JO
Product
Junos OS Evolved
271
CVEs
0
On KEV
9.8
Max CVSS
121
New 30D
Severity mix
Critical 11High 108Medium 150Low 2
Watch
Add Junos OS Evolved to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-33801 | 6.5 | Jul 9 | Junos OS and Junos OS Evolved: When a specifically malformed BGP route update is received RPD crashes Affected: 25.2 before 25.2R2-EVO |
| CVE-2026-33783 | 6.5 | Apr 9 | Junos OS Evolved: PTX Series: If SRTE tunnels provisioned via PCEP are present and specific gRPC queries are received evo-aftmand crashes Affected: before 22.4R3-S9-EVO; 23.2 before 23.2R2-S6-EVO; 23.4 before 23.4R2-S7-EVO; 24.2 before 24.2R2-S4-EVO; 24.4 before 24.4R2-S2-EVO; 25.2 before 25.2R1-S2-EVO, 25.2R2-EVO |
| CVE-2026-33780 | 6.5 | Apr 9 | Junos OS and Junos OS Evolved: In an EVPN-MPLS scenario churn of ESI routes causes a memory leak in l2ald Affected: all version prior to before 22.4R3-S5-EVO; 23.2 before 23.2R2-S3-EVO; 23.4 before 23.4R2-S4-EVO; 24.2 before 24.2R2-EVO |
| CVE-2026-21919 | 6.5 | Apr 9 | Junos OS and Junos OS Evolved: A high frequency of connecting and disconnecting NETCONF sessions causes management unavailability Affected: 23.4 before 23.4R2-S5-EVO; 24.2 before 24.2R2-S1-EVO; 24.4 before 24.4R1-S3-EVO, 24.4R2-EVO |
| CVE-2025-59969 | 6.5 | Apr 9 | Junos OS Evolved: QFX5000 Series and PTX Series: An attacker sending crafted multicast packets will cause evo-aftmand / evo-pfemand to crash and restart Affected: before 22.4R3-S8-EVO; 23.2 before 23.2R2-S5-EVO; 23.4 before 23.4R2-EVO; 24.2 before 24.2R2-EVO; 24.4 before 24.4R2-EVO; 22.2 before 22.2R3-S7-EVO; +5 more |
| CVE-2026-21921 | 6.5 | Jan 15 | Junos OS and Junos OS Evolved: When telemetry collectors are frequently subscribing and unsubscribing to sensors chassisd or rpd will crash Affected: before 22.4R3-S8-EVO; 23.2 before 23.2R2-S5-EVO; 23.4 before 23.4R2-EVO |
| CVE-2026-21911 | 6.5 | Jan 15 | Junos OS Evolved: Flapping management interface causes MAC learning on label-switched interfaces to stop Affected: before 21.4R3-S7-EVO; 22.2 before 22.2R3-S4-EVO; 22.3 before 22.3R3-S3-EVO; 22.4 before 22.4R3-S2-EVO; 23.2 before 23.2R2-S1-EVO; 23.4 before 23.4R1-S2-EVO, 23.4R2-EVO |
| CVE-2026-21909 | 6.5 | Jan 15 | Junos OS and Junos OS Evolved: Receipt of specific IS-IS update packet causes memory leak leading to RPD crash Affected: 23.2 before 23.2R2-EVO; 23.4 before 23.4R1-S2-EVO, 23.4R2-EVO; 24.1 before 24.1R2-EVO |
| CVE-2025-59967 | 6.5 | Oct 9 | Junos OS Evolved: ACX7024, ACX7024X, ACX7100-32C, ACX7100-48L, ACX7348, ACX7509: When specific valid multicast traffic is received on the L3 interface on a vulnerable device evo-pfemand crashes and restarts Affected: 23.2R2-EVO before 23.2R2-S4-EVO; 23.4R1-EVO before 23.4R2-EVO |
| CVE-2025-59958 | 6.5 | Oct 9 | Junos OS Evolved: PTX Series: When a firewall filter rejects traffic these packets are erroneously sent to the RE Affected: before 22.4R3-EVO; 23.2 before 23.2R2-EVO |
