JO
Network Security
Junos OS
On CISA KEVExploited in the wild
932
CVEs
8
On KEV
10.0
Max CVSS
141
New 30D
Severity mix
Critical 52High 393Medium 55Low 0
Watch
Add Junos OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-22201 | 7.5 | Oct 18 | SRX5000 Series with SPC3, SRX4000 Series, and vSRX: When PowerMode IPsec is configured, the PFE will crash upon receipt of a malformed ESP packet Affected: before 19.4R2-S6, 19.4R3-S7; 20.1 before 20.1R3-S3; 20.2 before 20.2R3-S4; 20.3 before 20.3R3-S3; 20.4 before 20.4R3-S2; 21.1 before 21.1R3; +2 more |
| CVE-2022-22209 | 7.5 | Jul 20 | A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated network based attacker to cause a Denial of… Affected: 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +9 more |
| CVE-2022-22207 | 7.5 | Jul 20 | A Use After Free vulnerability in the Advanced Forwarding Toolkit (AFT) manager process (aftmand) of Juniper Networks Junos OS allows an unauthenticated networked attacker to… Affected: 20.1; 20.1; 20.1; 20.1; 20.1; 20.1; +34 more |
| CVE-2022-22206 | 7.5 | Jul 20 | A Buffer Overflow vulnerability in the PFE of Juniper Networks Junos OS on SRX series allows an unauthenticated network based attacker to cause a Denial of Service (DoS) Affected: 20.2; 20.2; 20.2; 20.2; 20.2; 20.2; +34 more |
| CVE-2022-22205 | 7.5 | Jul 20 | A Missing Release of Memory after Effective Lifetime vulnerability in the Application Quality of Experience (appqoe) subsystem of the PFE of Juniper Networks Junos OS on SRX… Affected: 20.3; 20.3; 20.3; 20.3; 20.3; 20.3; +24 more |
| CVE-2022-22198 | 7.5 | Apr 14 | An Access of Uninitialized Pointer vulnerability in the SIP ALG of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause a Denial of Service (DoS) Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 21.1; +5 more |
| CVE-2022-22197 | 7.5 | Apr 14 | An Operation on a Resource after Expiration or Release vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an… Affected: before 17.3; 17.3; 17.3; 17.3; 17.3; 17.3; +34 more |
| CVE-2022-22188 | 7.5 | Apr 14 | An Uncontrolled Memory Allocation vulnerability leading to a Heap-based Buffer Overflow in the packet forwarding engine (PFE) of Juniper Networks Junos OS allows a network-based… Affected: 20.2; 20.2; 20.2; 20.2 |
| CVE-2022-22185 | 7.5 | Apr 14 | A vulnerability in Juniper Networks Junos OS on SRX Series, allows a network-based unauthenticated attacker to cause a Denial of Service (DoS) by sending a specific fragmented… Affected: 18.3; 18.3; 18.3; 18.3; 18.3; 18.3; +34 more |
| CVE-2022-22180 | 7.5 | Jan 19 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the processing of specific IPv6 packets on certain EX Series devices may lead to exhaustion of DMA memory… Affected: 18.4; 18.4; 18.4; 18.4; 18.4; 18.4; +34 more |
| CVE-2022-22178 | 7.5 | Jan 19 | A Stack-based Buffer Overflow vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on MX Series and SRX series allows an unauthenticated networked… Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +7 more |
| CVE-2022-22177 | 7.5 | Jan 19 | A release of illegal memory vulnerability in the snmpd daemon of Juniper Networks Junos OS, Junos OS Evolved allows an attacker to halt the snmpd daemon causing a sustained Denial… Affected: 12.3; 12.3; 12.3; 12.3; 12.3; 12.3; +34 more |
| CVE-2022-22175 | 7.5 | Jan 19 | An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated networked attacker to cause a flowprocessing… Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +7 more |
| CVE-2022-22174 | 7.5 | Jan 19 | A vulnerability in the processing of inbound IPv6 packets in Juniper Networks Junos OS on QFX5000 Series and EX4600 switches may cause the memory to not be freed, leading to a… Affected: 18.3; 18.3; 18.3; 18.3; 18.3; 18.3; +34 more |
| CVE-2022-22173 | 7.5 | Jan 19 | A Missing Release of Memory after Effective Lifetime vulnerability in the Public Key Infrastructure daemon (pkid) of Juniper Networks Junos OS allows an unauthenticated networked… Affected: before 18.3; 18.3; 18.3; 18.3; 18.3; 18.3; +34 more |
| CVE-2022-22171 | 7.5 | Jan 19 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated networked… Affected: 19.4; 19.4; 19.4; 19.4; 19.4; 19.4; +34 more |
| CVE-2022-22170 | 7.5 | Jan 19 | A Missing Release of Resource after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated networked… Affected: 19.4; 19.4; 19.4; 19.4; 19.4; 19.4; +34 more |
