JO
Network Security
Junos OS
On CISA KEVExploited in the wild
931
CVEs
8
On KEV
10.0
Max CVSS
141
New 30D
Severity mix
Critical 52High 392Medium 56Low 0
Watch
Add Junos OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1657 | 7.5 | Oct 16 | On SRX Series devices, a vulnerability in the key-management-daemon (kmd) daemon of Juniper Networks Junos OS allows an attacker to spoof packets targeted to IPSec peers before a… Affected: 12.3x48; 12.3x48; 12.3x48; 12.3x48; 12.3x48; 12.3x48; +34 more |
| CVE-2020-1653 | 7.5 | Jul 17 | On Juniper Networks Junos OS devices, a stream of TCP packets sent to the Routing Engine (RE) may cause mbuf leak which can lead to Flexible PIC Concentrator (FPC) crash or the… Affected: 17.4; 17.4; 17.4; 17.4; 17.4; 17.4; +34 more |
| CVE-2020-1650 | 7.5 | Jul 17 | On Juniper Networks Junos MX Series with service card configured, receipt of a stream of specific packets may crash the MS-PIC component on MS-MIC or MS-MPC Affected: 17.2; 17.4; 17.4; 17.4; 17.4; 17.4; +34 more |
| CVE-2020-1649 | 7.5 | Jul 17 | When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2TP, MAP-E, GRE, and… Affected: 17.2; 17.2; 17.2; 17.2; 17.2; 17.2; +34 more |
| CVE-2020-1648 | 7.5 | Jul 17 | On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific BGP packet can lead to a routing process daemon (RPD) crash and restart Affected: 18.2x75; 18.2x75; 18.2x75; 18.2x75; 18.2x75; 19.4; +3 more |
| CVE-2020-1646 | 7.5 | Jul 17 | On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific UPDATE for an EBGP peer can lead to a routing process daemon (RPD) crash and restart Affected: 17.3; 17.4; 18.1 |
| CVE-2020-1644 | 7.5 | Jul 17 | On Juniper Networks Junos OS and Junos OS Evolved devices, the receipt of a specific BGP UPDATE packet causes an internal counter to be incremented incorrectly, which over time… Affected: 17.2x75; 17.2x75; 17.2x75; 17.2x75; 17.2x75; 17.3; +34 more |
| CVE-2020-1640 | 7.5 | Jul 17 | An improper use of a validation framework when processing incoming genuine BGP packets within Juniper Networks RPD (routing protocols process) daemon allows an attacker to crash… Affected: 16.1; 16.1; 17.3; 17.3; 17.3; 17.4; +34 more |
| CVE-2020-1639 | 7.5 | Apr 8 | When an attacker sends a specific crafted Ethernet Operation, Administration, and Maintenance (Ethernet OAM) packet to a target device, it may improperly handle the incoming… Affected: 12.3; 12.3; 12.3; 12.3; 12.3; 12.3; +34 more |
| CVE-2020-1638 | 7.5 | Apr 8 | The FPC (Flexible PIC Concentrator) of Juniper Networks Junos OS and Junos OS Evolved may restart after processing a specific IPv4 packet Affected: 19.2; 19.2; 19.2; 19.2; 19.2; 19.3; +4 more |
| CVE-2020-1634 | 7.5 | Apr 8 | On High-End SRX Series devices, in specific configurations and when specific networking events or operator actions occur, an SPC receiving genuine multicast traffic may core Affected: 12.3x48; 12.3x48; 12.3x48; 12.3x48; 12.3x48; 12.3x48; +11 more |
| CVE-2020-1627 | 7.5 | Apr 8 | A vulnerability in Juniper Networks Junos OS on vMX and MX150 devices may allow an attacker to cause a Denial of Service (DoS) by sending specific packets requiring special… Affected: 18.1; 18.1; 18.1; 18.1; 18.1; 18.2; +32 more |