| CVE-2025-52961 | 6.5 | Oct 9 | Junos OS Evolved: PTX Series except PTX10003: An unauthenticated adjacent attacker sending specific valid traffic can cause a memory leak in cfmman leading to FPC crash and restart Affected: 23.2R1-EVO before 23.2R2-S4-EVO; 23.4-EVO before 23.4R2-S4-EVO; 24.2-EVO before 24.2R2-EVO; 24.4-EVO before 24.4R1-S2-EVO, 24.4R2-EVO |
| CVE-2025-52964 | 6.5 | Jul 11 | Junos OS and Junos OS Evolved: Receipt of a specific BGP UPDATE causes an rpd crash on devices with BGP multipath configured Affected: before 21.4R3-S7-EVO; 22.3 before 22.3R3-S3-EVO; 22.4 before 22.4R3-S5-EVO; 23.2 before 23.2R2-EVO; 23.4 before 23.4R2-EVO |
| CVE-2025-52953 | 6.5 | Jul 11 | Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session reset Affected: before 22.2R3-S7-EVO; 22.4-EVO before 22.4R3-S7-EVO; 23.2-EVO before 23.2R2-S4-EVO; 23.4-EVO before 23.4R2-S4-EVO; 24.2-EVO before 24.2R2-EVO; 24.4-EVO before 24.4R1-S3-EVO, 24.4R2-EVO |
| CVE-2025-52955 | 6.5 | Jul 11 | Junos OS and Junos OS Evolved: When jflow/sflow is configured continuous logical interface flaps causes rpd crash and restart Affected: before 21.2*-EVO; 21.4 before 21.4*-EVO; 22.2 before 22.2*-EVO; 22.4 before 22.4R3-S7-EVO; 23.2 before 23.2R2-S3-EVO; 23.4 before 23.4R2-S4-EVO; +1 more |
| CVE-2025-52949 | 6.5 | Jul 11 | Junos OS and Junos OS Evolved: In an EVPN environment, receipt of specifically malformed BGP update causes RPD crash Affected: before 22.2R3-S7-EVO; 22.4-EVO before 22.4R3-S7-EVO; 23.2-EVO before 23.2R2-S4-EVO; 23.4-EVO before 23.4R2-S5-EVO; 24.2-EVO before 24.2R2-S1-EVO; 24.4-EVO before 24.4R1-S3-EVO, 24.4R2-EVO |
| CVE-2025-30653 | 6.5 | Apr 9 | Junos OS and Junos OS Evolved: LSP flap in a specific MPLS scenario leads to rpd crash Affected: before 22.2R3-S4-EVO; 22.4-EVO before 22.4R3-S2-EVO; 23.2-EVO before 23.2R2-EVO; 23.4-EVO before 23.4R2-EVO |
| CVE-2025-30646 | 6.5 | Apr 9 | Junos OS and Junos OS Evolved: Receipt of a malformed LLDP TLV results in l2cpd crash Affected: before 21.4R3-S10-EVO; 22.2-EVO before 22.2R3-S6-EVO; 22.4-EVO before 22.4R3-S6-EVO; 23.2-EVO before 23.2R2-S3-EVO; 23.4-EVO before 23.4R2-S4-EVO; 24.2-EVO before 24.2R2-EVO |
| CVE-2025-21595 | 6.5 | Apr 9 | Junos OS and Junos OS Evolved: In an EVPN-VXLAN scenario specific ARP or NDP packets cause FPC to crash Affected: before 21.2R3-S7-EVO; 21.4-EVO before 21.4R3-S4-EVO; 22.2-EVO before 22.2R3-S1-EVO; 22.3-EVO before 22.3R3-S1-EVO; 22.4-EVO before 22.4R3-EVO |
| CVE-2025-21600 | 6.5 | Jan 9 | Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash Affected: 21.4-EVO before 21.4R3-S9-EVO; 22.2-EVO before 22.2R3-S5-EVO; 22.3-EVO before 22.3R3-S4-EVO; 22.4-EVO before 22.4R3-S5-EVO; 23.2-EVO before 23.2R2-S3-EVO; 23.4-EVO before 23.4R2-S2-EVO; +1 more |
