Juniper SRX5400

Junos OS: SRX Series and MX Series with SPC3: When IPsec VPN is configured iked will core when a specifically formatted payload is received

Junos: FTPS through SRX opens up wide range of data channel TCP ports

Junos OS: SRX and NFX Series: Insufficient Web API private key protection

Junos OS: SRX 4600 and SRX 5000 Series: The receipt of specific genuine packets by SRXes configured for L2 transparency will cause a DoS

Junos OS: User-defined ARP Policer isn't applied on Aggregated Ethernet (AE) interface until firewall process is restarted

Junos OS: MX Series with SPC3, and SRX Series: When IPsec authentication is configured with "hmac-sha-384" and "hmac-sha-512" no authentication of traffic is performed

Junos OS: A malicious crafted IPv6 DHCP packet may cause the JDHCPD daemon to core

SRX Series: Firewall bypass vulnerability when UUID with leading zeros is configured.

Junos OS: SRX Series: The flowd process will crash if log session-close is configured and specific traffic is received

Junos OS: SRX Series: Deleted dynamic VPN users are allowed to establish VPN connections until reboot

Junos OS: SRX Series: A flowd core occurs when running a low privileged CLI command

Junos OS: SRX Series, MX Series with SPC3: When an inconsistent NAT configuration exists and a specific CLI command is issued the SPC will reboot

Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files

Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files

Junos OS: jdhcpd process crash when forwarding a malformed DHCP packet.

Junos OS: MX Series and SRX Series: When receiving a specific SIP packets stale call table entries are created which eventually leads to a DoS for all SIP traffic

Junos OS: SRX Series: Policies that rely on JDPI-Decoder actions may fail open

Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as demonstrated by "Range: x=,".

The SRX Network Security Daemon (nsd) in Juniper SRX Series services gateways with Junos 12.1X44 before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, and 12.3X48 before 12.3X48-D15 allows remote DNS servers to cause a denial of service (crash) via a crafted DNS response.