Juniper QFX10002

Junos OS: QFX5200 and QFX10002: Unintended ONIE partition was shipped with certain Junos OS .bin and .iso images

Junos OS: EX, QFX and MX series: Packet Forwarding Engine manager (FXPC) process crashes due to a crafted HTTP packet in a Virtual Chassis configuration

Junos OS: RPD daemon crashes upon receipt of specific MPLS packet

Security Bulletin: Junos OS: MAC move limit configured to drop traffic may forward traffic.

Junos OS: VM to host privilege escalation in platforms with Junos OS running in a virtualized environment.

Junos OS: SRX Series, QFX Series, MX Series and EX Series: Receiving specific HTTPS traffic causes resource exhaustion

Junos OS: BGP session termination upon receipt of specific BGP FlowSpec advertisement.

Junos OS: Receipt of a specifically crafted malicious MPLS packet leads to a Junos kernel crash.

Junos OS: QFX and PTX Series: FPC process crashes after J-Flow processes a malformed packet

Junos OS: RPD process crashes upon receipt of a specific SNMP packet

Junos OS: PTX/QFX Series: Kernel Routing Table (KRT) queue stuck after packet sampling a malformed packet when the tunnel-observation mpls-over-udp configuration is enabled.

Junos OS: PTX Series, QFX10K Series: Upon receipt of specific packets BFD sessions might flap due to DDoS policer implementation in Packet Forwarding Engine

Junos OS: Cross-Site Scripting (XSS) in J-Web

Junos OS: QFX10000 Series: In IP/MPLS PHP node scenarios upon receipt of certain crafted packets multiple interfaces in LAG configurations may detach.

Junos OS: PTX Series, QFX10K Series: A PTX/QFX FPC may restart unexpectedly with the "inline-Jflow" feature enabled on a large-scale deployment

Junos OS: QFX10K Series: An ICCP flap will be observed due to excessive specific traffic

Junos OS: QFX10000 Series: All traffic will be dropped after a specific valid IP packet has been received which needs to be routed over a VXLAN tunnel

Junos OS: QFX10002: Failure of storm control feature may lead to Denial of Service

Junos OS: EX Series and QFX Series: Memory leak issue processing specific DHCP packets

Junos OS: EX and QFX Series: Console port authentication bypass vulnerability

Junos OS: PTX Series, QFX Series: Due to a race condition input loopback firewall filters applied to interfaces may not operate even when listed in the running configuration.

Junos OS: QFX10K Series: Denial of Service (DoS) upon receipt of crafted MLD packets on multi-homing ESI in VXLAN

Junos OS: QFX10000 Series, PTX1000 Series: The dcpfe process will crash when a malformed ethernet frame is received

Junos OS: PTX Series and QFX10000 Series: An FPC memory leak is observed when specific EVPN VXLAN Multicast packets are processed

Junos OS: QFX10002: PFE wedges and restarts upon receipt of specific malformed packets

Junos OS: User-defined ARP Policer isn't applied on Aggregated Ethernet (AE) interface until firewall process is restarted

Junos OS: QFX10K Series: Denial of Service (DoS) upon receipt of DVMRP packets received on multi-homing ESI in VXLAN.

Junos OS: A malicious crafted IPv6 DHCP packet may cause the JDHCPD daemon to core

Juniper Junos OS before 13.2X51-D40, 14.x before 14.1X53-D30, and 15.x before 15.1X53-D20 on QFX5100 and QFX10002 switches do not have sufficient entropy, which makes it easier for remote attackers to defeat cryptographic encryption and authentication protection mechanisms via unspecified vectors.

Junos OS: NFX150 Series, QFX10K Series, EX9200 Series, MX Series, PTX Series: Path traversal vulnerability in NFX150 and NG-RE leads to information disclosure.

Junos OS: QFX Series and PTX Series: FPC resource usage increases when certain packets are processed which are being VXLAN encapsulated

Junos OS: jdhcpd process crash when forwarding a malformed DHCP packet.

Junos OS: QFX Series: The PFE may crash when a lot of MAC addresses are being learned and aged

Junos OS: PTX Series and QFX10000 Series: 'Etherleak' memory disclosure in Ethernet padding data