JO
Network Security
Junos OS
On CISA KEVExploited in the wild
933
CVEs
8
On KEV
10.0
Max CVSS
141
New 30D
Severity mix
Critical 52High 394Medium 54Low 0
Watch
Add Junos OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-44199 | 7.5 | Oct 12 | Junos OS: MX Series: In a PTP scenario a prolonged routing protocol churn can trigger an FPC reboot Affected: before 20.4R3-S4; 21.1R1 before 21.1*; 21.2 before 21.2R3-S2; 21.3 before 21.3R3-S5; 21.4 before 21.4R3; 22.1 before 22.1R3; +1 more |
| CVE-2023-44198 | 7.5 | Oct 12 | Junos OS: SRX Series and MX Series: SIP ALG doesn't drop specifically malformed retransmitted SIP packets Affected: 20.4 before 20.4R3-S5; 21.1 before 21.1R3-S4; 21.2 before 21.2R3-S4; 21.3 before 21.3R3-S3; 21.4 before 21.4R3-S2; 22.1 before 22.1R2-S2, 22.1R3; +3 more |
| CVE-2023-44197 | 7.5 | Oct 12 | Junos OS and Junos OS Evolved: An rpd crash may occur when BGP is processing newly learned routes Affected: before 20.4R3-S8; 21.1R1 before 21.1*; 21.2 before 21.2R3-S2; 21.3 before 21.3R3-S5; 21.4 before 21.4R2-S1, 21.4R3-S5 |
| CVE-2023-44192 | 7.5 | Oct 12 | Junos OS: QFX5000 Series: DMA memory leak is observed when specific DHCP packets are transmitted over pseudo-VTEP Affected: before 20.4R3-S6; 21.1 before 21.1R3-S5; 21.2 before 21.2R3-S5; 21.3 before 21.3R3-S4; 21.4 before 21.4R3-S3; 22.1 before 22.1R3-S2; +3 more |
| CVE-2023-44191 | 7.5 | Oct 12 | Junos OS: QFX5000 Series and EX4000 Series: Denial of Service (DoS) on a large scale VLAN due to PFE hogging Affected: 21.1 before 21.1R3-S5; 21.2 before 21.2R3-S5; 21.3 before 21.3R3-S5; 21.4 before 21.4R3-S4; 22.1 before 22.1R3-S3; 22.2 before 22.2R3-S1; +2 more |
| CVE-2023-44185 | 7.5 | Oct 12 | Junos OS and Junos OS Evolved: In an BGP scenario RPD crashes upon receiving and processing a specific malformed ISO VPN BGP UPDATE packet Affected: before 20.4R3-S6; 21.1 before 21.1R3-S5; 21.2 before 21.2R3-S4; 21.3 before 21.3R3-S3; 21.4 before 21.4R3-S3; 22.1 before 22.1R2-S2, 22.1R3; +2 more |
| CVE-2023-44181 | 7.5 | Oct 12 | Junos OS: QFX5k: l2 loop in the overlay impacts the stability in a EVPN/VXLAN environment Affected: before 20.2R3-S6; 20.3 before 20.3R3-S5; 20.4 before 20.4R3-S5; 21.1 before 21.1R3-S4; 21.2 before 21.2R3-S3; 21.3 before 21.3R3-S2; +3 more |
| CVE-2023-44175 | 7.5 | Oct 12 | Junos OS and Junos OS Evolved: Receipt of a specific genuine PIM packet causes RPD crash Affected: before 20.4R3-S7; 21.1 before 21.1R3-S4; 21.2 before 21.2R3-S5; 21.3 before 21.3R3-S4; 21.4 before 21.4R3-S4; 22.1 before 22.1R3-S4; +3 more |
| CVE-2023-36843 | 7.5 | Oct 12 | Junos OS: SRX Series: The PFE will crash on receiving malformed SSL traffic when Sky ATP is enabled Affected: before 20.4R3-S8; 21.1R1 before 21.1*; 21.2 before 21.2R3-S6; 21.3 before 21.3R3-S5; 21.4 before 21.4R3-S5; 22.1 before 22.1R3-S4; +3 more |
| CVE-2023-36841 | 7.5 | Oct 12 | Junos OS: MX Series: Receipt of malformed TCP traffic will cause a Denial of Service Affected: before 20.4R3-S7; 21.1R1 before 21.1*; 21.2 before 21.2R3-S6; 21.3 before 21.3R3-S5; 21.4 before 21.4R3-S3; 22.1 before 22.1R3-S4; +3 more |
| CVE-2023-44186 | 7.5 | Oct 11 | Junos OS and Junos OS Evolved: RPD crash when attempting to send a very long AS PATH to a non-4-byte-AS capable BGP neighbor Affected: before 20.4R3-S8; 21.1R1 before 21.1*; 21.2 before 21.2R3-S6; 21.3 before 21.3R3-S5; 21.4 before 21.4R3-S5; 22.1 before 22.1R3-S4; +3 more |
