JO
Product
Junos OS Evolved
248
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 2High 95Medium 151Low 0
Watch
Add Junos OS Evolved to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-36849 | 6.5 | Jul 14 | An Improper Check or Handling of Exceptional Conditions vulnerability in the Layer-2 control protocols daemon (l2cpd) of Juniper Networks Junos OS and Junos OS Evolved allows an… Affected: 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +17 more |
| CVE-2023-36833 | 6.5 | Jul 14 | A Use After Free vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS Evolved on PTX10001-36MR, and PTX10004, PTX10008, PTX10016 with LC1201/1202… Affected: 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2023-28981 | 6.5 | Apr 17 | An Improper Input Validation vulnerability in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of… Affected: 20.3; 20.3; 20.3; 20.3; 20.3; 20.4; +26 more |
| CVE-2023-22407 | 6.5 | Jan 13 | An Incomplete Cleanup vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a… Affected: before 19.2; 19.2; 19.2; 19.3; 19.3; 19.4; +16 more |
| CVE-2023-22406 | 6.5 | Jan 13 | A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +15 more |
| CVE-2022-22250 | 6.5 | Oct 18 | Junos OS and Junos OS Evolved: An FPC crash might be seen due to an EVPN MAC entry moving from local to remote Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +22 more |
| CVE-2022-22238 | 6.5 | Oct 18 | Junos OS and Junos OS Evolved: The rpd process will crash when a malformed incoming RESV message is processed Affected: before 20.2; 20.2; 20.2; 20.2; 20.2; 20.2; +30 more |
| CVE-2022-22230 | 6.5 | Oct 18 | Junos OS and Junos OS Evolved: RPD crash upon receipt of specific OSPFv3 LSAs Affected: 18.3; 19.1; 19.1; 19.2; 19.2; 19.3; +34 more |
| CVE-2022-22224 | 6.5 | Oct 18 | Junos OS and Junos OS Evolved: PPMD goes into infinite loop upon receipt of malformed OSPF TLV Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +9 more |
| CVE-2022-22214 | 6.5 | Jul 20 | An Improper Input Validation vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a PFE crash… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +20 more |
| CVE-2022-22196 | 6.5 | Apr 14 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent,… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +7 more |
| CVE-2022-22172 | 6.5 | Jan 19 | A Missing Release of Memory after Effective Lifetime vulnerability in the Layer-2 control protocols daemon (l2cpd) of Juniper Networks Junos OS and Junos OS Evolved allows an… Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +10 more |
| CVE-2021-31363 | 6.5 | Oct 19 | In an MPLS P2MP environment a Loop with Unreachable Exit Condition vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an… Affected: 20.1; 20.1; 20.1; 20.1; 20.1; 20.2; +4 more |
| CVE-2021-31362 | 6.5 | Oct 19 | A Protection Mechanism Failure vulnerability in RPD (routing protocol daemon) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to… Affected: through 20.3; 20.4; 20.4; 20.4; 21.1; 21.1; +1 more |
| CVE-2021-0297 | 6.5 | Oct 19 | A vulnerability in the processing of TCP MD5 authentication in Juniper Networks Junos OS Evolved may allow a BGP or LDP session configured with MD5 authentication to succeed, even… Affected: 20.3; 20.3; 20.3; 20.4; 21.1 |
| CVE-2021-0292 | 6.5 | Jul 15 | An Uncontrolled Resource Consumption vulnerability in the ARP daemon (arpd) and Network Discovery Protocol (ndp) process of Juniper Networks Junos OS Evolved allows a malicious… Affected: 19.4; 19.4; 19.4; 19.4; 20.1; 20.1; +6 more |
| CVE-2021-0291 | 6.5 | Jul 15 | An Exposure of System Data vulnerability in Juniper Networks Junos OS and Junos OS Evolved, where a sensitive system-level resource is not being sufficiently protected, allows a… Affected: 19.2; 19.2; 19.3; 19.3; 19.4; 19.4; +7 more |
| CVE-2021-0287 | 6.5 | Jul 15 | In a Segment Routing ISIS (SR-ISIS)/MPLS environment, on Juniper Networks Junos OS and Junos OS Evolved devices, configured with ISIS Flexible Algorithm for Segment Routing and… Affected: 20.3; 20.3; 20.4 |
| CVE-2021-0239 | 6.5 | Apr 22 | In Juniper Networks Junos OS Evolved, receipt of a stream of specific genuine Layer 2 frames may cause the Advanced Forwarding Toolkit (AFT) manager process (Evo-aftmand),… Affected: 20.4 |
| CVE-2021-0236 | 6.5 | Apr 22 | Due to an improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved the Routing Protocol Daemon (RPD) service, upon receipt of a… Affected: 19.1; 19.1; 19.2; 19.2; 19.3; 19.3; +1 more |
| CVE-2021-0209 | 6.5 | Jan 15 | In Juniper Networks Junos OS Evolved an attacker sending certain valid BGP update packets may cause Junos OS Evolved to access an uninitialized pointer causing RPD to core leading… Affected: 19.4; 19.4; 19.4; 20.1; 20.1; 20.1 |
| CVE-2020-1681 | 6.5 | Oct 16 | Receipt of a specifically malformed NDP packet sent from the local area network (LAN) to a device running Juniper Networks Junos OS Evolved can cause the ndp process to crash,… Affected: 19.2; 19.2; 19.3; 19.4; 19.4; 19.4; +1 more |
| CVE-2020-1678 | 6.5 | Oct 16 | On Juniper Networks Junos OS and Junos OS Evolved platforms with EVPN configured, receipt of specific BGP packets causes a slow memory leak Affected: 19.4; 19.4; 19.4; 20.1; 20.1; 20.2 |
| CVE-2024-39532 | 6.3 | Jul 11 | An Insertion of Sensitive Information into Log File vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with high privileges to… Affected: 22.1; 22.1; 22.1; 22.1; 22.1; 22.1; +9 more |
