Junos OS and Junos OS Evolved: Execution of crafted CLI commands allows for arbitrary shell injection as root

Junos OS and Junos OS Evolved: Privilege escalation to root via CLI command 'request system logout'

Junos OS Evolved: In a dual-RE scenario a locally authenticated attacker with shell privileges can take over the device.

Junos OS Evolved: User is not logged out when the console cable is disconnected

The system console configuration option 'log-out-on-disconnect' In Juniper Networks Junos OS Evolved fails to log out an active CLI session when the console cable is disconnected

Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker

Junos OS and Junos OS Evolved: When a specifically malformed BGP route update is received RPD crashes

Junos OS Evolved: PTX Series: If SRTE tunnels provisioned via PCEP are present and specific gRPC queries are received evo-aftmand crashes

Junos OS and Junos OS Evolved: In an EVPN-MPLS scenario churn of ESI routes causes a memory leak in l2ald

Junos OS and Junos OS Evolved: A high frequency of connecting and disconnecting NETCONF sessions causes management unavailability

Junos OS Evolved: QFX5000 Series and PTX Series: An attacker sending crafted multicast packets will cause evo-aftmand / evo-pfemand to crash and restart

Junos OS and Junos OS Evolved: When telemetry collectors are frequently subscribing and unsubscribing to sensors chassisd or rpd will crash

Junos OS Evolved: Flapping management interface causes MAC learning on label-switched interfaces to stop

Junos OS and Junos OS Evolved: Receipt of specific IS-IS update packet causes memory leak leading to RPD crash

Junos OS Evolved: ACX7024, ACX7024X, ACX7100-32C, ACX7100-48L, ACX7348, ACX7509: When specific valid multicast traffic is received on the L3 interface on a vulnerable device evo-pfemand crashes and restarts

Junos OS Evolved: PTX Series: When a firewall filter rejects traffic these packets are erroneously sent to the RE

Junos OS Evolved: PTX Series except PTX10003: An unauthenticated adjacent attacker sending specific valid traffic can cause a memory leak in cfmman leading to FPC crash and restart

Junos OS and Junos OS Evolved: Receipt of a specific BGP UPDATE causes an rpd crash on devices with BGP multipath configured

Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session reset

Junos OS and Junos OS Evolved: When jflow/sflow is configured continuous logical interface flaps causes rpd crash and restart

Junos OS and Junos OS Evolved: In an EVPN environment, receipt of specifically malformed BGP update causes RPD crash

Junos OS and Junos OS Evolved: LSP flap in a specific MPLS scenario leads to rpd crash

Junos OS and Junos OS Evolved: Receipt of a malformed LLDP TLV results in l2cpd crash

Junos OS and Junos OS Evolved: In an EVPN-VXLAN scenario specific ARP or NDP packets cause FPC to crash

Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash

Junos OS and Junos OS Evolved: Receipt of specially crafted BGP update packet causes RPD crash

Junos OS and Junos OS Evolved: On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to crash

Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #3

Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #2

Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #1

Junos OS Evolved: QFX5000 Series: Configured MAC learning and move limits are not in effect

Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11/LC9600, MX304, EX9200, PTX Series: Receipt of malformed DHCP packets causes interfaces to stop processing packets

Junos OS Evolved: Receipt of arbitrary data when sampling service is enabled, leads to partial Denial of Service (DoS).

Junos OS and Junos OS Evolved: Receipt of a large RPKI-RTR PDU packet can cause rpd to crash

Junos OS and Junos OS Evolved: Inconsistent information in the TE database can lead to an rpd crash

Junos OS Evolved: ACX7000 Series: When multicast traffic with a specific (S,G) is received evo-pfemand crashes

Junos OS Evolved: ACX7000 Series: Ports which have been inadvertently exposed can be reached over the network

Junos OS Evolved: ACX 7000 Series: When specific traffic is received in a VPLS scenario evo-pfemand crashes

Junos OS Evolved: ACX 7000 Series: Multicast traffic is looped in a multihoming EVPN MPLS scenario

Junos OS and Junos OS Evolved: Upon processing specific L2 traffic, rpd can hang in devices with EVPN/VXLAN configured

Junos OS and Junos OS Evolved: Receiving specific traffic on devices with EVPN-VPWS with IGMP-snooping enabled will cause the rpd to crash

Junos OS and Junos OS Evolved: Memory leak due to RSVP neighbor persistent error leading to kernel crash

Junos OS and Junos OS Evolved: Receipt of specific PIM packet causes rpd crash when PIM is configured along with MoFRR

Junos OS Evolved: MAC table changes cause a memory leak

Junos OS and Junos OS Evolved: l2cpd crash upon receipt of a specific TLV

Junos OS Evolved: When MAC learning happens, and an interface gets flapped, the PFE crashes

Junos OS and Junos OS Evolved: When LLDP is enabled and a malformed LLDP packet is received, l2cpd crashes

Junos OS Evolved: Packets which are not destined to the device can reach the RE

A Missing Release of Memory after Effective Lifetime vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated,…

An Improper Validation of Syntactic Correctness of Input vulnerability in Routing Protocol Daemon (rpd) Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated,…