Skip to contentJuniper Junos vulnerabilities
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In an BGP scenario RPD crashes upon receiving and processing a specific malformed ISO VPN BGP UPDATE packetCVE-2023-441857.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: High CPU load due to specific NETCONF commandCVE-2023-441846.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series, EX4600 Series: In a VxLAN scenario an adjacent attacker within the VxLAN sending genuine packets may cause a DMA memory leak to occur.CVE-2023-441836.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An Unchecked Return Value in multiple users interfaces affects confidentiality and integrity of device operationsCVE-2023-441827.3 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5k: l2 loop in the overlay impacts the stability in a EVPN/VXLAN environmentCVE-2023-441817.5 High
- juniper junos, juniper networks junos os, juniper junos os evolved +2 moreJunos OS : Stack overflow vulnerability in CLI command processingCVE-2023-441785.5 Medium
- juniper junos, juniper networks junos os, juniper junos os evolved +2 moreJunos OS : Stack overflow vulnerability in CLI command processingCVE-2023-441765.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Stack overflow vulnerability in CLI command processingCVE-2023-441775.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Receipt of a specific genuine PIM packet causes RPD crashCVE-2023-441756.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: The PFE will crash on receiving malformed SSL traffic when Sky ATP is enabledCVE-2023-368437.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Receipt of malformed TCP traffic will cause a Denial of ServiceCVE-2023-368417.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An l2cpd crash will occur when specific LLDP packets are receivedCVE-2023-368396.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series and QFX10000 Series: Received flow-routes which aren't installed as the hardware doesn't support them, lead to an FPC heap memory leakCVE-2023-223926.5 Medium
- juniper junos os evolvedJunos OS Evolved: PTX10001, PTX10004, PTX10008, PTX10016: MAC address validation bypass vulnerabilityCVE-2023-441906.1 Medium
- juniper junos os evolvedJunos OS Evolved: PTX10003 Series: MAC address validation bypass vulnerabilityCVE-2023-441896.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: jkdsd crash due to multiple telemetry requestsCVE-2023-441885.3 Medium
- juniper junos os evolvedJunos OS Evolved: 'file copy' CLI command can disclose password to shell usersCVE-2023-441875.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD crash when attempting to send a very long AS PATH to a non-4-byte-AS capable BGP neighborCVE-2023-441867.5 High
- juniper junos, junos os +1 moreJunos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary filesCVE-2023-36851In KEV5.3 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A crafted BGP UPDATE message allows a remote attacker to de-peer (reset) BGP sessions (CVE-2023-4481)CVE-2023-4481EPSS 18.4%7.5 High
- juniper junos, junos os +1 moreJunos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary filesCVE-2023-36846In KEVPublic exploitEPSS 93.5%5.3 Medium
- juniper junos, junos os +1 moreJunos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variableCVE-2023-36845In KEVPublic exploitEPSS 95.1%9.8 Critical
- juniper junos, junos os +1 moreJunos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variablesCVE-2023-36844In KEVPublic exploitEPSS 90.0%5.3 Medium
- juniper junos, junos os +1 moreJunos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary filesCVE-2023-36847In KEVEPSS 83.5%5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: An MPC will crash upon receipt of a malformed CFM packet.CVE-2023-368506.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: The l2cpd will crash when a malformed LLDP packet is receivedCVE-2023-368496.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: The FPC will crash on receiving a malformed CFM packetCVE-2023-368486.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An rpd crash occurs when a specific L2VPN command is runCVE-2023-368405.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In a MoFRR scenario an rpd core may be observed when a low privileged CLI command is executedCVE-2023-368364.7 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10000 Series: All traffic will be dropped after a specific valid IP packet has been received which needs to be routed over a VXLAN tunnelCVE-2023-368357.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX 4600 and SRX 5000 Series: The receipt of specific genuine packets by SRXes configured for L2 transparency will cause a DoSCVE-2023-368346.5 Medium
- juniper junos os evolvedJunos OS Evolved: PTX10001-36MR, and PTX10004, PTX10008, PTX10016 with LC1201/1202: The aftman-bt process will crash in a MoFRR scenario after multiple link flapsCVE-2023-368336.5 Medium
- juniper junos, juniper networks junos os +1 moreSRX Series and MX Series: An FPC core is observed when IDP is enabled on the device and a specific malformed SSL packet is receivedCVE-2023-289857.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: A flowd core occurs when running a low privileged CLI commandCVE-2023-368385.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: PFE crash upon receipt of specific packet destined to an AMS interfaceCVE-2023-368327.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is appliedCVE-2023-368317.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 more2023-06: Out-of-Cycle Security Bulletin: Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attributeCVE-2023-00267.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX Series: The PFE may crash when a lot of MAC addresses are being learned and agedCVE-2023-289845.3 Medium
- juniper junos os evolvedJunos OS Evolved: Shell Injection vulnerability in the gNOI serverCVE-2023-289838.8 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In a BGP rib sharding scenario when a route is frequently updated an rpd memory leak will occurCVE-2023-289827.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: If malformed IPv6 router advertisements are received, memory corruption will occur which causes an rpd crashCVE-2023-289816.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In a BGP rib sharding scenario an rpd crash will happen shortly after a specific CLI command is issuedCVE-2023-289805.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: In a 6PE scenario upon receipt of a specific IPv6 packet an integrity check failsCVE-2023-289794.7 Medium
- juniper junos os evolvedJunos OS Evolved: Read access to some confidential user information is possibleCVE-2023-289785.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: If a specific traffic rate goes above the DDoS threshold it will lead to an FPC crashCVE-2023-289767.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: The kernel will crash when certain USB devices are insertedCVE-2023-289754.6 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: In a BBE scenario upon receipt of specific malformed packets from subscribers the process bbe-smgd will crashCVE-2023-289747.4 High
- juniper junos os evolvedJunos OS Evolved: The 'sysmanctl' shell command allows a local user to gain access to some administrative actionsCVE-2023-289737.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: NFX Series: 'set system ports console insecure' allows root password recoveryCVE-2023-289726.8 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: JRR200: Kernel crash upon receipt of a specific packetCVE-2023-289706.5 Medium
- Show moreLoading…