memory exhaustion denial of service vulnerability in Routing Protocols Daemon (RPD) with Juniper Extension Toolkit (JET) support.

Junos OS: MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) and PTX1K: Line card may crash upon receipt of specific MPLS packet.

Junos OS: Denial of Service in J-Web

An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. An HTTP POST request with a specially crafted "Host" header field may cause a NULL pointer dereference and thus cause a denial of service, as demonstrated by the lack of a trailing ']' character in an IPv6 address.

Junos OS: Receipt of a specifically crafted malicious MPLS packet leads to a Junos kernel crash.

Junos OS: RPD crash upon receipt of malformed PIM packet

Junos OS: rpd crash on VPLS PE upon receipt of specific BGP message