| CVE-2023-4481 | 7.5 | Aug 31 | Junos OS and Junos OS Evolved: A crafted BGP UPDATE message allows a remote attacker to de-peer (reset) BGP sessions (CVE-2023-4481) Affected: before 20.4R3-S10; 21.2 before 21.2R3-S5; 21.3 before 21.3R3-S5; 21.4 before 21.4R3-S7; 22.1 before 22.1R3-S4; 22.2 before 22.2R3-S3; +4 more |
| CVE-2023-36835 | 7.5 | Jul 14 | Junos OS: QFX10000 Series: All traffic will be dropped after a specific valid IP packet has been received which needs to be routed over a VXLAN tunnel Affected: 20.3 before 20.3*; 20.4 before 20.4R3-S5; 21.1 before 21.1R3-S5; 21.2 before 21.2R3-S5; 21.3 before 21.3R3-S4; 21.4 before 21.4R3-S1; +3 more |
| CVE-2023-28985 | 7.5 | Jul 14 | SRX Series and MX Series: An FPC core is observed when IDP is enabled on the device and a specific malformed SSL packet is received Affected: before SigPack 3598 |
| CVE-2023-36832 | 7.5 | Jul 14 | Junos OS: MX Series: PFE crash upon receipt of specific packet destined to an AMS interface Affected: before 19.1R3-S10; 19.2 before 19.2R3-S7; 19.3 before 19.3R3-S8; 19.4 before 19.4R3-S12; 20.2 before 20.2R3-S8; 20.4 before 20.4R3-S7; +8 more |
| CVE-2023-36831 | 7.5 | Jul 14 | Junos OS: SRX Series: jbuf memory leak when SSL Proxy and UTM Web-Filtering is applied Affected: 22.2 before 22.2R3; 22.3 before 22.3R2-S1, 22.3R3; 22.4 before 22.4R1-S2, 22.4R2 |
| CVE-2023-0026 | 7.5 | Jun 21 | 2023-06: Out-of-Cycle Security Bulletin: Junos OS and Junos OS Evolved: A BGP session will flap upon receipt of a specific, optional transitive attribute Affected: before 20.4R3-S8; 21.1 before 21.1*; 21.2 before 21.2R3-S6; 21.3 before 21.3R3-S5; 21.4 before 21.4R3-S4; 22.1 before 22.1R3-S4; +4 more |
| CVE-2023-28967 | 7.5 | Apr 17 | Junos OS and Junos OS Evolved: An attacker sending genuine BGP packets causes an RPD crash Affected: 21.1R1 before 21.1*; 21.2R1 before 21.2*; 21.3R1 before 21.3*; 21.4 before 21.4R3; 22.1 before 22.1R3; 22.2 before 22.2R2 |
| CVE-2023-28964 | 7.5 | Apr 17 | Junos OS and Junos OS Evolved: Malformed BGP flowspec update causes RPD crash Affected: before 18.1R3-S11; 18.2 before 18.2R3-S6; 18.3 before 18.3R3-S4; 18.4 before 18.4R3-S6; 19.1 before 19.1R3-S4; 19.2 before 19.2R3-S1; +5 more |
| CVE-2023-28982 | 7.5 | Apr 17 | Junos OS and Junos OS Evolved: In a BGP rib sharding scenario when a route is frequently updated an rpd memory leak will occur Affected: 20.3 before 20.3R3-S2; 20.4 before 20.4R3-S6; 21.1 before 21.1R3; 21.2 before 21.2R3; 21.3 before 21.3R2 |
| CVE-2023-28976 | 7.5 | Apr 17 | Junos OS: MX Series: If a specific traffic rate goes above the DDoS threshold it will lead to an FPC crash Affected: before 19.1R3-S10; 19.2 before 19.2R3-S7; 19.3 before 19.3R3-S8; 19.4 before 19.4R3-S11; 20.2 before 20.2R3-S5; 20.4 before 20.4R3-S6; +5 more |
| CVE-2023-28965 | 7.5 | Apr 17 | Junos OS: QFX10002: Failure of storm control feature may lead to Denial of Service Affected: before 19.3R3-S7; 19.4 before 19.4R3-S11; 20.2 before 20.2R3-S6; 20.4 before 20.4R3-S5; 21.1 before 21.1R3-S4; 21.2 before 21.2R3-S3; +2 more |
| CVE-2023-22417 | 7.5 | Jan 13 | A Missing Release of Memory after Effective Lifetime vulnerability in the Flow Processing Daemon (flowd) of Juniper Networks Junos OS allows a network-based, unauthenticated… Affected: 19.3; 19.3; 19.3; 19.3; 19.3; 19.3; +34 more |
| CVE-2023-22416 | 7.5 | Jan 13 | A Buffer Overflow vulnerability in SIP ALG of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause a Denial of Service (DoS) Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-22415 | 7.5 | Jan 13 | An Out-of-Bounds Write vulnerability in the H.323 ALG of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service (DoS) Affected: before 19.4; 19.4; 19.4; 19.4; 19.4; 19.4; +34 more |
| CVE-2023-22413 | 7.5 | Jan 13 | An Improper Check or Handling of Exceptional Conditions vulnerability in the IPsec library of Juniper Networks Junos OS allows a network-based, unauthenticated attacker to cause… Affected: before 19.4; 19.4; 19.4; 19.4; 19.4; 19.4; +34 more |
| CVE-2023-22412 | 7.5 | Jan 13 | An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series with MS-MPC or MS-MIC card and SRX Series allows an unauthenticated, network-based… Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-22411 | 7.5 | Jan 13 | An Out-of-Bounds Write vulnerability in Flow Processing Daemon (flowd) of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of Service… Affected: 19.2; 19.2; 19.2; 19.2; 19.2; 19.2; +34 more |
| CVE-2023-22408 | 7.5 | Jan 13 | An Improper Validation of Array Index vulnerability in the SIP ALG of Juniper Networks Junos OS on SRX 5000 Series allows a network-based, unauthenticated attacker to cause a… Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2023-22403 | 7.5 | Jan 13 | An Allocation of Resources Without Limits or Throttling vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows a network-based, unauthenticated… Affected: before 20.2; 20.2; 20.2; 20.2; 20.2; 20.2; +34 more |
| CVE-2023-22401 | 7.5 | Jan 13 | An Improper Validation of Array Index vulnerability in the Advanced Forwarding Toolkit Manager daemon (aftmand) of Juniper Networks Junos OS and Junos OS Evolved allows an… Affected: 22.1; 22.1; 22.2; 22.2; 22.2 |
| CVE-2023-22399 | 7.5 | Jan 13 | When sFlow is enabled and it monitors a packet forwarded via ECMP, a buffer management vulnerability in the dcpfe process of Juniper Networks Junos OS on QFX10K Series systems… Affected: 19.4; 19.4; 19.4; 19.4; 19.4; 19.4; +34 more |
| CVE-2023-22396 | 7.5 | Jan 13 | An Uncontrolled Resource Consumption vulnerability in TCP processing on the Routing Engine (RE) of Juniper Networks Junos OS allows an unauthenticated network-based attacker to… Affected: 12.3; 12.3; 15.1; 15.1; 15.1; 17.3; +34 more |
| CVE-2023-22394 | 7.5 | Jan 13 | An Improper Handling of Unexpected Data Type vulnerability in the handling of SIP calls in Juniper Networks Junos OS on SRX Series and MX Series platforms allows an attacker to… Affected: before 19.3; 19.3; 19.3; 19.3; 19.3; 19.3; +34 more |
| CVE-2023-22393 | 7.5 | Jan 13 | An Improper Check for Unusual or Exceptional Conditions vulnerability in BGP route processing of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause Routing… Affected: 21.1; 21.1; 21.1; 21.1; 21.1; 21.1; +32 more |
| CVE-2023-22391 | 7.5 | Jan 13 | A vulnerability in class-of-service (CoS) queue management in Juniper Networks Junos OS on the ACX2K Series devices allows an unauthenticated network-based attacker to cause a… Affected: before 19.4; 19.4; 19.4; 19.4; 19.4; 19.4; +34 more |
| CVE-2022-22184 | 7.5 | Dec 22 | An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker… Affected: 22.3 |
| CVE-2022-22236 | 7.5 | Oct 18 | Junos OS: SRX Series and MX Series: When specific valid SIP packets are received the PFE will crash Affected: 20.4 before 20.4R3-S4; 21.1 before 21.1R3-S2; 21.2 before 21.2R3-S2; 21.3 before 21.3R2-S2, 21.3R3; 21.4 before 21.4R1-S2, 21.4R2; 22.1 before 22.1R1-S1, 22.1R2 |
| CVE-2022-22235 | 7.5 | Oct 18 | Junos OS: SRX Series: A flowd core will be observed when malformed GPRS traffic is processed Affected: 20.2 before 20.2R3-S5; 20.3 before 20.3R3-S4; 20.4 before 20.4R3-S3; 21.1 before 21.1R3-S2; 21.2 before 21.2R3-S1; 21.3 before 21.3R3; +2 more |
| CVE-2022-22232 | 7.5 | Oct 18 | SRX Series: If Unified Threat Management (UTM) Enhanced Content Filtering (CF) is enabled and specific traffic is processed the PFE will crash Affected: 21.4 before 21.4R1-S2, 21.4R2; 22.1 before 22.1R1-S1, 22.1R2 |
| CVE-2022-22231 | 7.5 | Oct 18 | SRX Series: If UTM Enhanced Content Filtering and AntiVirus are enabled, and specific traffic is processed the PFE will crash Affected: 21.4 before 21.4R1-S2, 21.4R2 |
| CVE-2022-22228 | 7.5 | Oct 18 | Junos OS: IPv6 OAM SRv6 network-enabled devices are vulnerable to Denial of Service (DoS) due to RPD memory leak upon receipt of specific a IPv6 packet Affected: 21.1 before 21.1R3-S2; 21.2 before 21.2R3-S1; 21.3 before 21.3R3; 21.4 before 21.4R2; 22.1 before 22.1R2 |
| CVE-2022-22223 | 7.5 | Oct 18 | Junos OS: QFX10000 Series: In IP/MPLS PHP node scenarios upon receipt of certain crafted packets multiple interfaces in LAG configurations may detach. Affected: before 15.1R7-S11; 18.4 before 18.4R2-S10, 18.4R3-S10; 19.1 before 19.1R3-S8; 19.2 before 19.2R3-S4; 19.3 before 19.3R3-S5; 19.4 before 19.4R2-S6, 19.4R3-S7; +7 more |
| CVE-2022-22218 | 7.5 | Oct 18 | Junos OS: SRX Series: Upon processing of a genuine packet the pkid process will crash during CMPv2 auto-re-enrollment Affected: before 19.1R3-S9; 19.2 before 19.2R3-S6; 19.3 before 19.3R3-S7; 19.4 before 19.4R3-S9; 20.2 before 20.2R3-S5; 20.3 before 20.3R3-S4; +5 more |
| CVE-2022-22201 | 7.5 | Oct 18 | SRX5000 Series with SPC3, SRX4000 Series, and vSRX: When PowerMode IPsec is configured, the PFE will crash upon receipt of a malformed ESP packet Affected: before 19.4R2-S6, 19.4R3-S7; 20.1 before 20.1R3-S3; 20.2 before 20.2R3-S4; 20.3 before 20.3R3-S3; 20.4 before 20.4R3-S2; 21.1 before 21.1R3; +2 more |
| CVE-2022-22209 | 7.5 | Jul 20 | A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated network based attacker to cause a Denial of… Affected: 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +9 more |
| CVE-2022-22207 | 7.5 | Jul 20 | A Use After Free vulnerability in the Advanced Forwarding Toolkit (AFT) manager process (aftmand) of Juniper Networks Junos OS allows an unauthenticated networked attacker to… Affected: 20.1; 20.1; 20.1; 20.1; 20.1; 20.1; +34 more |
| CVE-2022-22206 | 7.5 | Jul 20 | A Buffer Overflow vulnerability in the PFE of Juniper Networks Junos OS on SRX series allows an unauthenticated network based attacker to cause a Denial of Service (DoS) Affected: 20.2; 20.2; 20.2; 20.2; 20.2; 20.2; +34 more |
| CVE-2022-22205 | 7.5 | Jul 20 | A Missing Release of Memory after Effective Lifetime vulnerability in the Application Quality of Experience (appqoe) subsystem of the PFE of Juniper Networks Junos OS on SRX… Affected: 20.3; 20.3; 20.3; 20.3; 20.3; 20.3; +24 more |
| CVE-2022-22198 | 7.5 | Apr 14 | An Access of Uninitialized Pointer vulnerability in the SIP ALG of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause a Denial of Service (DoS) Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 21.1; +5 more |
The 500 most important CVEs for this product (exploited first, then by severity)