Juniper JUNOS OS Evolved 23.4

Junos OS and Junos OS Evolved: Upon processing specific L2 traffic, rpd can hang in devices with EVPN/VXLAN configured

Junos OS and Junos OS Evolved: Receipt of a malformed LLDP TLV results in l2cpd crash

Junos OS Evolved: Flapping management interface causes MAC learning on label-switched interfaces to stop

Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash

Junos OS and Junos OS Evolved: On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to crash

Junos OS and Junos OS Evolved: Receipt of specially crafted BGP update packet causes RPD crash

Junos OS and Junos OS Evolved: A high frequency of connecting and disconnecting NETCONF sessions causes management unavailability

Junos OS Evolved: ACX7024, ACX7024X, ACX7100-32C, ACX7100-48L, ACX7348, ACX7509: When specific valid multicast traffic is received on the L3 interface on a vulnerable device evo-pfemand crashes and restarts

Junos OS Evolved: QFX5000 Series and PTX Series: An attacker sending crafted multicast packets will cause evo-aftmand / evo-pfemand to crash and restart

Junos OS and Junos OS Evolved: Loading a malicious certificate from the CLI may result in a stack-based overflow

Junos OS Evolved: User is not logged out when the console cable is disconnected

Junos OS Evolved: ACX Series: Receipt of specific transit protocol packets is incorrectly processed by the RE

Junos OS and Junos OS Evolved: Optional transitive BGP attribute is modified before propagation to peers causing sessions to flap

Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker

Junos OS Evolved: ACX7000 Series: Ports which have been inadvertently exposed can be reached over the network

Junos OS Evolved: When a control-plane firewall filter refers to a prefix-list with more than 10 entries it's not matching

Junos OS and Junos OS Evolved: A local, low privileged user can access sensitive information

Junos OS and Junos OS Evolved: Executing a specific CLI command when asregex-optimized is configured causes an rpd crash

Junos OS and Junos OS Evolved: Executing a specific show command leads to an rpd crash

Junos OS and Junos OS Evolved: A specific CLI command will cause an RPD crash when rib-sharding and update-threading is enabled

Junos OS and Junos OS Evolved: EX Series, QFX Series, MX Series: A specific 'show l2-learning/ethernet-switching' command causes l2ald crash

Junos OS and Junos OS Evolved: Unix socket used to control the jdhcpd process is world-writable

Junos OS and Junos OS Evolved: Specific low privileged CLI command exposes sensitive information

Junos OS and Junos OS Evolved: Annotate configuration command can be used to change the configuration

Junos OS and Junos OS Evolved: When RIB sharding is configured each time a show command is executed RPD memory leaks

Junos OS and Junos OS Evolved: Configuration of a specific SSH option results in mgd crash

Junos OS and Junos OS Evolved: LSP flap in a specific MPLS scenario leads to rpd crash

Junos OS and Junos OS Evolved: When route validation is enabled, BGP connection establishment failure causes RPD crash

Junos OS Evolved: QFX Series: When sFlow collector reachability changes evo-pfemand process can crash

Junos OS Evolved: Connections to the network and broadcast address accepted

Junos OS and Junos OS Evolved: Device allows login for user with expired password

Junos OS and Junos OS Evolved: Receipt of a specific SNMPv3 request results in memory leak and eventual snmpd crash