Juniper Networks vulnerabilities
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-28962Junos OS: Unauthenticated access vulnerability in J-Web
- CVE-2023-28961Junos OS: ACX Series: IPv6 firewall filter is not installed in PFE when "from next-header ah" is used
- CVE-2023-28960Junos OS Evolved: Docker repository is world-writeable, allowing low-privileged local user to inject files into Docker containers
- CVE-2023-28959Junos OS: QFX10002: PFE wedges and restarts upon receipt of specific malformed packets
- CVE-2023-1697Junos OS: QFX10000 Series, PTX1000 Series: The dcpfe process will crash when a malformed ethernet frame is received
- CVE-2023-22417Junos OS: SRX Series: A memory leak might be observed in IPsec VPN scenario leading to an FPC crash
- CVE-2023-22416Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if SIP ALG is enabled and a malformed SIP packet is received
- CVE-2023-22415Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash when specific H.323 packets are received
- CVE-2023-22414Junos OS: PTX Series and QFX10000 Series: An FPC memory leak is observed when specific EVPN VXLAN Multicast packets are processed
- CVE-2023-22413Junos OS: MX Series: The Multiservices PIC Management Daemon (mspmand) will crash when an IPsec6 tunnel processes specific IPv4 packets
- CVE-2023-22412Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if the SIP ALG is enabled and specific SIP messages are processed
- CVE-2023-22411Junos OS: SRX Series: The flow processing daemon (flowd) will crash when Unified Policies are used with IPv6 and certain dynamic applications are rejected by the device
- CVE-2023-22410Junos OS: MX Series with MPC10/MPC11: When Suspicious Control Flow Detection (scfd) is enabled and an attacker is sending specific traffic, this causes a memory leak.
- CVE-2023-22409Junos OS: SRX Series, MX Series with SPC3: When an inconsistent NAT configuration exists and a specific CLI command is issued the SPC will reboot
- CVE-2023-22408Junos OS: SRX 5000 Series: Upon processing of a specific SIP packet an FPC can crash
- CVE-2023-22407Junos OS and Junos OS Evolved: An RPD crash can happen due to an MPLS TE tunnel configuration change on a directly connected router
- CVE-2023-22406Junos OS and Junos OS Evolved: A memory leak which will ultimately lead to an rpd crash will be observed when a peer interface flaps continuously in a Segment Routing scenario using OSPF
- CVE-2023-22405Junos OS: QFX5k Series, EX46xx Series: MAC limiting feature stops working after PFE restart or device reboot
- CVE-2023-22404Junos OS: SRX Series and MX Series with SPC3: When IPsec VPN is configured iked will core when a specifically formatted payload is received
- CVE-2023-22403Junos OS: QFX10K Series: An ICCP flap will be observed due to excessive specific traffic
- CVE-2023-22402Junos OS Evolved: The kernel might restart in a BGP scenario where "bgp auto-discovery" is enabled and such a neighbor flaps
- CVE-2023-22401Junos OS and Junos OS Evolved: PTX10008, PTX10016: When a specific SNMP MIB is queried the FPC will crash
- CVE-2023-22400Junos OS Evolved: A specific SNMP GET operation and a specific CLI commands cause resources to leak and eventually the evo-pfemand process will crash
- CVE-2023-22399Junos OS: QFX10K Series: PFE crash upon receipt of specific genuine packets when sFlow is enabled
- CVE-2023-22398Junos OS and Junos OS Evolved: RPD might crash when MPLS ping is performed on BGP LSPs
- CVE-2023-22397Junos OS Evolved: PTX10003: An attacker sending specific genuine packets will cause a memory leak in the PFE leading to a Denial of Service
- CVE-2023-22396Junos OS: Receipt of crafted TCP packets destined to the device results in MBUF leak leading to a Denial of Service (DoS)
- CVE-2023-22395Junos OS: In an MPLS scenario the processing of specific packets to the device causes a buffer leak and ultimately a loss of connectivity
- CVE-2023-22394Junos OS: SRX Series and MX Series: Memory leak due to receipt of specially crafted SIP calls
- CVE-2023-22393Junos OS and Junos OS Evolved: RPD crash upon receipt of BGP route with invalid next-hop