Browse CVEs

HIGH 7.5 CVE-2019-0056 This issue only affects devices with three (3) or more MPC10's installed in a single chassis with OSPF enabled and configured on the device. An Insuf… Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.5 CVE-2019-0059 A memory leak vulnerability in the of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending specif… Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.5 CVE-2019-0060 The flowd process, responsible for forwarding traffic in SRX Series services gateways, may crash and restart when processing specific transit IP pack… Junos Mitigation only Fix from $1,9502019-10-09 HIGH 7.4 CVE-2019-0054 An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos O… Junos Mitigation only Fix from $1,9502019-10-09 MEDIUM 6.5 CVE-2019-1010232 Juniper juniper/libslax libslax latest version (as of commit 084ddf6ab4a55b59dfa9a53f9c5f14d192c4f8e5 Commits on Sep 1, 2018) is affected by: Buffer … Libslax No fix yet Fix from $1,6002019-07-22 HIGH 7.5 CVE-2019-0043 In MPLS environments, receipt of a specific SNMP packet may cause the routing protocol daemon (RPD) process to crash and restart. By continuously sen… Junos Mitigation only Fix from $1,9502019-04-10 CRITICAL 9.8 CVE-2019-0036 When configuring a stateless firewall filter in Junos OS, terms named using the format "internal-n" (e.g. "internal-1", "internal-2", etc.) are silen… Junos Mitigation only Fix from $2,3002019-04-10 CRITICAL 9.1 CVE-2019-0040 On Junos OS, rpcbind should only be listening to port 111 on the internal routing instance (IRI). External packets destined to port 111 should be dro… Junos Mitigation only Fix from $2,3002019-04-10 HIGH 8.6 CVE-2019-0041 On EX4300-MP Series devices with any lo0 filters applied, transit network traffic may reach the control plane via loopback interface (lo0). The devic… Junos Mitigation only Fix from $1,9502019-04-10 HIGH 7.5 CVE-2019-0019 When BGP tracing is enabled an incoming BGP message may cause the Junos OS routing protocol daemon (rpd) process to crash and restart. While rpd rest… Junos Mitigation only Fix from $1,9502019-04-10 HIGH 7.5 CVE-2019-0028 On Junos devices with the BGP graceful restart helper mode enabled or the BGP graceful restart mechanism enabled, a BGP session restart on a remote p… Junos Mitigation only Fix from $1,9502019-04-10 HIGH 7.5 CVE-2019-0037 In a Dynamic Host Configuration Protocol version 6 (DHCPv6) environment, the jdhcpd daemon may crash and restart upon receipt of certain DHCPv6 solic… Junos Mitigation only Fix from $1,9502019-04-10 MEDIUM 6.8 CVE-2019-0035 When "set system ports console insecure" is enabled, root login is disallowed for Junos OS as expected. However, the root password can be changed usi… Junos Mitigation only Fix from $1,6002019-04-10 MEDIUM 6.5 CVE-2019-0038 Crafted packets destined to the management interface (fxp0) of an SRX340 or SRX345 services gateway may create a denial of service (DoS) condition du… Junos Mitigation only Fix from $1,6002019-04-10 CRITICAL 10.0 CVE-2019-0007 The vMX Series software uses a predictable IP ID Sequence Number. This leaves the system as well as clients connecting through the device susceptible… Junos Mitigation only Fix from $2,3002019-01-15 CRITICAL 9.8 CVE-2019-0006EPSS 5% A certain crafted HTTP packet can trigger an uninitialized function pointer deference vulnerability in the Packet Forwarding Engine manager (fxpc) on… Junos Mitigation only Fix from $2,3002019-01-15 HIGH 8.8 CVE-2019-0017 The Junos Space application, which allows Device Image files to be uploaded, has insufficient validity checking which may allow uploading of maliciou… Junos Space Mitigation only Fix from $1,9502019-01-15 HIGH 7.5 CVE-2019-0010 An SRX Series Service Gateway configured for Unified Threat Management (UTM) may experience a system crash with the error message "mbuf exceed" -- an… Junos Mitigation only Fix from $1,9502019-01-15 MEDIUM 6.5 CVE-2019-0011 The Junos OS kernel crashes after processing a specific incoming packet to the out of band management interface (such as fxp0, me0, em0, vme0) destin… Junos Mitigation only Fix from $1,6002019-01-15 MEDIUM 6.5 CVE-2019-0016 A malicious authenticated user may be able to delete a device from the Junos Space database without the necessary privileges through crafted Ajax int… Junos Space Mitigation only Fix from $1,6002019-01-15 MEDIUM 5.5 CVE-2019-0009 On EX2300 and EX3400 series, high disk I/O operations may disrupt the communication between the routing engine (RE) and the packet forwarding engine … Junos Mitigation only Fix from $1,6002019-01-15 MEDIUM 5.4 CVE-2019-0015 A vulnerability in the SRX Series Service Gateway allows deleted dynamic VPN users to establish dynamic VPN connections until the device is rebooted.… Junos Mitigation only Fix from $1,6002019-01-15 CRITICAL 9.8 CVE-2019-0002 On EX2300 and EX3400 series, stateless firewall filter configuration that uses the action 'policer' in combination with other actions might not take … Junos Mitigation only Fix from $2,3002019-01-15 MEDIUM 5.9 CVE-2019-0003 When a specific BGP flowspec configuration is enabled and upon receipt of a specific matching BGP packet meeting a specific term in the flowspec conf… Junos Mitigation only Fix from $1,6002019-01-15 MEDIUM 5.3 CVE-2019-0005 On EX2300, EX3400, EX4600, QFX3K and QFX5K series, firewall filter configuration cannot perform packet matching on any IPv6 extension headers. This i… Junos Mitigation only Fix from $1,6002019-01-15 HIGH 7.5 CVE-2018-0058 Receipt of a specially crafted IPv6 exception packet may be able to trigger a kernel crash (vmcore), causing the device to reboot. The issue is speci… Junos Mitigation only Fix from $1,9502018-10-10 HIGH 7.5 CVE-2018-0062 A Denial of Service vulnerability in J-Web service may allow a remote unauthenticated user to cause Denial of Service which may prevent other users t… Junos Mitigation only Fix from $1,9502018-10-10 MEDIUM 6.5 CVE-2018-0063 A vulnerability in the IP next-hop index database in Junos OS 17.3R3 may allow a flood of ARP requests, sent to the management interface, to exhaust … Junos Mitigation only Fix from $1,6002018-10-10 MEDIUM 5.9 CVE-2018-0060 An improper input validation weakness in the device control daemon process (dcd) of Juniper Networks Junos OS allows an attacker to cause a Denial of… Junos Mitigation only Fix from $1,6002018-10-10 MEDIUM 5.4 CVE-2018-0059 A persistent cross-site scripting vulnerability in the graphical user interface of ScreenOS may allow a remote authenticated user to inject web scrip… Netscreen Screenos Mitigation only Fix from $1,6002018-10-10