Juniper JUNOS OS Evolved 23.2

Junos OS Evolved: PTX Series except PTX10003: An unauthenticated adjacent attacker sending specific valid traffic can cause a memory leak in cfmman leading to FPC crash and restart

Junos OS Evolved: PTX Series: If SRTE tunnels provisioned via PCEP are present and specific gRPC queries are received evo-aftmand crashes

Junos OS and Junos OS Evolved: When telemetry collectors are frequently subscribing and unsubscribing to sensors chassisd or rpd will crash

Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11/LC9600, MX304, EX9200, PTX Series: Receipt of malformed DHCP packets causes interfaces to stop processing packets

Junos OS Evolved: Packets which are not destined to the device can reach the RE

Junos OS Evolved: QFX5000 Series: Configured MAC learning and move limits are not in effect

Junos OS Evolved: ACX7000 Series: When multicast traffic with a specific (S,G) is received evo-pfemand crashes

Junos OS and Junos OS Evolved: Inconsistent information in the TE database can lead to an rpd crash

Junos OS and Junos OS Evolved: Receipt of a large RPKI-RTR PDU packet can cause rpd to crash

Junos OS and Junos OS Evolved: l2cpd crash upon receipt of a specific TLV

Junos OS and Junos OS Evolved: When LLDP is enabled and a malformed LLDP packet is received, l2cpd crashes

Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session reset

Junos OS and Junos OS Evolved: In an EVPN-MPLS scenario churn of ESI routes causes a memory leak in l2ald

Junos OS Evolved: When MAC learning happens, and an interface gets flapped, the PFE crashes

Junos OS and Junos OS Evolved: In an EVPN environment, receipt of specifically malformed BGP update causes RPD crash

Junos OS and Junos OS Evolved: When jflow/sflow is configured continuous logical interface flaps causes rpd crash and restart

Junos OS and Junos OS Evolved: Receipt of a specific BGP UPDATE causes an rpd crash on devices with BGP multipath configured

Junos OS and Junos OS Evolved: Receipt of specific IS-IS update packet causes memory leak leading to RPD crash

Junos OS and Junos OS Evolved: Memory leak due to RSVP neighbor persistent error leading to kernel crash

Junos OS and Junos OS Evolved: Receiving specific traffic on devices with EVPN-VPWS with IGMP-snooping enabled will cause the rpd to crash

Junos OS Evolved: MAC table changes cause a memory leak

Junos OS and Junos OS Evolved: Upon processing specific L2 traffic, rpd can hang in devices with EVPN/VXLAN configured

Junos OS and Junos OS Evolved: Receipt of a malformed LLDP TLV results in l2cpd crash

Junos OS Evolved: Flapping management interface causes MAC learning on label-switched interfaces to stop

Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash

Junos OS and Junos OS Evolved: On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to crash

Junos OS and Junos OS Evolved: Receipt of specially crafted BGP update packet causes RPD crash

Junos OS Evolved: ACX7024, ACX7024X, ACX7100-32C, ACX7100-48L, ACX7348, ACX7509: When specific valid multicast traffic is received on the L3 interface on a vulnerable device evo-pfemand crashes and restarts

Junos OS Evolved: QFX5000 Series and PTX Series: An attacker sending crafted multicast packets will cause evo-aftmand / evo-pfemand to crash and restart

Junos OS and Junos OS Evolved: Loading a malicious certificate from the CLI may result in a stack-based overflow

Junos OS Evolved: User is not logged out when the console cable is disconnected

Junos OS Evolved: ACX Series: Receipt of specific transit protocol packets is incorrectly processed by the RE

Junos OS and Junos OS Evolved: Optional transitive BGP attribute is modified before propagation to peers causing sessions to flap

Junos OS Evolved: Receipt of arbitrary data when sampling service is enabled, leads to partial Denial of Service (DoS).

Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker

Junos OS Evolved: ACX7000 Series: Ports which have been inadvertently exposed can be reached over the network

Junos OS Evolved: PTX Series: When a firewall filter rejects traffic these packets are erroneously sent to the RE

Junos OS Evolved: When a control-plane firewall filter refers to a prefix-list with more than 10 entries it's not matching

Junos OS and Junos OS Evolved: A local, low privileged user can access sensitive information

Junos OS and Junos OS Evolved: Executing a specific CLI command when asregex-optimized is configured causes an rpd crash