| CVE-2025-21602 | 6.5 | Jan 9 | Junos OS and Junos OS Evolved: Receipt of specially crafted BGP update packet causes RPD crash Affected: 21.4 before 21.4R3-S9-EVO; 22.2 before 22.2R3-S5-EVO; 22.3 before 22.3R3-S4-EVO; 22.4 before 22.4R3-S5-EVO; 23.2 before 23.2R2-S3-EVO; 23.4 before 23.4R2-S3-EVO; +1 more |
| CVE-2025-21593 | 6.5 | Jan 9 | Junos OS and Junos OS Evolved: On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to crash Affected: before 21.2R3-S9-EVO; 21.4-EVO before 21.4R3-S10-EVO; 22.2-EVO before 22.2R3-S5-EVO; 22.3-EVO before 22.3R3-S4-EVO; 22.4-EVO before 22.4R3-S3-EVO; 23.2-EVO before 23.2R2-S2-EVO; +1 more |
| CVE-2024-47509 | 6.5 | Oct 11 | Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #3 Affected: 21.4 before 21.4R2-EVO; 22.1 before 22.1R2-EVO |
| CVE-2024-47508 | 6.5 | Oct 11 | Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #2 Affected: 21.2 before 21.2R3-S8-EVO; 21.3 before 21.3R3-EVO; 21.4 before 21.4R2-EVO,; 22.1 before 22.1R1-S1-EVO, 22.1R2-EVO |
| CVE-2024-47505 | 6.5 | Oct 11 | Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #1 Affected: 21.4 before 21.4R3-S7-EVO; 22.1 before 22.1R3-S6-EVO; 22.2 before 22.2R3-EVO; 22.3 before 22.3R3-EVO; 22.4 before 22.4R2-EVO |
| CVE-2024-47498 | 6.5 | Oct 11 | Junos OS Evolved: QFX5000 Series: Configured MAC learning and move limits are not in effect Affected: before 21.4R3-S8-EVO; 22.2-EVO before 22.2R3-S5-EVO; 22.4-EVO before 22.4R3-EVO; 23.2-EVO before 23.2R2-EVO |
| CVE-2024-39526 | 6.5 | Oct 11 | Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11/LC9600, MX304, EX9200, PTX Series: Receipt of malformed DHCP packets causes interfaces to stop processing packets Affected: 19.3R1-EVO before 21.2R3-S8-EVO; 21.4-EVO before 21.4R3-S7-EVO; 22.1-EVO before 22.1R3-S6-EVO; 22.2-EVO before 22.2R3-S5-EVO; 22.3-EVO before 22.3R3-S3-EVO; 22.4-EVO before 22.4R3-S1-EVO; +2 more |
| CVE-2024-39553 | 6.5 | Jul 11 | Junos OS Evolved: Receipt of arbitrary data when sampling service is enabled, leads to partial Denial of Service (DoS). Affected: 21.4-EVO before 21.4R3-S7-EVO; 22.2-EVO before 22.2R3-S3-EVO; 22.3-EVO before 22.3R3-S2-EVO; 22.4-EVO before 22.4R3-EVO; 23.2-EVO before 23.2R1-S2-EVO, 23.2R2-EVO |
| CVE-2024-39543 | 6.5 | Jul 11 | Junos OS and Junos OS Evolved: Receipt of a large RPKI-RTR PDU packet can cause rpd to crash Affected: before 21.2R3-S8-EVO; 21.4 before 21.4R3-S8-EVO; 22.2 before 22.2R3-S4-EVO; 22.3 before 22.3R3-S3-EVO; 22.4 before 22.4R3-S2-EVO; 23.2 before 23.2R2-S1-EVO; +1 more |
| CVE-2024-39541 | 6.5 | Jul 11 | Junos OS and Junos OS Evolved: Inconsistent information in the TE database can lead to an rpd crash Affected: 22.4-EVO before 22.4R3-S2-EVO; 23.2-EVO before 23.2R2-EVO; 23.4-EVO before 23.4R1-S1-EVO, 23.4R2-EVO |
| CVE-2024-39538 | 6.5 | Jul 11 | Junos OS Evolved: ACX7000 Series: When multicast traffic with a specific (S,G) is received evo-pfemand crashes Affected: before 21.2R3-S8-EVO; 21.4-EVO before 21.4R3-S7-EVO; 22.2-EVO before 22.2R3-S4-EVO; 22.3-EVO before 22.3R3-S3-EVO; 22.4-EVO before 22.4R3-S2-EVO; 23.2-EVO before 23.2R2-EVO; +1 more |
