JO
Network Security
Junos OS
On CISA KEVExploited in the wild
932
CVEs
8
On KEV
10.0
Max CVSS
141
New 30D
Severity mix
Critical 52High 393Medium 55Low 0
Watch
Add Junos OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-21616 | 7.5 | Jan 12 | An Improper Validation of Syntactic Correctness of Input vulnerability in Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated, network-based… Affected: 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-21614 | 7.5 | Jan 12 | An Improper Check for Unusual or Exceptional Conditions vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based,… Affected: 22.2; 22.2; 22.2; 22.2; 22.2; 22.2; +4 more |
| CVE-2024-21611 | 7.5 | Jan 12 | A Missing Release of Memory after Effective Lifetime vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an… Affected: 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +15 more |
| CVE-2024-21606 | 7.5 | Jan 12 | A Double Free vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX Series allows a network-based, unauthenticated attacker to cause a Denial of… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-21597 | 7.5 | Jan 12 | An Exposure of Resource to Wrong Sphere vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based… Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-21595 | 7.5 | Jan 12 | An Improper Validation of Syntactic Correctness of Input vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows a network-based, unauthenticated… Affected: 21.4; 21.4; 21.4; 21.4; 22.1; 22.1; +16 more |
| CVE-2023-44199 | 7.5 | Oct 13 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows a network-based,… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-44198 | 7.5 | Oct 13 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-44197 | 7.5 | Oct 13 | An Out-of-Bounds Write vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-44192 | 7.5 | Oct 13 | An Improper Input Validation vulnerability in the Packet Forwarding Engine of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause memory leak,… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-44191 | 7.5 | Oct 13 | An Allocation of Resources Without Limits or Throttling vulnerability in Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service… Affected: 21.1; 21.1; 21.1; 21.1; 21.1; 21.1; +34 more |
| CVE-2023-44185 | 7.5 | Oct 13 | An Improper Input Validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks allows an attacker to cause a Denial of Service (DoS )to the device upon… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-44181 | 7.5 | Oct 13 | An Improperly Implemented Security Check for Standard vulnerability in storm control of Juniper Networks Junos OS QFX5k devices allows packets to be punted to ARP queue causing a… Affected: before 20.2; 20.2; 20.2; 20.2; 20.2; 20.2; +34 more |
| CVE-2023-44175 | 7.5 | Oct 12 | A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows to send specific genuine PIM packets to the… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-36843 | 7.5 | Oct 12 | An Improper Handling of Inconsistent Special Elements vulnerability in the Junos Services Framework (jsf) module of Juniper Networks Junos OS allows an unauthenticated network… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-36841 | 7.5 | Oct 12 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series allows a unauthenticated… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-44186 | 7.5 | Oct 11 | An Improper Handling of Exceptional Conditions vulnerability in AS PATH processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send a BGP update… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-4481 | 7.5 | Sep 1 | An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-36835 | 7.5 | Jul 14 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on QFX10000 Series allows a network based… Affected: 20.3; 20.3; 20.3; 20.3; 20.3; 20.3; +34 more |