| CVE-2022-22161 | 7.5 | Jan 19 | An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated network based attacker to cause 100% CPU load and the… Affected: through 18.2; 18.3; 18.3; 18.3; 18.3; 18.3; +34 more |
| CVE-2022-22159 | 7.5 | Jan 19 | A vulnerability in the NETISR network queue functionality of Juniper Networks Junos OS kernel allows an attacker to cause a Denial of Service (DoS) by sending crafted genuine… Affected: 17.3; 17.3; 17.3; 17.4; 17.4; 18.1; +13 more |
| CVE-2022-22153 | 7.5 | Jan 19 | An Insufficient Algorithmic Complexity combined with an Allocation of Resources Without Limits or Throttling vulnerability in the flow processing daemon (flowd) of Juniper… Affected: before 18.2; 18.2; 18.2; 18.2; 18.2; 18.2; +34 more |
| CVE-2021-31383 | 7.5 | Oct 19 | In Point to MultiPoint (P2MP) scenarios within established sessions between network or adjacent neighbors the improper use of a source to destination copy write operation combined… Affected: 19.2; 19.2; 19.2; 19.2; 19.2; 19.2; +34 more |
| CVE-2021-31379 | 7.5 | Oct 19 | An Incorrect Behavior Order vulnerability in the MAP-E automatic tunneling mechanism of Juniper Networks Junos OS allows an attacker to send certain malformed IPv4 or IPv6 packets… Affected: 17.2; 17.2; 17.2; 17.2; 17.2; 17.2; +34 more |
| CVE-2021-31378 | 7.5 | Oct 19 | In broadband environments, including but not limited to Enhanced Subscriber Management, (CHAP, PPP, DHCP, etc.), on Juniper Networks Junos OS devices where RADIUS servers are… Affected: 17.3; 17.3; 17.3; 17.3; 17.3; 17.3; +34 more |
| CVE-2021-31376 | 7.5 | Oct 19 | An Improper Input Validation vulnerability in Packet Forwarding Engine manager (FXPC) process of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) by… Affected: 18.4 |
| CVE-2021-31374 | 7.5 | Oct 19 | On Juniper Networks Junos OS and Junos OS Evolved devices processing a specially crafted BGP UPDATE or KEEPALIVE message can lead to a routing process daemon (RPD) crash and… Affected: 17.3; 17.3; 17.3; 17.3; 17.3; 17.3; +34 more |
| CVE-2021-31368 | 7.5 | Oct 19 | An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks JUNOS OS allows an unauthenticated network based attacker to cause 100% CPU load and the… Affected: before 18.1; 18.1; 18.1; 18.1; 18.1; 18.1; +34 more |
| CVE-2021-31353 | 7.5 | Oct 19 | An Improper Handling of Exceptional Conditions vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows an attacker to inject a specific BGP update, causing the… Affected: 19.3; 19.4; 20.2; 20.2; 20.2; 20.3; +5 more |
| CVE-2021-31351 | 7.5 | Oct 19 | An Improper Check for Unusual or Exceptional Conditions in packet processing on the MS-MPC/MS-MIC utilized by Juniper Networks Junos OS allows a malicious attacker to send a… Affected: 17.3; 17.4; 17.4; 17.4; 17.4; 17.4; +24 more |
| CVE-2021-0299 | 7.5 | Oct 19 | An Improper Handling of Exceptional Conditions vulnerability in the processing of a transit or directly received malformed IPv6 packet in Juniper Networks Junos OS results in a… Affected: 19.4; 19.4; 19.4; 19.4; 19.4; 19.4; +12 more |
| CVE-2021-0284 | 7.5 | Aug 17 | A buffer overflow vulnerability in the TCP/IP stack of Juniper Networks Junos OS allows an attacker to send specific sequences of packets to the device thereby causing a Denial of… Affected: 12.3; 12.3; 12.3; 12.3; 12.3; 12.3; +34 more |
| CVE-2021-0285 | 7.5 | Jul 15 | An uncontrolled resource consumption vulnerability in Juniper Networks Junos OS on QFX5000 Series and EX4600 Series switches allows an attacker sending large amounts of legitimate… Affected: 15.1; 15.1; 15.1; 15.1; 15.1; 15.1; +34 more |
| CVE-2021-0283 | 7.5 | Jul 15 | A buffer overflow vulnerability in the TCP/IP stack of Juniper Networks Junos OS allows an attacker to send specific sequences of packets to the device thereby causing a Denial of… Affected: 12.3; 12.3; 12.3; 12.3; 12.3; 12.3; +34 more |
| CVE-2021-0282 | 7.5 | Jul 15 | On Juniper Networks Junos OS devices with Multipath or add-path feature enabled, processing a specific BGP UPDATE can lead to a routing process daemon (RPD) crash and restart,… Affected: 12.3; 12.3; 12.3; 12.3; 12.3; 12.3; +34 more |
