Juniper Networks vulnerabilities
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-36840Junos OS and Junos OS Evolved: An rpd crash occurs when a specific L2VPN command is run
- CVE-2023-36836Junos OS and Junos OS Evolved: In a MoFRR scenario an rpd core may be observed when a low privileged CLI command is executed
- CVE-2023-36835Junos OS: QFX10000 Series: All traffic will be dropped after a specific valid IP packet has been received which needs to be routed over a VXLAN tunnel
- CVE-2023-36834Junos OS: SRX 4600 and SRX 5000 Series: The receipt of specific genuine packets by SRXes configured for L2 transparency will cause a DoS
- CVE-2023-36833Junos OS Evolved: PTX10001-36MR, and PTX10004, PTX10008, PTX10016 with LC1201/1202: The aftman-bt process will crash in a MoFRR scenario after multiple link flaps
- CVE-2023-28985SRX Series and MX Series: An FPC core is observed when IDP is enabled on the device and a specific malformed SSL packet is received
- CVE-2023-36838Junos OS: SRX Series: A flowd core occurs when running a low privileged CLI command
- CVE-2023-36832Junos OS: MX Series: PFE crash upon receipt of specific packet destined to an AMS interface
- CVE-2023-36831Junos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is applied
- CVE-2023-00262023-06: Out-of-Cycle Security Bulletin: Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute
- CVE-2023-28984Junos OS: QFX Series: The PFE may crash when a lot of MAC addresses are being learned and aged
- CVE-2023-28983Junos OS Evolved: Shell Injection vulnerability in the gNOI server
- CVE-2023-28982Junos OS and Junos OS Evolved: In a BGP rib sharding scenario when a route is frequently updated an rpd memory leak will occur
- CVE-2023-28981Junos OS and Junos OS Evolved: If malformed IPv6 router advertisements are received, memory corruption will occur which causes an rpd crash
- CVE-2023-28980Junos OS and Junos OS Evolved: In a BGP rib sharding scenario an rpd crash will happen shortly after a specific CLI command is issued
- CVE-2023-28979Junos OS: In a 6PE scenario upon receipt of a specific IPv6 packet an integrity check fails
- CVE-2023-28978Junos OS Evolved: Read access to some confidential user information is possible
- CVE-2023-28976Junos OS: MX Series: If a specific traffic rate goes above the DDoS threshold it will lead to an FPC crash
- CVE-2023-28975Junos OS: The kernel will crash when certain USB devices are inserted
- CVE-2023-28974Junos OS: MX Series: In a BBE scenario upon receipt of specific malformed packets from subscribers the process bbe-smgd will crash
- CVE-2023-28973Junos OS Evolved: The 'sysmanctl' shell command allows a local user to gain access to some administrative actions
- CVE-2023-28972Junos OS: NFX Series: 'set system ports console insecure' allows root password recovery
- CVE-2023-28971Paragon Active Assurance: Enabling the timescaledb enables IP forwarding
- CVE-2023-28970Junos OS: JRR200: Kernel crash upon receipt of a specific packet
- CVE-2023-28968Junos OS: SRX Series: Policies that rely on JDPI-Decoder actions may fail open
- CVE-2023-28967Junos OS and Junos OS Evolved: An attacker sending genuine BGP packets causes an RPD crash
- CVE-2023-28966Junos OS Evolved: Local low-privileged user with shell access can execute CLI commands as root
- CVE-2023-28965Junos OS: QFX10002: Failure of storm control feature may lead to Denial of Service
- CVE-2023-28964Junos OS and Junos OS Evolved: Malformed BGP flowspec update causes RPD crash
- CVE-2023-28963Junos OS: User-controlled input vulnerability in J-Web