Juniper Networks vulnerabilities
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-39544Junos OS Evolved: Low privileged local user able to view NETCONF traceoptions files
- CVE-2024-39534Junos OS Evolved: Connections to the network and broadcast address accepted
- CVE-2024-39527Junos OS: SRX Series: Low privileged user able to access sensitive information on file system
- CVE-2024-39526Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11/LC9600, MX304, EX9200, PTX Series: Receipt of malformed DHCP packets causes interfaces to stop processing packets
- CVE-2024-39525Junos OS and Junos OS Evolved: When BGP traceoptions is enabled, receipt of specially crafted BGP packet causes RPD crash
- CVE-2024-39516Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash
- CVE-2024-39515Junos OS and Junos OS Evolved: With BGP traceoptions enabled, receipt of specifically malformed BGP update causes RPD crash
- CVE-2024-39553Junos OS Evolved: Receipt of arbitrary data when sampling service is enabled, leads to partial Denial of Service (DoS).
- CVE-2024-39552Junos OS and Junos OS Evolved: Malformed BGP UPDATE causes RPD crash
- CVE-2024-39551Junos OS: SRX Series and MX Series with SPC3 and MS-MPC/MIC: Receipt of specific packets in H.323 ALG causes traffic drop
- CVE-2024-39550Junos OS: MX Series with SPC3 line card: Port flaps causes rtlogd memory leak leading to Denial of Service
- CVE-2024-39549Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to a memory leak
- CVE-2024-39548Junos OS Evolved: Receipt of specific packets in the aftmand process will lead to a memory leak
- CVE-2024-39546Junos OS Evolved: Local low-privilege user can gain root permissions leading to privilege escalation
- CVE-2024-39545Junos OS: SRX Series, MX Series with SPC3 and NFX350: When VPN tunnels parameters are not configured in specific way the iked process will crash
- CVE-2024-39543Junos OS and Junos OS Evolved: Receipt of a large RPKI-RTR PDU packet can cause rpd to crash
- CVE-2024-39542Junos OS and Junos OS Evolved: A malformed CFM packet or specific transit traffic leads to FPC crash
- CVE-2024-39541Junos OS and Junos OS Evolved: Inconsistent information in the TE database can lead to an rpd crash
- CVE-2024-39540Junos OS: SRX Series, and MX Series with SPC3: Specific valid TCP traffic can cause a pfe crash
- CVE-2024-39539Junos OS: MX Series: Continuous subscriber logins will lead to a memory leak and eventually an FPC crash
- CVE-2024-39538Junos OS Evolved: ACX7000 Series: When multicast traffic with a specific (S,G) is received evo-pfemand crashes
- CVE-2024-39537Junos OS Evolved: ACX7000 Series: Ports which have been inadvertently exposed can be reached over the network
- CVE-2024-39536Junos OS and Junos OS Evolved: Flaps of BFD sessions with authentication cause a ppmd memory leak
- CVE-2024-39535Junos OS Evolved: ACX 7000 Series: When specific traffic is received in a VPLS scenario evo-pfemand crashes
- CVE-2024-39533Junos OS: QFX5000 Series and EX4600 Series: Output firewall filter is not applied if certain match criteria are used
- CVE-2024-39532Junos OS and Junos OS Evolved: Confidential information in logs can be accessed by another user
- CVE-2024-39531Junos OS Evolved: ACX 7000 Series: Protocol specific DDoS configuration affects other protocols
- CVE-2024-39530Junos OS: Attempting to access specific sensors on platforms not supporting these will lead to a chassisd crash
- CVE-2024-39529Junos OS: SRX Series: If DNS traceoptions are configured in a DGA or tunnel detection scenario specific DNS traffic leads to a PFE crash
- CVE-2024-39528Junos OS and Junos OS Evolved: Concurrent deletion of a routing-instance and receipt of an SNMP request cause an RPD crash