Skip to contentJuniper Networks Junos vulnerabilities
- juniper junos, juniper networks junos os +1 moreJunos OS: Cross-site Scripting (XSS) vulnerability in J-WebCVE-2022-222426.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Vulnerability in J-Web may allow deserialization without authenticationCVE-2022-222418.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An rpd memory leak might be observed while running a specific cli command in a RIB sharding scenarioCVE-2022-222405.5 Medium
- juniper junos os evolvedJunos OS Evolved: The ssh CLI command always runs as root which can lead to privilege escalationCVE-2022-222398.2 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: The rpd process will crash when a malformed incoming RESV message is processedCVE-2022-222385.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Peers not configured for TCP-AO can establish a BGP or LDP session even if authentication is configured locallyCVE-2022-222376.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series and MX Series: When specific valid SIP packets are received the PFE will crashCVE-2022-222367.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: A flowd core will be observed when malformed GPRS traffic is processedCVE-2022-222355.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2300 and EX3400 Series: One of more SFPs might become unavailable when the system is very busyCVE-2022-222345.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In an SR to LDP interworking scenario, with SRMS, when a specific low privileged command is issued on an ABR rpd will crashCVE-2022-222335.5 Medium
- juniper junos, juniper networks junos os +1 moreSRX Series: If Unified Threat Management (UTM) Enhanced Content Filtering (CF) is enabled and specific traffic is processed the PFE will crashCVE-2022-222327.5 High
- juniper junos, juniper networks junos os +1 moreSRX Series: If UTM Enhanced Content Filtering and AntiVirus are enabled, and specific traffic is processed the PFE will crashCVE-2022-222317.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD crash upon receipt of specific OSPFv3 LSAsCVE-2022-222306.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: IPv6 OAM SRv6 network-enabled devices are vulnerable to Denial of Service (DoS) due to RPD memory leak upon receipt of specific a IPv6 packetCVE-2022-222287.5 High
- juniper junos os evolvedJunos OS Evolved: ACX7000 Series: Specific IPv6 transit traffic gets exceptioned to the routing-engine which causes increased CPU utilizationCVE-2022-222275.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300-MP, EX4600, QFX5000 Series: In VxLAN scenarios specific packets processed cause a memory leak leading to a PFE crashCVE-2022-222266.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In a BGP multipath scenario, when one of the contributing routes is flapping often and rapidly, rpd may crashCVE-2022-222255.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: PPMD goes into infinite loop upon receipt of malformed OSPF TLVCVE-2022-222246.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10000 Series: In IP/MPLS PHP node scenarios upon receipt of certain crafted packets multiple interfaces in LAG configurations may detach.CVE-2022-222236.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Due to a race condition the rpd process can crash upon receipt of a BGP update message containing flow spec routeCVE-2022-222205.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD core upon receipt of a specific EVPN route by a BGP route reflector in an EVPN environmentCVE-2022-222195.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Upon processing of a genuine packet the pkid process will crash during CMPv2 auto-re-enrollmentCVE-2022-222187.5 High
- juniper junos os evolvedJunos OS Evolved: PTX Series: Multiple FPCs become unreachable due to continuous polling of specific SNMP OIDCVE-2022-222117.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An rpd crash can occur due to memory corruption caused by flapping BGP sessionsCVE-2022-222085.9 Medium
- juniper junos, juniper networks junos os +1 moreSRX5000 Series with SPC3, SRX4000 Series, and vSRX: When PowerMode IPsec is configured, the PFE will crash upon receipt of a malformed ESP packetCVE-2022-222017.5 High
- juniper junos os evolvedJunos OS Evolved: PTX Series: An attacker can cause a kernel panic by sending a malformed TCP packet to the deviceCVE-2022-221927.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX and EX Series: Local privilege escalation flaw in "download" functionalityCVE-2022-222217.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10K Series: Denial of Service (DoS) upon receipt of crafted MLD packets on multi-homing ESI in VXLANCVE-2022-222176.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series and QFX10000 Series: 'Etherleak' memory disclosure in Ethernet padding dataCVE-2022-222164.3 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: /var/run/<pid>.env files are potentially not deleted during termination of a gRPC connection causing inode exhaustionCVE-2022-222156.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In an MPLS scenario upon receipt of a specific IPv6 packet an FPC will crashCVE-2022-222146.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Denial of Service (DoS) vulnerability in RPD upon receipt of specific BGP updateCVE-2022-222135.9 Medium
- juniper junos os evolvedJunos OS Evolved: A high rate of specific hostbound traffic will cause unexpected hostbound traffic delays or dropsCVE-2022-222127.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series and MX Series: An l2alm crash leading to an FPC crash can be observed in VxLAN scenarioCVE-2022-222106.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: RIB and PFEs can get out of sync due to a memory leak caused by interface flaps or route churnCVE-2022-222097.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series with MPC11: In a GNF / node slicing scenario gathering AF interface statistics can lead to a kernel crashCVE-2022-222077.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX series: The PFE will crash when specific traffic is scanned by Enhanced Web Filtering safe-searchCVE-2022-222067.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: An FPC memory leak can occur in an APBR scenarioCVE-2022-222057.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series and SRX Series: When receiving a specific SIP packets stale call table entries are created which eventually leads to a DoS for all SIP trafficCVE-2022-222045.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4600 Series and QFX5000 Series: Receipt of specific traffic will lead to an fxpc process crash followed by an FPC rebootCVE-2022-222036.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series: FPCs may restart unexpectedly upon receipt of specific MPLS packets with certain multi-unit interface configurationsCVE-2022-222026.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX MS-MPC or MS-MIC, or SRX SPC crashes if it receives a SIP message with a specific contact header formatCVE-2022-221987.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An rpd core will be observed with proxy BGP route-target filtering enabled and certain route add and delete event happeningCVE-2022-221977.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: The rpd CPU spikes to 100% after a malformed ISIS TLV has been receivedCVE-2022-221966.5 Medium
- juniper junos os evolved, juniper networks junos os +1 moreJunos OS Evolved: Specific packets reaching the RE lead to a counter overflow and eventually a crashCVE-2022-221957.5 High
- juniper junos os evolved, juniper networks junos os +1 moreJunos OS Evolved: PTX series: An attacker sending a crafted GRE packet will cause the PFE to restartCVE-2022-221947.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In a BGP rib-sharding scenario when a certain CLI command is executed the rpd process might crashCVE-2022-221935.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300: PFE Denial of Service (DoS) upon receipt of a flood of specific ARP trafficCVE-2022-221916.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5100/QFX5110/QFX5120/QFX5200/QFX5210/EX4600/EX4650 Series: When storm control profiling is enabled and a device is under an active storm, a Heap-based Buffer Overflow in the PFE will caus…CVE-2022-221887.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4650 Series: Certain traffic received by the Junos OS device on the management interface may be forwarded to egress interfaces instead of discardedCVE-2022-221867.2 High
- Show moreLoading…