Skip to contentJuniper Networks Junos Os vulnerabilities
- juniper junos os evolvedJunos OS Evolved: A specific SNMP GET operation and a specific CLI commands cause resources to leak and eventually the evo-pfemand process will crashCVE-2023-224007.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10K Series: PFE crash upon receipt of specific genuine packets when sFlow is enabledCVE-2023-223997.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD might crash when MPLS ping is performed on BGP LSPsCVE-2023-223985.3 Medium
- juniper junos os evolvedJunos OS Evolved: PTX10003: An attacker sending specific genuine packets will cause a memory leak in the PFE leading to a Denial of ServiceCVE-2023-223976.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of crafted TCP packets destined to the device results in MBUF leak leading to a Denial of Service (DoS)CVE-2023-223967.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: In an MPLS scenario the processing of specific packets to the device causes a buffer leak and ultimately a loss of connectivityCVE-2023-223956.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series and MX Series: Memory leak due to receipt of specially crafted SIP callsCVE-2023-223947.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD crash upon receipt of BGP route with invalid next-hopCVE-2023-223937.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: ACX2K Series: Receipt of a high rate of specific traffic will lead to a Denial of Service (DoS)CVE-2023-223917.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute in version 22.3R1CVE-2022-221847.5 High
- juniper junos, juniper networks junos os +1 morecSRX Series: Storing Passwords in a Recoverable Format and software permissions issues allows a local attacker to elevate privilegesCVE-2022-222517.8 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An FPC crash might be seen due to an EVPN MAC entry moving from local to remoteCVE-2022-222506.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: An FPC crash might be seen due to mac-moves within the same bridge domainCVE-2022-222496.5 Medium
- juniper junos os evolvedJunos OS Evolved: Incorrect file permissions can allow low-privileged user to cause another user to execute arbitrary commandsCVE-2022-222487.3 High
- juniper junos os evolvedJunos OS Evolved: Kernel processing of unvalidated TCP segments could lead to a Denial of Service (DoS)CVE-2022-222477.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: PHP file inclusion vulnerability in J-WebCVE-2022-222467.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Path traversal vulnerability in J-WebCVE-2022-222454.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Unauthenticated XPath Injection vulnerability in J-WebCVE-2022-222445.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: XPath Injection vulnerability in J-WebCVE-2022-222434.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Cross-site Scripting (XSS) vulnerability in J-WebCVE-2022-222426.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Vulnerability in J-Web may allow deserialization without authenticationCVE-2022-222418.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An rpd memory leak might be observed while running a specific cli command in a RIB sharding scenarioCVE-2022-222405.5 Medium
- juniper junos os evolvedJunos OS Evolved: The ssh CLI command always runs as root which can lead to privilege escalationCVE-2022-222398.2 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: The rpd process will crash when a malformed incoming RESV message is processedCVE-2022-222385.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Peers not configured for TCP-AO can establish a BGP or LDP session even if authentication is configured locallyCVE-2022-222376.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series and MX Series: When specific valid SIP packets are received the PFE will crashCVE-2022-222367.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: A flowd core will be observed when malformed GPRS traffic is processedCVE-2022-222355.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2300 and EX3400 Series: One of more SFPs might become unavailable when the system is very busyCVE-2022-222345.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In an SR to LDP interworking scenario, with SRMS, when a specific low privileged command is issued on an ABR rpd will crashCVE-2022-222335.5 Medium
- juniper junos, juniper networks junos os +1 moreSRX Series: If Unified Threat Management (UTM) Enhanced Content Filtering (CF) is enabled and specific traffic is processed the PFE will crashCVE-2022-222327.5 High
- juniper junos, juniper networks junos os +1 moreSRX Series: If UTM Enhanced Content Filtering and AntiVirus are enabled, and specific traffic is processed the PFE will crashCVE-2022-222317.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD crash upon receipt of specific OSPFv3 LSAsCVE-2022-222306.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: IPv6 OAM SRv6 network-enabled devices are vulnerable to Denial of Service (DoS) due to RPD memory leak upon receipt of specific a IPv6 packetCVE-2022-222287.5 High
- juniper junos os evolvedJunos OS Evolved: ACX7000 Series: Specific IPv6 transit traffic gets exceptioned to the routing-engine which causes increased CPU utilizationCVE-2022-222275.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300-MP, EX4600, QFX5000 Series: In VxLAN scenarios specific packets processed cause a memory leak leading to a PFE crashCVE-2022-222266.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In a BGP multipath scenario, when one of the contributing routes is flapping often and rapidly, rpd may crashCVE-2022-222255.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: PPMD goes into infinite loop upon receipt of malformed OSPF TLVCVE-2022-222246.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10000 Series: In IP/MPLS PHP node scenarios upon receipt of certain crafted packets multiple interfaces in LAG configurations may detach.CVE-2022-222236.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Due to a race condition the rpd process can crash upon receipt of a BGP update message containing flow spec routeCVE-2022-222205.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD core upon receipt of a specific EVPN route by a BGP route reflector in an EVPN environmentCVE-2022-222195.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Upon processing of a genuine packet the pkid process will crash during CMPv2 auto-re-enrollmentCVE-2022-222187.5 High
- juniper junos os evolvedJunos OS Evolved: PTX Series: Multiple FPCs become unreachable due to continuous polling of specific SNMP OIDCVE-2022-222117.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An rpd crash can occur due to memory corruption caused by flapping BGP sessionsCVE-2022-222085.9 Medium
- juniper junos, juniper networks junos os +1 moreSRX5000 Series with SPC3, SRX4000 Series, and vSRX: When PowerMode IPsec is configured, the PFE will crash upon receipt of a malformed ESP packetCVE-2022-222017.5 High
- juniper junos os evolvedJunos OS Evolved: PTX Series: An attacker can cause a kernel panic by sending a malformed TCP packet to the deviceCVE-2022-221927.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX and EX Series: Local privilege escalation flaw in "download" functionalityCVE-2022-222217.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10K Series: Denial of Service (DoS) upon receipt of crafted MLD packets on multi-homing ESI in VXLANCVE-2022-222176.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series and QFX10000 Series: 'Etherleak' memory disclosure in Ethernet padding dataCVE-2022-222164.3 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: /var/run/<pid>.env files are potentially not deleted during termination of a gRPC connection causing inode exhaustionCVE-2022-222156.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In an MPLS scenario upon receipt of a specific IPv6 packet an FPC will crashCVE-2022-222146.5 Medium
- Show moreLoading…