Juniper Networks vulnerabilities
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2022-22223Junos OS: QFX10000 Series: In IP/MPLS PHP node scenarios upon receipt of certain crafted packets multiple interfaces in LAG configurations may detach.
- CVE-2022-22220Junos OS and Junos OS Evolved: Due to a race condition the rpd process can crash upon receipt of a BGP update message containing flow spec route
- CVE-2022-22219Junos OS and Junos OS Evolved: RPD core upon receipt of a specific EVPN route by a BGP route reflector in an EVPN environment
- CVE-2022-22218Junos OS: SRX Series: Upon processing of a genuine packet the pkid process will crash during CMPv2 auto-re-enrollment
- CVE-2022-22211Junos OS Evolved: PTX Series: Multiple FPCs become unreachable due to continuous polling of specific SNMP OID
- CVE-2022-22208Junos OS and Junos OS Evolved: An rpd crash can occur due to memory corruption caused by flapping BGP sessions
- CVE-2022-22201SRX5000 Series with SPC3, SRX4000 Series, and vSRX: When PowerMode IPsec is configured, the PFE will crash upon receipt of a malformed ESP packet
- CVE-2022-22192Junos OS Evolved: PTX Series: An attacker can cause a kernel panic by sending a malformed TCP packet to the device
- CVE-2022-22221Junos OS: SRX and EX Series: Local privilege escalation flaw in "download" functionality
- CVE-2022-22217Junos OS: QFX10K Series: Denial of Service (DoS) upon receipt of crafted MLD packets on multi-homing ESI in VXLAN
- CVE-2022-22216Junos OS: PTX Series and QFX10000 Series: 'Etherleak' memory disclosure in Ethernet padding data
- CVE-2022-22215Junos OS and Junos OS Evolved: /var/run/<pid>.env files are potentially not deleted during termination of a gRPC connection causing inode exhaustion
- CVE-2022-22214Junos OS and Junos OS Evolved: In an MPLS scenario upon receipt of a specific IPv6 packet an FPC will crash
- CVE-2022-22213Junos OS and Junos OS Evolved: Denial of Service (DoS) vulnerability in RPD upon receipt of specific BGP update
- CVE-2022-22212Junos OS Evolved: A high rate of specific hostbound traffic will cause unexpected hostbound traffic delays or drops
- CVE-2022-22210Junos OS: QFX5000 Series and MX Series: An l2alm crash leading to an FPC crash can be observed in VxLAN scenario
- CVE-2022-22209Junos OS: RIB and PFEs can get out of sync due to a memory leak caused by interface flaps or route churn
- CVE-2022-22207Junos OS: MX Series with MPC11: In a GNF / node slicing scenario gathering AF interface statistics can lead to a kernel crash
- CVE-2022-22206Junos OS: SRX series: The PFE will crash when specific traffic is scanned by Enhanced Web Filtering safe-search
- CVE-2022-22205Junos OS: SRX Series: An FPC memory leak can occur in an APBR scenario
- CVE-2022-22204Junos OS: MX Series and SRX Series: When receiving a specific SIP packets stale call table entries are created which eventually leads to a DoS for all SIP traffic
- CVE-2022-22203Junos OS: EX4600 Series and QFX5000 Series: Receipt of specific traffic will lead to an fxpc process crash followed by an FPC reboot
- CVE-2022-22202Junos OS: PTX Series: FPCs may restart unexpectedly upon receipt of specific MPLS packets with certain multi-unit interface configurations
- CVE-2022-22198Junos OS: MX MS-MPC or MS-MIC, or SRX SPC crashes if it receives a SIP message with a specific contact header format
- CVE-2022-22197Junos OS and Junos OS Evolved: An rpd core will be observed with proxy BGP route-target filtering enabled and certain route add and delete event happening
- CVE-2022-22196Junos OS and Junos OS Evolved: The rpd CPU spikes to 100% after a malformed ISIS TLV has been received
- CVE-2022-22195Junos OS Evolved: Specific packets reaching the RE lead to a counter overflow and eventually a crash
- CVE-2022-22194Junos OS Evolved: PTX series: An attacker sending a crafted GRE packet will cause the PFE to restart
- CVE-2022-22193Junos OS and Junos OS Evolved: In a BGP rib-sharding scenario when a certain CLI command is executed the rpd process might crash
- CVE-2022-22191Junos OS: EX4300: PFE Denial of Service (DoS) upon receipt of a flood of specific ARP traffic