| CVE-2020-1617 | 7.5 | Apr 8 | This issue occurs on Juniper Networks Junos OS devices which do not support Advanced Forwarding Interface (AFI) / Advanced Forwarding Toolkit (AFT) Affected: 17.4; 17.4; 17.4; 17.4; 17.4; 17.4; +34 more |
| CVE-2020-1613 | 7.5 | Apr 8 | A vulnerability in the BGP FlowSpec implementation may cause a Juniper Networks Junos OS device to terminate an established BGP session upon receiving a specific BGP FlowSpec… Affected: 12.3; 15.1; 15.1; 15.1; 15.1; 15.1; +34 more |
| CVE-2020-1608 | 7.5 | Jan 15 | Receipt of a specific MPLS or IPv6 packet on the core facing interface of an MX Series device configured for Broadband Edge (BBE) service may trigger a kernel crash (vmcore),… Affected: 17.2; 17.2; 17.2; 17.2; 17.2; 17.2; +34 more |
| CVE-2020-1601 | 7.5 | Jan 15 | Certain types of malformed Path Computation Element Protocol (PCEP) packets when received and processed by a Juniper Networks Junos OS device serving as a Path Computation Client… Affected: 15.1; 15.1; 15.1; 15.1; 15.1; 15.1; +34 more |
| CVE-2019-0075 | 7.5 | Oct 9 | A vulnerability in the srxpfe process on Protocol Independent Multicast (PIM) enabled SRX series devices may lead to crash of the srxpfe process and an FPC reboot while processing… Affected: 12.3x48; 12.3x48; 12.3x48; 12.3x48; 15.1x49; 15.1x49; +34 more |
| CVE-2019-0068 | 7.5 | Oct 9 | The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets Affected: 12.3x48; 12.3x48; 12.3x48; 12.3x48; 12.3x48; 12.3x48; +34 more |
| CVE-2019-0066 | 7.5 | Oct 9 | An unexpected status return value weakness in the Next-Generation Multicast VPN (NG-mVPN) service of Juniper Networks Junos OS allows attacker to cause a Denial of Service (DoS)… Affected: 15.1; 15.1; 15.1; 15.1; 15.1; 15.1; +34 more |
| CVE-2019-0065 | 7.5 | Oct 9 | On MX Series, when the SIP ALG is enabled, receipt of a certain malformed SIP packet may crash the MS-PIC component on MS-MIC or MS-MPC Affected: 16.1; 16.1; 16.1; 16.1; 16.1; 16.1; +34 more |
| CVE-2019-0064 | 7.5 | Oct 9 | On SRX5000 Series devices, if 'set security zones security-zone <zone> tcp-rst' is configured, the flowd process may crash when a specific TCP packet is received by the device and… Affected: 18.2; 18.4; 19.2 |
| CVE-2019-0063 | 7.5 | Oct 9 | When an MX Series Broadband Remote Access Server (BRAS) is configured as a Broadband Network Gateway (BNG) with DHCPv6 enabled, jdhcpd might crash when receiving a specific… Affected: 15.1; 15.1; 15.1; 15.1; 15.1; 15.1; +34 more |
| CVE-2019-0060 | 7.5 | Oct 9 | The flowd process, responsible for forwarding traffic in SRX Series services gateways, may crash and restart when processing specific transit IP packets through an IPSec tunnel Affected: 15.1x49; 15.1x49; 15.1x49; 15.1x49; 15.1x49; 15.1x49; +22 more |
| CVE-2019-0059 | 7.5 | Oct 9 | A memory leak vulnerability in the of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending specific commands from a peered BGP… Affected: 18.1; 18.1; 18.1; 18.1; 18.1x75; 18.1x75 |
| CVE-2019-0056 | 7.5 | Oct 9 | This issue only affects devices with three (3) or more MPC10's installed in a single chassis with OSPF enabled and configured on the device Affected: 18.1; 18.1; 18.1; 18.1; 18.1; 18.1; +16 more |
| CVE-2019-0055 | 7.5 | Oct 9 | A vulnerability in the SIP ALG packet processing service of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending specific types… Affected: 12.3x48; 12.3x48; 12.3x48; 12.3x48; 12.3x48; 12.3x48; +33 more |
| CVE-2019-0051 | 7.5 | Oct 9 | SSL-Proxy feature on SRX devices fails to handle a hardware resource limitation which can be exploited by remote SSL/TLS servers to crash the flowd daemon Affected: 12.3x48; 12.3x48; 12.3x48; 12.3x48; 12.3x48; 12.3x48; +34 more |
| CVE-2019-0050 | 7.5 | Oct 9 | Under certain heavy traffic conditions srxpfe process can crash and result in a denial of service condition for the SRX1500 device Affected: 15.1x49; 15.1x49; 15.1x49; 15.1x49; 15.1x49; 15.1x49; +34 more |
| CVE-2019-0052 | 7.5 | Jul 11 | The srxpfe process may crash on SRX Series services gateways when the UTM module processes a specific fragmented HTTP packet Affected: 12.3x48; 12.3x48; 12.3x48; 12.3x48; 12.3x48; 12.3x48; +34 more |
| CVE-2019-0049 | 7.5 | Jul 11 | On Junos devices with the BGP graceful restart helper mode enabled or the BGP graceful restart mechanism enabled, a certain sequence of BGP session restart on a remote peer that… Affected: 16.1; 16.1; 16.1; 16.1; 16.1; 16.1; +34 more |
| CVE-2019-0044 | 7.5 | Apr 10 | Receipt of a specific packet on the out-of-band management interface fxp0 may cause the system to crash and restart (vmcore) Affected: 12.3x48; 12.3x48; 12.3x48; 12.3x48; 12.3x48; 12.3x48; +34 more |
| CVE-2019-0043 | 7.5 | Apr 10 | In MPLS environments, receipt of a specific SNMP packet may cause the routing protocol daemon (RPD) process to crash and restart Affected: 12.1x46; 12.1x46; 12.1x46; 12.1x46; 12.1x46; 12.1x46; +34 more |
| CVE-2019-0037 | 7.5 | Apr 10 | In a Dynamic Host Configuration Protocol version 6 (DHCPv6) environment, the jdhcpd daemon may crash and restart upon receipt of certain DHCPv6 solicit messages received from a… Affected: 15.1; 15.1; 15.1; 15.1; 15.1; 15.1; +34 more |
| CVE-2019-0033 | 7.5 | Apr 10 | A firewall bypass vulnerability in the proxy ARP service of Juniper Networks Junos OS allows an attacker to cause a high CPU condition leading to a Denial of Service (DoS) Affected: 12.1x46 through 12.1x46-d10; 12.1x46-d25 before 12.1x46-d71; 12.3x48 before 12.3x48-d50; 15.1x49 before 15.1x49-d75 |
| CVE-2019-0031 | 7.5 | Apr 10 | Specific IPv6 DHCP packets received by the jdhcpd daemon will cause a memory resource consumption issue to occur on a Junos OS device using the jdhcpd daemon configured to respond… Affected: 17.4 before 17.4r2; 18.1 before 18.1r2 |
| CVE-2019-0028 | 7.5 | Apr 10 | On Junos devices with the BGP graceful restart helper mode enabled or the BGP graceful restart mechanism enabled, a BGP session restart on a remote peer that has the graceful… Affected: 16.1; 16.1; 16.1; 16.1; 16.1; 16.1; +34 more |
| CVE-2019-0019 | 7.5 | Apr 10 | When BGP tracing is enabled an incoming BGP message may cause the Junos OS routing protocol daemon (rpd) process to crash and restart Affected: 16.1; 16.1; 16.1; 16.1; 16.1; 16.1; +33 more |
