Juniper Junos 20.1

utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.

Junos OS and Junos OS Evolved: Upon receipt of a specific BGP FlowSpec message network traffic may be disrupted.

Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services

Junos OS: Remote code execution vulnerability in overlayd service

Junos OS: Vulnerability in J-Web may allow deserialization without authentication

Junos OS: SRX Series: If no-syn-check is enabled, traffic classified as UNKNOWN gets permitted by pre-id-default-policy

Junos OS: Unauthenticated access vulnerability in J-Web

Junos OS: J-Web has an Improper Neutralization of CRLF Sequences in its HTTP Headers which allows an attacker to carry out multiple types of attacks.

Junos OS: SRX Series: Traffic classification vulnerability when 'no-syn-check' is enabled

Junos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.

Junos OS and Junos OS Evolved: Privilege escalation vulnerability in Juniper Extension Toolkit (JET)

Junos OS: PTX1000 System, PTX10002-60C System: After upgrading, configured firewall filters may be applied on incorrect interfaces

Junos OS: Reflected Cross-site Scripting vulnerability in J-Web and web based (HTTP/HTTPS) services

Junos OS: J-Web: A path traversal vulnerability allows an authenticated attacker to elevate their privileges to root

Junos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.

Junos OS: J-Web can be compromised through reflected client-side HTTP parameter pollution attacks.

Junos OS: A XSS vulnerability allows an attacker to execute commands on a target J-Web session

Junos OS: PHP file inclusion vulnerability in J-Web

Junos OS and Junos OS Evolved: LLDP Out-of-Bounds Read vulnerability in l2cpd

Junos OS and Junos OS Evolved: In bidirectional LSP configurations, on MPLS egress router RPD may core upon receipt of specific malformed RSVP packet.

Junos OS and Junos OS Evolved: A vulnerability in the Juniper Agile License Client may allow an attacker to perform Remote Code Execution (RCE)

Junos OS: EX and QFX5K Series: Storm Control does not work as expected when Redundant Trunk Group is configured

Junos OS: SRX Series: Persistent XSS vulnerability in J-Web

Junos OS: Stored Cross-Site Scripting (XSS) vulnerability in captive portal

Junos OS: J-Web can be compromised through reflected XSS attacks

Junos OS: EX2300 Series, EX3400 Series, and ACX710 might become unresponsive if the out-of-band management port receives a flood of traffic

Junos OS: Upon receipt of specific sequences of genuine packets destined to the device the kernel will crash and restart (vmcore)

Junos OS: Upon receipt of specific sequences of genuine packets destined to the device the kernel will crash and restart (vmcore)

Junos OS: Command injection vulnerability in license-check daemon

Junos OS: Buffer overflow vulnerability in device control daemon

Junos OS: telnetd.real Local Privilege Escalation vulnerabilities in SUID binaries

Junos OS: dexp Local Privilege Escalation vulnerabilities in SUID binaries

Junos OS and Junos OS Evolved: Local Privilege Escalation vulnerability

Junos OS: A low privileged user can elevate their privileges to the ones of the highest privileged j-web user logged in

Junos OS: Junos Fusion: Hard-coded credentials on satellite devices allows a locally authenticated attacker to elevate their privileges.

Junos OS: SRX and EX Series: Local privilege escalation flaw in "download" functionality

Junos OS: ethtraceroute Local Privilege Escalation vulnerability in SUID binaries

Junos OS: Receipt of certain genuine BGP packets from any BGP Speaker causes RPD to crash.

Junos OS: SRX Series: Denial of Service in J-Web upon receipt of crafted HTTP packets

Junos OS and Junos OS Evolved: RPD crash due to BGP session flapping.