| CVE-2023-22397 | 6.1 | Jan 13 | An Allocation of Resources Without Limits or Throttling weakness in the memory management of the Packet Forwarding Engine (PFE) on Juniper Networks Junos OS Evolved PTX10003… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +24 more |
| CVE-2026-33794 | 5.9 | Jul 9 | Junos OS Evolved: PTX Series: Receipt of repeated ECMP routing updates results in PFE crash Affected: 24.4; 24.4; 24.4; 25.2; 25.2; 25.2; +1 more |
| CVE-2025-52984 | 5.9 | Jul 11 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker… Affected: before 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; +27 more |
| CVE-2024-47491 | 5.9 | Oct 11 | An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based,… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-39559 | 5.9 | Jul 10 | An Improper Check for Unusual or Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS Evolved may allow a network-based unauthenticated attacker… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39554 | 5.9 | Jul 10 | A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and… Affected: 21.1 before 21.3; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-21585 | 5.9 | Jan 12 | An Improper Handling of Exceptional Conditions vulnerability in BGP session processing of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based… Affected: 21.3; 21.3; 21.3; 21.3; 21.3; 21.3; +34 more |
| CVE-2023-22402 | 5.9 | Jan 13 | A Use After Free vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service (DoS) Affected: 21.3; 21.3; 21.3; 21.3; 21.3; 21.3; +8 more |
| CVE-2022-22225 | 5.9 | Oct 18 | Junos OS and Junos OS Evolved: In a BGP multipath scenario, when one of the contributing routes is flapping often and rapidly, rpd may crash Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +21 more |
| CVE-2022-22220 | 5.9 | Oct 18 | Junos OS and Junos OS Evolved: Due to a race condition the rpd process can crash upon receipt of a BGP update message containing flow spec route Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 21.1; +2 more |
| CVE-2022-22219 | 5.9 | Oct 18 | Junos OS and Junos OS Evolved: RPD core upon receipt of a specific EVPN route by a BGP route reflector in an EVPN environment Affected: 21.3; 21.3; 21.3; 21.3; 21.3; 22.1; +3 more |
| CVE-2022-22208 | 5.9 | Oct 18 | Junos OS and Junos OS Evolved: An rpd crash can occur due to memory corruption caused by flapping BGP sessions Affected: 21.1; 21.1; 21.1; 21.1; 21.1; 21.1; +10 more |
| CVE-2022-22213 | 5.9 | Jul 20 | A vulnerability in Handling of Undefined Values in the routing protocol daemon (RPD) process of Juniper Networks Junos OS and Junos OS Evolved may allow an unauthenticated… Affected: 21.1; 21.1; 21.1; 21.1; 21.1; 21.2; +13 more |
| CVE-2022-22169 | 5.9 | Jan 19 | An Improper Initialization vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker who sends specific packets in… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2 |
| CVE-2025-60011 | 5.8 | Jan 15 | Junos OS and Junos OS Evolved: Optional transitive BGP attribute is modified before propagation to peers causing sessions to flap Affected: before 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; +34 more |
| CVE-2024-47507 | 5.8 | Oct 11 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +27 more |
| CVE-2024-47489 | 5.8 | Oct 11 | An Improper Handling of Exceptional Conditions vulnerability in the Packet Forwarding Engine (pfe) of the Juniper Networks Junos OS Evolved on ACX Series devices allows an… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2021-0225 | 5.8 | Apr 22 | An Improper Check for Unusual or Exceptional Conditions in Juniper Networks Junos OS Evolved may cause the stateless firewall filter configuration which uses the action 'policer'… Affected: 19.1; 19.1; 19.2; 19.2; 19.3; 19.3; +6 more |
| CVE-2024-39528 | 5.7 | Jul 11 | A Use After Free vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated, network-based attacker to cause a… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2026-57025 | 5.5 | Jul 9 | Junos OS and Junos OS Evolved: EX Series, QFX Series, MX Series: A specific 'show l2-learning/ethernet-switching' command causes l2ald crash Affected: before 23.2; 23.2; 23.2; 23.2; 23.2; 23.2; +24 more |
| CVE-2026-33776 | 5.5 | Apr 9 | Junos OS and Junos OS Evolved: Specific low privileged CLI command exposes sensitive information Affected: before 23.2; 23.2; 23.2; 23.2; 23.2; 23.2; +31 more |
| CVE-2025-59961 | 5.5 | Jan 15 | Junos OS and Junos OS Evolved: Unix socket used to control the jdhcpd process is world-writable Affected: before 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; +34 more |
| CVE-2025-59959 | 5.5 | Jan 15 | Junos OS and Junos OS Evolved: Executing a specific show command leads to an rpd crash Affected: before 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; +34 more |
| CVE-2025-52986 | 5.5 | Jul 11 | A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, low… Affected: before 22.2; 22.2; 22.2; 22.2; 22.2; 22.2; +34 more |
| CVE-2025-30655 | 5.5 | Apr 9 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local,… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2025-30654 | 5.5 | Apr 9 | An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the User Interface (UI) of Juniper Networks Junos OS and Junos OS Evolved allows a local,… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |