Skip to contentJuniper Junos vulnerabilities
- juniper junos, juniper networks junos os +1 moreJunos OS: J-Web can be compromised through reflected XSS attacksCVE-2022-221818.0 High
- isc bind, fedoraproject fedora, juniper junos +9 more +11 moreDNS forwarders - cache poisoning vulnerabilityCVE-2021-25220Fix available6.8 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2300 Series, EX2300-MP Series, EX3400 Series: A slow memory leak due to processing of specific IPv6 packetsCVE-2022-221807.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: jdhcpd crashes upon receiving a specific DHCP packetCVE-2022-221796.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX and SRX series: Flowd core observed if the SIP ALG is enabled and a specific Session Initiation Protocol (SIP) packet is receivedCVE-2022-221787.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: After receiving a specific number of crafted packets snmpd will segmentation fault (SIGSEGV) requiring a manual restart.CVE-2022-221775.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: In a scenario with dhcp-security and option-82 configured jdhcpd crashes upon receipt of a malformed DHCP packetCVE-2022-221767.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series and SRX Series: The flowd daemon will crash if the SIP ALG is enabled and specific SIP messages are processedCVE-2022-221757.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series, EX4600: Device may run out of memory, causing traffic loss, upon receipt of specific IPv6 packetsCVE-2022-221747.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: CRL failing to download causes a memory leak and ultimately a DoSCVE-2022-221737.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An l2cpd memory leak can occur when specific LLDP packets are received leading to a DoSCVE-2022-221726.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Specific packets over VXLAN cause FPC resetCVE-2022-221717.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Specific packets over VXLAN cause FPC memory leak and ultimately resetCVE-2022-221707.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: OSPFv3 session might go into INIT state upon receipt of multiple crafted packets from a trusted neighbor device.CVE-2022-221695.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: vMX and MX150: Specific packets might cause a memory leak and eventually an FPC rebootCVE-2022-221686.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: If no-syn-check is enabled, traffic classified as UNKNOWN gets permitted by pre-id-default-policyCVE-2022-221677.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: An rpd core will occur if BGP update tracing is configured and an update containing a malformed BGP SR-TE policy tunnel attribute is receivedCVE-2022-221666.5 Medium
- juniper junos os evolvedJunos OS Evolved: Telnet service may be enabled when it is expected to be disabled.CVE-2022-221646.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: jdhcpd crashes upon receipt of a specific DHCPv6 packetCVE-2022-221637.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: A low privileged user can elevate their privileges to the ones of the highest privileged j-web user logged inCVE-2022-221627.3 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX104 might become unresponsive if the out-of-band management port receives a flood of trafficCVE-2022-221617.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: The bbe-smgd process crashes if an unsupported configuration exists and a PPPoE client sends a specific messageCVE-2022-221606.5 Medium
- juniper junos, juniper networks junos os, junos os evolved +2 moreJunos OS: An attacker sending crafted packets can cause a traffic and CPU Denial of Service (DoS).CVE-2022-221597.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Traffic classification vulnerability when 'no-syn-check' is enabledCVE-2022-221577.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Certificate validation is skipped when fetching system scripts from a HTTPS URLCVE-2022-221566.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: ACX5448: FPC memory leak due to IPv6 neighbor flapsCVE-2022-221556.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos Fusion: A Satellite Device can be controlled by rewiring it to a foreign AD causing a DoSCVE-2022-221546.8 Medium
- juniper junos, juniper networks junos os +1 moreSRX Series and MX Series with SPC3: A high percentage of fragments might lead to high latency or packet dropsCVE-2022-221537.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: When using J-Web with HTTP an attacker may retrieve encryption keys via Person-in-the-Middle attacks.CVE-2021-313865.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: J-Web: A path traversal vulnerability allows an authenticated attacker to elevate their privileges to rootCVE-2021-313858.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Under a specific device configuration an attacker can access the devices J-Web management services from any interface, regardless of security settings protecting the serviceCVE-2021-313847.2 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In Point to MultiPoint (P2MP) scenarios receipt of various crafted packets causes RPD to core.CVE-2021-313837.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX1000 System, PTX10002-60C System: After upgrading, configured firewall filters may be applied on incorrect interfacesCVE-2021-313826.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: MPC 7/8/9/10/11 cards with MAP-E: PFE halts when an attacker sends malformed IPv4 or IPv6 traffic inside the MAP-E tunnel.CVE-2021-313797.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: An attacker sending spoofed RADIUS messages to a Junos OS device configured for broadband services may cause broadband subscribers to remain stuck in a "Terminating" state.CVE-2021-313786.8 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: A local authenticated attacker can cause RPD to coreCVE-2021-313775.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: ACX Series: Packet Forwarding Engine manager (FXPC) process crashes when processing DHCPv6 packetsCVE-2021-313767.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of a specific BGP update may cause RPKI policy-checks to be bypassedCVE-2021-313757.2 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD crash while processing a specially crafted BGP UPDATE or KEEPALIVE message.CVE-2021-313747.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Persistent XSS vulnerability in J-WebCVE-2021-313738.0 High
- juniper junos, juniper networks junos os +1 moreJunos OS: J-Web allows a locally authenticated attacker to escalate their privileges to root.CVE-2021-313728.8 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series: Traffic from the network internal to the device (128.0.0.0) may be forwarded to egress interfaces.CVE-2021-313715.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series and EX4600 Series: Control traffic might be dropped if a high rate of specific multicast traffic is receivedCVE-2021-313706.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Traffic drops will be observed if MS-MPC/MS-PIC resources are consumed by certain traffic causing a partial DoSCVE-2021-313695.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2300 Series, EX3400 Series, and ACX710 might become unresponsive if the out-of-band management port receives a flood of trafficCVE-2021-313687.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series: An FPC heap memory leak will be triggered by certain Flowspec route operations which can lead to an FPC crashCVE-2021-313676.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: In subscriber management / BBE configuration authd can crash if a subscriber with a specific username tries to login leading to a DoSCVE-2021-313666.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX2300, EX3400 and EX4300 Series: An Aggregated Ethernet (AE) interface will go down due to a stream of specific layer 2 framesCVE-2021-313656.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: The flowd process will crash if log session-close is configured and specific traffic is receivedCVE-2021-313645.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Receipt of a specific LDP message will cause a Denial of ServiceCVE-2021-313636.5 Medium
- Show moreLoading…