| CVE-2023-28985 | 7.5 | Jul 14 | An Improper Validation of Syntactic Correctness of Input vulnerability in Intrusion Detection and Prevention (IDP) of Juniper Networks SRX Series and MX Series allows an… Affected: All versions, or not specified |
| CVE-2023-36832 | 7.5 | Jul 14 | An Improper Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS on MX Series allows an unauthenticated network-based attacker to… Affected: before 19.1; 19.1; 19.1; 19.1; 19.1; 19.1; +34 more |
| CVE-2023-36831 | 7.5 | Jul 14 | An Improper Check or Handling of Exceptional Conditions vulnerability in the UTM (Unified Threat Management) Web-Filtering feature of Juniper Networks Junos OS on SRX Series… Affected: 22.2; 22.2; 22.2; 22.2; 22.2; 22.2; +6 more |
| CVE-2023-0026 | 7.5 | Jun 21 | An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker… Affected: 15.1 before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-28982 | 7.5 | Apr 17 | A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated,… Affected: 20.3; 20.3; 20.3; 20.3; 20.3; 20.3; +31 more |
| CVE-2023-28976 | 7.5 | Apr 17 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated,… Affected: before 19.1; 19.1; 19.1; 19.1; 19.1; 19.1; +34 more |
| CVE-2023-28967 | 7.5 | Apr 17 | A Use of Uninitialized Resource vulnerability in the Border Gateway Protocol (BGP) software of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated… Affected: 21.1; 21.1; 21.1; 21.1; 21.1; 21.1; +34 more |
| CVE-2023-28965 | 7.5 | Apr 17 | An Improper Check or Handling of Exceptional Conditions within the storm control feature of Juniper Networks Junos OS allows an attacker sending a high rate of traffic to cause a… Affected: before 19.3; 19.3; 19.3; 19.3; 19.3; 19.3; +34 more |
| CVE-2023-28964 | 7.5 | Apr 17 | An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network based,… Affected: before 18.1; 18.1; 18.1; 18.1; 18.1; 18.1; +34 more |
| CVE-2023-22417 | 7.5 | Jan 13 | A Missing Release of Memory after Effective Lifetime vulnerability in the Flow Processing Daemon (flowd) of Juniper Networks Junos OS allows a network-based, unauthenticated… Affected: 19.3; 19.3; 19.3; 19.3; 19.3; 19.3; +34 more |
| CVE-2023-22416 | 7.5 | Jan 13 | A Buffer Overflow vulnerability in SIP ALG of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS) Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-22415 | 7.5 | Jan 13 | An Out-of-Bounds Write vulnerability in the H.323 ALG of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service (DoS) Affected: before 19.4; 19.4; 19.4; 19.4; 19.4; 19.4; +34 more |
| CVE-2023-22413 | 7.5 | Jan 13 | An Improper Check or Handling of Exceptional Conditions vulnerability in the IPsec library of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause… Affected: before 19.4; 19.4; 19.4; 19.4; 19.4; 19.4; +34 more |
| CVE-2023-22412 | 7.5 | Jan 13 | An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series with MS-MPC or MS-MIC card and SRX Series allows an unauthenticated, network-based… Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-22411 | 7.5 | Jan 13 | An Out-of-Bounds Write vulnerability in Flow Processing Daemon (flowd) of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service… Affected: 19.2; 19.2; 19.2; 19.2; 19.2; 19.2; +34 more |
| CVE-2023-22408 | 7.5 | Jan 13 | An Improper Validation of Array Index vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX 5000 Series allows a network-based, unauthenticated attacker to cause a… Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-22403 | 7.5 | Jan 13 | An Allocation of Resources Without Limits or Throttling vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows a network-based, unauthenticated… Affected: before 20.2; 20.2; 20.2; 20.2; 20.2; 20.2; +34 more |