| CVE-2021-0281 | 7.5 | Jul 15 | On Juniper Networks Junos OS devices configured with BGP origin validation using Resource Public Key Infrastructure (RPKI) receipt of a specific packet from the RPKI cache server… Affected: 17.3; 17.3; 17.3; 17.3; 17.3; 17.3; +34 more |
| CVE-2021-0280 | 7.5 | Jul 15 | Due to an Improper Initialization vulnerability in Juniper Networks Junos OS on PTX platforms and QFX10K Series with Paradise (PE) chipset-based line cards, ddos-protection… Affected: 17.4; 17.4; 17.4; 17.4; 17.4; 17.4; +34 more |
| CVE-2021-0264 | 7.5 | Apr 22 | A vulnerability in the processing of traffic matching a firewall filter containing a syslog action in Juniper Networks Junos OS on MX Series with MPC10/MPC11 cards installed,… Affected: 19.3; 19.3; 19.3; 19.3; 19.3; 19.3; +28 more |
| CVE-2021-0261 | 7.5 | Apr 22 | A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Captive Portal allows… Affected: 12.3; 12.3; 12.3; 12.3; 12.3; 12.3; +34 more |
| CVE-2021-0250 | 7.5 | Apr 22 | In segment routing traffic engineering (SRTE) environments where the BGP Monitoring Protocol (BMP) feature is enable, a vulnerability in the Routing Protocol Daemon (RPD) process… Affected: 17.4; 17.4; 17.4; 17.4; 17.4; 17.4; +34 more |
| CVE-2021-0233 | 7.5 | Apr 22 | A vulnerability in Juniper Networks Junos OS ACX500 Series, ACX4000 Series, may allow an attacker to cause a Denial of Service (DoS) by sending a high rate of specific packets to… Affected: 17.4; 17.4; 17.4; 17.4; 17.4; 17.4; +17 more |
| CVE-2021-0230 | 7.5 | Apr 22 | On Juniper Networks SRX Series devices with link aggregation (lag) configured, executing any operation that fetches Aggregated Ethernet (AE) interface statistics, including but… Affected: 17.1; 17.1; 17.1; 17.1; 17.2; 17.2; +34 more |
| CVE-2021-0227 | 7.5 | Apr 22 | An improper restriction of operations within the bounds of a memory buffer vulnerability in Juniper Networks Junos OS J-Web on SRX Series devices allows an attacker to cause… Affected: 17.3; 17.3; 17.3; 17.3; 17.3; 17.3; +34 more |
| CVE-2021-0207 | 7.5 | Jan 15 | An improper interpretation conflict of certain data between certain software components within the Juniper Networks Junos OS devices does not allow certain traffic to pass through… Affected: 17.3; 17.3; 17.3; 17.3; 17.3; 17.3; +34 more |
| CVE-2021-0206 | 7.5 | Jan 15 | A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to send a specific packet causing the packet forwarding engine (PFE) to crash and restart,… Affected: 18.3; 18.3; 18.3; 18.3; 18.3; 18.3; +34 more |
| CVE-2021-0202 | 7.5 | Jan 15 | On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPC (Modular Port Concentrator) where Integrated Routing and Bridging (IRB) interface is configured and… Affected: 17.3; 17.4; 18.2; 18.2; 18.3; 18.3; +13 more |
| CVE-2020-1686 | 7.5 | Oct 16 | On Juniper Networks Junos OS devices, receipt of a malformed IPv6 packet may cause the system to crash and restart (vmcore) Affected: 18.4; 18.4; 18.4; 18.4; 18.4; 18.4; +28 more |
| CVE-2020-1684 | 7.5 | Oct 16 | On Juniper Networks SRX Series configured with application identification inspection enabled, receipt of specific HTTP traffic can cause high CPU load utilization, which could… Affected: 12.3x48; 12.3x48; 12.3x48; 12.3x48; 12.3x48; 12.3x48; +34 more |
| CVE-2020-1683 | 7.5 | Oct 16 | On Juniper Networks Junos OS devices, a specific SNMP OID poll causes a memory leak which over time leads to a kernel crash (vmcore) Affected: 17.4; 18.1; 18.1; 18.1; 18.1; 18.1; +34 more |
| CVE-2020-1679 | 7.5 | Oct 16 | On Juniper Networks PTX and QFX Series devices with packet sampling configured using tunnel-observation mpls-over-udp, sampling of a malformed packet can cause the Kernel Routing… Affected: 17.2x75; 17.2x75; 17.2x75; 17.2x75; 17.2x75; 17.2x75; +34 more |
| CVE-2020-1672 | 7.5 | Oct 16 | On Juniper Networks Junos OS devices configured with DHCPv6 relay enabled, receipt of a specific DHCPv6 packet might crash the jdhcpd daemon Affected: 17.3; 17.3; 17.3; 17.3; 17.3; 17.3; +34 more |
| CVE-2020-1671 | 7.5 | Oct 16 | On Juniper Networks Junos OS platforms configured as DHCPv6 local server or DHCPv6 Relay Agent, Juniper Networks Dynamic Host Configuration Protocol Daemon (JDHCPD) process might… Affected: 17.4; 17.4; 17.4; 17.4; 17.4; 17.4; +34 more |
The 500 most important CVEs for this product (exploited first, then by severity)