Skip to contentJuniper vulnerabilities
Newest
- juniper junos, juniper networks junos os +1 moreJunos OS: jdhcpd will hang on receiving a specific DHCP packetCVE-2023-368426.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: The rpd will crash upon receiving a malformed BGP UPDATE messageCVE-2023-442046.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series, EX2300, EX3400, EX4100, EX4400 and EX4600: Packet flooding will occur when IGMP traffic is sent to an isolated VLANCVE-2023-442036.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A local attacker can retrieve sensitive information and elevate privileges on the device to an authorized user.CVE-2023-442015.0 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: In a PTP scenario a prolonged routing protocol churn can trigger an FPC rebootCVE-2023-441997.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series and MX Series: SIP ALG doesn't drop specifically malformed retransmitted SIP packetsCVE-2023-441985.8 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An rpd crash may occur when BGP is processing newly learned routesCVE-2023-441977.5 High
- juniper junos os evolvedJunos OS Evolved: PTX10003 Series: Packets which are not destined to the router can reach the RECVE-2023-441966.5 Medium
- juniper junos os evolvedJunos OS Evolved: Packets which are not destined to the router can reach the RECVE-2023-441955.4 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: An unauthenticated attacker with local access to the device can create a backdoor with root privilegesCVE-2023-441948.4 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: An FPC crash is observed when CFM is enabled in a VPLS scenario and a specific LDP related command is runCVE-2023-441935.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series: DMA memory leak is observed when specific DHCP packets are transmitted over pseudo-VTEPCVE-2023-441927.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series and EX4000 Series: Denial of Service (DoS) on a large scale VLAN due to PFE hoggingCVE-2023-441917.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In an BGP scenario RPD crashes upon receiving and processing a specific malformed ISO VPN BGP UPDATE packetCVE-2023-441857.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: High CPU load due to specific NETCONF commandCVE-2023-441846.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5000 Series, EX4600 Series: In a VxLAN scenario an adjacent attacker within the VxLAN sending genuine packets may cause a DMA memory leak to occur.CVE-2023-441836.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An Unchecked Return Value in multiple users interfaces affects confidentiality and integrity of device operationsCVE-2023-441827.3 High
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX5k: l2 loop in the overlay impacts the stability in a EVPN/VXLAN environmentCVE-2023-441817.5 High
- juniper junos, juniper networks junos os, juniper junos os evolved +2 moreJunos OS : Stack overflow vulnerability in CLI command processingCVE-2023-441785.5 Medium
- juniper junos, juniper networks junos os, juniper junos os evolved +2 moreJunos OS : Stack overflow vulnerability in CLI command processingCVE-2023-441765.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Stack overflow vulnerability in CLI command processingCVE-2023-441775.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Receipt of a specific genuine PIM packet causes RPD crashCVE-2023-441756.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: The PFE will crash on receiving malformed SSL traffic when Sky ATP is enabledCVE-2023-368437.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Receipt of malformed TCP traffic will cause a Denial of ServiceCVE-2023-368417.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An l2cpd crash will occur when specific LLDP packets are receivedCVE-2023-368396.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX Series and QFX10000 Series: Received flow-routes which aren't installed as the hardware doesn't support them, lead to an FPC heap memory leakCVE-2023-223926.5 Medium
- juniper junos os evolvedJunos OS Evolved: PTX10001, PTX10004, PTX10008, PTX10016: MAC address validation bypass vulnerabilityCVE-2023-441906.1 Medium
- juniper junos os evolvedJunos OS Evolved: PTX10003 Series: MAC address validation bypass vulnerabilityCVE-2023-441896.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: jkdsd crash due to multiple telemetry requestsCVE-2023-441885.3 Medium
- juniper junos os evolvedJunos OS Evolved: 'file copy' CLI command can disclose password to shell usersCVE-2023-441875.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: RPD crash when attempting to send a very long AS PATH to a non-4-byte-AS capable BGP neighborCVE-2023-441867.5 High
- juniper junos, junos os +1 moreJunos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary filesCVE-2023-36851In KEV5.3 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A crafted BGP UPDATE message allows a remote attacker to de-peer (reset) BGP sessions (CVE-2023-4481)CVE-2023-4481EPSS 18.4%7.5 High
- juniper junos, junos os +1 moreJunos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary filesCVE-2023-36846In KEVPublic exploitEPSS 93.5%5.3 Medium
- juniper junos, junos os +1 moreJunos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variableCVE-2023-36845In KEVPublic exploitEPSS 95.1%9.8 Critical
- juniper junos, junos os +1 moreJunos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variablesCVE-2023-36844In KEVPublic exploitEPSS 90.0%5.3 Medium
- juniper junos, junos os +1 moreJunos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary filesCVE-2023-36847In KEVEPSS 83.5%5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: An MPC will crash upon receipt of a malformed CFM packet.CVE-2023-368506.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: The l2cpd will crash when a malformed LLDP packet is receivedCVE-2023-368496.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: The FPC will crash on receiving a malformed CFM packetCVE-2023-368486.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An rpd crash occurs when a specific L2VPN command is runCVE-2023-368405.5 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In a MoFRR scenario an rpd core may be observed when a low privileged CLI command is executedCVE-2023-368364.7 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10000 Series: All traffic will be dropped after a specific valid IP packet has been received which needs to be routed over a VXLAN tunnelCVE-2023-368357.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX 4600 and SRX 5000 Series: The receipt of specific genuine packets by SRXes configured for L2 transparency will cause a DoSCVE-2023-368346.5 Medium
- juniper junos os evolvedJunos OS Evolved: PTX10001-36MR, and PTX10004, PTX10008, PTX10016 with LC1201/1202: The aftman-bt process will crash in a MoFRR scenario after multiple link flapsCVE-2023-368336.5 Medium
- juniper junos, juniper networks junos os +1 moreSRX Series and MX Series: An FPC core is observed when IDP is enabled on the device and a specific malformed SSL packet is receivedCVE-2023-289857.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: A flowd core occurs when running a low privileged CLI commandCVE-2023-368385.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: PFE crash upon receipt of specific packet destined to an AMS interfaceCVE-2023-368327.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is appliedCVE-2023-368317.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 more2023-06: Out-of-Cycle Security Bulletin: Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attributeCVE-2023-00267.5 High
- Show moreLoading…