Juniper Networks vulnerabilities
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-21614Junos OS and Junos OS Evolved: A specific query via DREND causes rpd crash
- CVE-2024-21613Junos OS and Junos OS Evolved: A link flap causes patroot memory leak which leads to rpd crash
- CVE-2024-21612Junos OS Evolved: Specific TCP traffic causes OFP core and restart of RE
- CVE-2024-21611Junos OS and Junos OS Evolved: In a jflow scenario continuous route churn will cause a memory leak and eventually an rpd crash
- CVE-2024-21607Junos OS: MX Series and EX9200 Series: If the "tcp-reset" option used in an IPv6 filter, matched packets are accepted instead of rejected
- CVE-2024-21606Junos OS: SRX Series: When "tcp-encap" is configured and specific packets are received flowd will crash
- CVE-2024-21604Junos OS Evolved: A high rate of specific traffic will cause a complete system outage
- CVE-2024-21603Junos OS: MX Series: Gathering statistics in a scaled SCU/DCU configuration will lead to a device crash
- CVE-2024-21602Junos OS Evolved: ACX7024, ACX7100-32C and ACX7100-48L: Traffic stops when a specific IPv4 UDP packet is received by the RE
- CVE-2024-21601Junos OS: SRX Series: Due to an error in processing TCP events flowd will crash
- CVE-2024-21600Junos OS: PTX Series: In an FTI scenario MPLS packets hitting reject next-hop will cause a host path wedge condition
- CVE-2024-21599Junos OS: MX Series: MPC3E memory leak with PTP configuration
- CVE-2024-21597Junos OS: MX Series: In an AF scenario traffic can bypass configured lo0 firewall filters
- CVE-2024-21596Junos OS and Junos OS Evolved: A specific BGP UPDATE message will cause a crash in the backup Routing Engine in NSR-enabled devices
- CVE-2024-21595Junos OS: EX4100, EX4400, EX4600, QFX5000 Series: A high rate of specific ICMP traffic will cause the PFE to hang
- CVE-2024-21594Junos OS: SRX 5000 Series: Repeated execution of a specific CLI command causes a flowd crash
- CVE-2024-21591Junos OS: SRX Series and EX Series: Security Vulnerability in J-web allows a preAuth Remote Code Execution
- CVE-2024-21589Paragon Active Assurance Control Center: Information disclosure vulnerability
- CVE-2024-21587Junos OS: MX Series: Memory leak in bbe-smgd process if BFD liveness detection for DHCP subscribers is enabled
- CVE-2024-21585Junos OS and Junos OS Evolved: BGP session flaps on NSR-enabled devices can cause rpd crash
- CVE-2023-36842Junos OS: jdhcpd will hang on receiving a specific DHCP packet
- CVE-2023-44204Junos OS and Junos OS Evolved: The rpd will crash upon receiving a malformed BGP UPDATE message
- CVE-2023-44203Junos OS: QFX5000 Series, EX2300, EX3400, EX4100, EX4400 and EX4600: Packet flooding will occur when IGMP traffic is sent to an isolated VLAN
- CVE-2023-44201Junos OS and Junos OS Evolved: A local attacker can retrieve sensitive information and elevate privileges on the device to an authorized user.
- CVE-2023-44199Junos OS: MX Series: In a PTP scenario a prolonged routing protocol churn can trigger an FPC reboot
- CVE-2023-44198Junos OS: SRX Series and MX Series: SIP ALG doesn't drop specifically malformed retransmitted SIP packets
- CVE-2023-44197Junos OS and Junos OS Evolved: An rpd crash may occur when BGP is processing newly learned routes
- CVE-2023-44196Junos OS Evolved: PTX10003 Series: Packets which are not destined to the router can reach the RE
- CVE-2023-44195Junos OS Evolved: Packets which are not destined to the router can reach the RE
- CVE-2023-44194Junos OS: An unauthenticated attacker with local access to the device can create a backdoor with root privileges