| CVE-2017-3145 | 7.5 | Jan 16 | Improper fetch cleanup sequencing in the resolver can cause named to crash Affected: 12.1x46-d76; 12.3x48-d70; 15.1x49-d140; 17.4r2; 18.1r2; 18.2r1 |
| CVE-2019-0012 | 7.5 | Jan 15 | Junos OS: rpd crash on VPLS PE upon receipt of specific BGP message Affected: 12.1X46 before 12.1X46-D81; 12.3 before 12.3R12-S12; 12.3X48 before 12.3X48-D76; 14.1X53 before 14.1X53-D48; 15.1 before 15.1F6-S12, 15.1R7-S2; 15.1X49 before 15.1X49-D150; +8 more |
| CVE-2019-0014 | 7.5 | Jan 15 | Junos OS: QFX and PTX Series: FPC process crashes after J-Flow processes a malformed packet Affected: 17.4 before 17.4R2-S1, 17.4R3; 18.1 before 18.1R3-S1, 18.1R4; 18.2 before 18.2R1-S3, 18.2R2; 17.2X75 before 17.2X75-D91, 17.2X75-D100 |
| CVE-2019-0001 | 7.5 | Jan 15 | Junos OS: MX Series: uncontrolled recursion and crash in Broadband Edge subscriber management daemon (bbe-smgd). Affected: 16.1 before 16.1R7-S1; 16.2 before 16.2R2-S7; 17.1 before 17.1R2-S10, 17.1R3; 17.2 before 17.2R3; 17.3 before 17.3R3-S1; 17.4 before 17.4R2; +2 more |
| CVE-2019-0013 | 7.5 | Jan 15 | Junos OS: RPD crash upon receipt of malformed PIM packet Affected: 12.1X46 before 12.1X46-D77; 12.3X48 before 12.3X48-D77; 15.1 before 15.1F6-S10, 15.1R6-S6, 15.1R7; 15.1X49 before 15.1X49-D150; 15.1X53 before 15.1X53-D233, 15.1X53-D59; 16.1 before 16.1R3-S8, 16.1R4-S8, 16.1R7; +5 more |
| CVE-2019-0010 | 7.5 | Jan 15 | Junos OS: SRX Series: Crafted HTTP traffic may cause UTM to consume all mbufs, leading to Denial of Service Affected: 12.1X46 before 12.1X46-D81; 12.3X48 before 12.3X48-D77; 15.1X49 before 15.1X49-D101, 15.1X49-D110 |
| CVE-2018-0062 | 7.5 | Oct 10 | A Denial of Service vulnerability in J-Web service may allow a remote unauthenticated user to cause Denial of Service which may prevent other users to authenticate or to perform… Affected: 12.1x46; 12.1x46; 12.1x46; 12.1x46; 12.1x46; 12.1x46; +34 more |
| CVE-2018-0058 | 7.5 | Oct 10 | Receipt of a specially crafted IPv6 exception packet may be able to trigger a kernel crash (vmcore), causing the device to reboot Affected: 15.1; 15.1; 15.1; 15.1; 15.1; 15.1; +27 more |
| CVE-2018-0049 | 7.5 | Oct 10 | A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to cause the Junos OS kernel to crash Affected: 12.1x46; 12.1x46; 12.3x48; 12.3x48; 12.3; 15.1; +34 more |
| CVE-2018-0048 | 7.5 | Oct 10 | A vulnerability in the Routing Protocols Daemon (RPD) with Juniper Extension Toolkit (JET) support can allow a network based unauthenticated attacker to cause a severe memory… Affected: 17.2; 17.2; 17.2x75; 17.3; 17.3; 17.3; +4 more |
| CVE-2018-15504 | 7.5 | Aug 18 | An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2 Affected: 12.1x46; 12.1x46; 12.1x46; 12.1x46; 12.1x46; 12.1x46; +34 more |
| CVE-2018-15505 | 7.5 | Aug 18 | An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2 Affected: 12.3; 12.3; 12.3; 12.3; 12.3; 12.3; +34 more |
| CVE-2018-0032 | 7.5 | Jul 11 | The receipt of a crafted BGP UPDATE can lead to a routing process daemon (RPD) crash and restart Affected: 16.1x65; 16.1x65; 16.1x65; 16.1x65; 17.2x75; 17.3; +3 more |
The 500 most important CVEs for this product (exploited first, then by severity)