Skip to contentJuniper Networks vulnerabilities
Newest
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Due to a race condition the rpd process can crash upon receipt of a BGP update message containing flow spec routeCVE-2022-222205.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD core upon receipt of a specific EVPN route by a BGP route reflector in an EVPN environmentCVE-2022-222195.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Upon processing of a genuine packet the pkid process will crash during CMPv2 auto-re-enrollmentCVE-2022-222187.5 High
- juniper junos os evolvedJunos OS Evolved: PTX Series: Multiple FPCs become unreachable due to continuous polling of specific SNMP OIDCVE-2022-222117.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An rpd crash can occur due to memory corruption caused by flapping BGP sessionsCVE-2022-222085.9 Medium
- juniper junos, juniper networks junos os +1 moreSRX5000 Series with SPC3, SRX4000 Series, and vSRX: When PowerMode IPsec is configured, the PFE will crash upon receipt of a malformed ESP packetCVE-2022-222017.5 High
- juniper junos os evolvedJunos OS Evolved: PTX Series: An attacker can cause a kernel panic by sending a malformed TCP packet to the deviceCVE-2022-221927.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX and EX Series: Local privilege escalation flaw in "download" functionalityCVE-2022-222217.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10K Series: Denial of Service (DoS) upon receipt of crafted MLD packets on multi-homing ESI in VXLANCVE-2022-222176.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series and QFX10000 Series: 'Etherleak' memory disclosure in Ethernet padding dataCVE-2022-222164.3 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: /var/run/<pid>.env files are potentially not deleted during termination of a gRPC connection causing inode exhaustionCVE-2022-222156.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In an MPLS scenario upon receipt of a specific IPv6 packet an FPC will crashCVE-2022-222146.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Denial of Service (DoS) vulnerability in RPD upon receipt of specific BGP updateCVE-2022-222135.9 Medium
- juniper junos os evolvedJunos OS Evolved: A high rate of specific hostbound traffic will cause unexpected hostbound traffic delays or dropsCVE-2022-222127.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series and MX Series: An l2alm crash leading to an FPC crash can be observed in VxLAN scenarioCVE-2022-222106.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: RIB and PFEs can get out of sync due to a memory leak caused by interface flaps or route churnCVE-2022-222097.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series with MPC11: In a GNF / node slicing scenario gathering AF interface statistics can lead to a kernel crashCVE-2022-222077.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX series: The PFE will crash when specific traffic is scanned by Enhanced Web Filtering safe-searchCVE-2022-222067.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: An FPC memory leak can occur in an APBR scenarioCVE-2022-222057.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series and SRX Series: When receiving a specific SIP packets stale call table entries are created which eventually leads to a DoS for all SIP trafficCVE-2022-222045.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4600 Series and QFX5000 Series: Receipt of specific traffic will lead to an fxpc process crash followed by an FPC rebootCVE-2022-222036.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series: FPCs may restart unexpectedly upon receipt of specific MPLS packets with certain multi-unit interface configurationsCVE-2022-222026.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX MS-MPC or MS-MIC, or SRX SPC crashes if it receives a SIP message with a specific contact header formatCVE-2022-221987.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An rpd core will be observed with proxy BGP route-target filtering enabled and certain route add and delete event happeningCVE-2022-221977.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: The rpd CPU spikes to 100% after a malformed ISIS TLV has been receivedCVE-2022-221966.5 Medium
- juniper junos os evolved, juniper networks junos os +1 moreJunos OS Evolved: Specific packets reaching the RE lead to a counter overflow and eventually a crashCVE-2022-221957.5 High
- juniper junos os evolved, juniper networks junos os +1 moreJunos OS Evolved: PTX series: An attacker sending a crafted GRE packet will cause the PFE to restartCVE-2022-221947.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In a BGP rib-sharding scenario when a certain CLI command is executed the rpd process might crashCVE-2022-221935.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300: PFE Denial of Service (DoS) upon receipt of a flood of specific ARP trafficCVE-2022-221916.5 Medium
- juniper paragon active assurance control center, juniper networks paragon active assurance +1 moreParagon Active Assurance Control Center: Information disclosure vulnerability in crafted URLCVE-2022-221907.4 High
- juniper contrail service orchestrationContrail Service Orchestration: An authenticated local user may have their permissions elevated via the device via management interface without authenticationCVE-2022-221897.3 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5100/QFX5110/QFX5120/QFX5200/QFX5210/EX4600/EX4650 Series: When storm control profiling is enabled and a device is under an active storm, a Heap-based Buffer Overflow in the PFE will caus…CVE-2022-221887.5 High
- juniper identity management service, juniper networks identity management service (jims) +1 moreJIMS: Local Privilege Escalation vulnerability via repair functionalityCVE-2022-221877.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4650 Series: Certain traffic received by the Junos OS device on the management interface may be forwarded to egress interfaces instead of discardedCVE-2022-221867.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Denial of service vulnerability in flowd daemon upon receipt of a specific fragmented packetCVE-2022-221857.5 High
- juniper junos os evolved, juniper networks junos os +1 moreJunos OS Evolved: A remote attacker may cause a CPU Denial of Service by sending genuine traffic to a device on a specific IPv4 port.CVE-2022-221837.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: A XSS vulnerability allows an attacker to execute commands on a target J-Web sessionCVE-2022-221828.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: J-Web can be compromised through reflected XSS attacksCVE-2022-221818.0 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2300 Series, EX2300-MP Series, EX3400 Series: A slow memory leak due to processing of specific IPv6 packetsCVE-2022-221807.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: jdhcpd crashes upon receiving a specific DHCP packetCVE-2022-221796.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX and SRX series: Flowd core observed if the SIP ALG is enabled and a specific Session Initiation Protocol (SIP) packet is receivedCVE-2022-221787.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: After receiving a specific number of crafted packets snmpd will segmentation fault (SIGSEGV) requiring a manual restart.CVE-2022-221775.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: In a scenario with dhcp-security and option-82 configured jdhcpd crashes upon receipt of a malformed DHCP packetCVE-2022-221767.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series and SRX Series: The flowd daemon will crash if the SIP ALG is enabled and specific SIP messages are processedCVE-2022-221757.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series, EX4600: Device may run out of memory, causing traffic loss, upon receipt of specific IPv6 packetsCVE-2022-221747.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: CRL failing to download causes a memory leak and ultimately a DoSCVE-2022-221737.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An l2cpd memory leak can occur when specific LLDP packets are received leading to a DoSCVE-2022-221726.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Specific packets over VXLAN cause FPC resetCVE-2022-221717.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Specific packets over VXLAN cause FPC memory leak and ultimately resetCVE-2022-221707.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: OSPFv3 session might go into INIT state upon receipt of multiple crafted packets from a trusted neighbor device.CVE-2022-221695.9 Medium
- Show moreLoading…