| CVE-2023-22401 | 7.5 | Jan 13 | An Improper Validation of Array Index vulnerability in the Advanced Forwarding Toolkit Manager daemon (aftmand) of Juniper Networks Junos OS and Junos OS Evolved allows an… Affected: 22.1; 22.1; 22.2; 22.2; 22.2 |
| CVE-2023-22399 | 7.5 | Jan 13 | When sFlow is enabled and it monitors a packet forwarded via ECMP, a buffer management vulnerability in the dcpfe process of Juniper Networks Junos OS on QFX10K Series systems… Affected: 19.4; 19.4; 19.4; 19.4; 19.4; 19.4; +34 more |
| CVE-2023-22396 | 7.5 | Jan 13 | An Uncontrolled Resource Consumption vulnerability in TCP processing on the Routing Engine (RE) of Juniper Networks Junos OS allows an unauthenticated network-based attacker to… Affected: 12.3; 12.3; 15.1; 15.1; 15.1; 17.3; +34 more |
| CVE-2023-22394 | 7.5 | Jan 13 | An Improper Handling of Unexpected Data Type vulnerability in the handling of SIP calls in Juniper Networks Junos OS on SRX Series and MX Series platforms allows an attacker to… Affected: before 19.3; 19.3; 19.3; 19.3; 19.3; 19.3; +34 more |
| CVE-2023-22393 | 7.5 | Jan 13 | An Improper Check for Unusual or Exceptional Conditions vulnerability in BGP route processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause Routing… Affected: 21.1; 21.1; 21.1; 21.1; 21.1; 21.1; +32 more |
| CVE-2023-22391 | 7.5 | Jan 13 | A vulnerability in class-of-service (CoS) queue management in Juniper Networks Junos OS on the ACX2K Series devices allows an unauthenticated network-based attacker to cause a… Affected: before 19.4; 19.4; 19.4; 19.4; 19.4; 19.4; +34 more |
| CVE-2022-22184 | 7.5 | Dec 22 | An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker… Affected: 22.3 |
| CVE-2022-22236 | 7.5 | Oct 18 | Junos OS: SRX Series and MX Series: When specific valid SIP packets are received the PFE will crash Affected: 20.4 before 20.4R3-S4; 21.1 before 21.1R3-S2; 21.2 before 21.2R3-S2; 21.3 before 21.3R2-S2, 21.3R3; 21.4 before 21.4R1-S2, 21.4R2; 22.1 before 22.1R1-S1, 22.1R2 |
| CVE-2022-22235 | 7.5 | Oct 18 | Junos OS: SRX Series: A flowd core will be observed when malformed GPRS traffic is processed Affected: 20.2 before 20.2R3-S5; 20.3 before 20.3R3-S4; 20.4 before 20.4R3-S3; 21.1 before 21.1R3-S2; 21.2 before 21.2R3-S1; 21.3 before 21.3R3; +2 more |
| CVE-2022-22232 | 7.5 | Oct 18 | SRX Series: If Unified Threat Management (UTM) Enhanced Content Filtering (CF) is enabled and specific traffic is processed the PFE will crash Affected: 21.4 before 21.4R1-S2, 21.4R2; 22.1 before 22.1R1-S1, 22.1R2 |
| CVE-2022-22231 | 7.5 | Oct 18 | SRX Series: If UTM Enhanced Content Filtering and AntiVirus are enabled, and specific traffic is processed the PFE will crash Affected: 21.4 before 21.4R1-S2, 21.4R2 |
| CVE-2022-22228 | 7.5 | Oct 18 | Junos OS: IPv6 OAM SRv6 network-enabled devices are vulnerable to Denial of Service (DoS) due to RPD memory leak upon receipt of specific a IPv6 packet Affected: 21.1 before 21.1R3-S2; 21.2 before 21.2R3-S1; 21.3 before 21.3R3; 21.4 before 21.4R2; 22.1 before 22.1R2 |
| CVE-2022-22223 | 7.5 | Oct 18 | Junos OS: QFX10000 Series: In IP/MPLS PHP node scenarios upon receipt of certain crafted packets multiple interfaces in LAG configurations may detach. Affected: before 15.1R7-S11; 18.4 before 18.4R2-S10, 18.4R3-S10; 19.1 before 19.1R3-S8; 19.2 before 19.2R3-S4; 19.3 before 19.3R3-S5; 19.4 before 19.4R2-S6, 19.4R3-S7; +7 more |
| CVE-2022-22218 | 7.5 | Oct 18 | Junos OS: SRX Series: Upon processing of a genuine packet the pkid process will crash during CMPv2 auto-re-enrollment Affected: before 19.1R3-S9; 19.2 before 19.2R3-S6; 19.3 before 19.3R3-S7; 19.4 before 19.4R3-S9; 20.2 before 20.2R3-S5; 20.3 before 20.3R3-S4; +5 more |
The 500 most important CVEs for this product (exploited first, then by severity)