| CVE-2024-39537 | 6.5 | Jul 11 | Junos OS Evolved: ACX7000 Series: Ports which have been inadvertently exposed can be reached over the network Affected: before 21.4R3-S7-EVO; 22.2-EVO before 22.2R3-S4-EVO; 22.3-EVO before 22.3R3-S3-EVO; 22.4-EVO before 22.4R3-S2-EVO; 23.2-EVO before 23.2R2-EVO; 23.4-EVO before 23.4R1-S1-EVO, 23.4R2-EVO |
| CVE-2024-39535 | 6.5 | Jul 11 | Junos OS Evolved: ACX 7000 Series: When specific traffic is received in a VPLS scenario evo-pfemand crashes Affected: 22.4R2-S1-EVO before 22.4R3-EVO |
| CVE-2024-39519 | 6.5 | Jul 11 | Junos OS Evolved: ACX 7000 Series: Multicast traffic is looped in a multihoming EVPN MPLS scenario Affected: 22.1-EVO; 22.2-EVO; 22.3-EVO; 22.4-EVO before 22.4R2-EVO |
| CVE-2024-39517 | 6.5 | Jul 10 | Junos OS and Junos OS Evolved: Upon processing specific L2 traffic, rpd can hang in devices with EVPN/VXLAN configured Affected: before 21.2R3-S8-EVO; 21.4-EVO before 21.4R3-S7-EVO; 22.1-EVO before 22.1R3-S5-EVO; 22.2-EVO before 22.2R3-S3-EVO; 22.3-EVO before 22.3R3-S3-EVO; 22.4-EVO before 22.4R3-S2-EVO; +2 more |
| CVE-2024-39514 | 6.5 | Jul 10 | Junos OS and Junos OS Evolved: Receiving specific traffic on devices with EVPN-VPWS with IGMP-snooping enabled will cause the rpd to crash Affected: before 20.4R3-S10-EVO; 21.4-EVO before 21.4R3-S6-EVO; 22.1-EVO before 22.1R3-S5-EVO; 22.2-EVO before 22.2R3-S3-EVO; 22.3-EVO before 22.3R3-S2-EVO; 22.4-EVO before 22.4R3-EVO; +1 more |
| CVE-2024-39560 | 6.5 | Jul 10 | Junos OS and Junos OS Evolved: Memory leak due to RSVP neighbor persistent error leading to kernel crash Affected: before 21.4R3-S5-EVO; 22.1-EVO before 22.1R3-S5-EVO; 22.2-EVO before 22.2R3-S3-EVO; 22.3-EVO before 22.3R3-S2-EVO; 22.4-EVO before 22.4R3-EVO; 23.2-EVO before 23.2R2-EVO |
| CVE-2024-39558 | 6.5 | Jul 10 | Junos OS and Junos OS Evolved: Receipt of specific PIM packet causes rpd crash when PIM is configured along with MoFRR Affected: before 20.4R3-S10-EVO; 21.2R1-EVO before 21.2*-EVO; 21.4-EVO before 21.4R3-S9-EVO; 22.1-EVO before 22.1R3-S5-EVO; 22.2-EVO before 22.2R3-S3-EVO; 22.3-EVO before 22.3R3-EVO; +1 more |
| CVE-2024-39557 | 6.5 | Jul 10 | Junos OS Evolved: MAC table changes cause a memory leak Affected: before 21.4R3-S8-EVO; 22.2-EVO before 22.2R3-S4-EVO; 22.3-EVO before 22.3R3-S3-EVO; 22.4-EVO before 22.4R3-EVO; 23.2-EVO before 23.2R2-EVO |
| CVE-2024-30380 | 6.5 | Apr 16 | Junos OS and Junos OS Evolved: l2cpd crash upon receipt of a specific TLV Affected: before 21.2R3-S7-EVO; 21.3 before 21.3R3-S5-EVO; 21.4 before 21.4R3-S5-EVO; 22.1 before 22.1R3-S4-EVO; 22.2 before 22.2R3-S2-EVO; 22.3 before 22.3R2-S2-EVO, 22.3R3-S1-EVO; +2 more |
| CVE-2024-30403 | 6.5 | Apr 12 | Junos OS Evolved: When MAC learning happens, and an interface gets flapped, the PFE crashes Affected: 23.2-EVO before 23.2R1-S1-EVO, 23.2R2-EVO |
| CVE-2024-21618 | 6.5 | Apr 12 | Junos OS and Junos OS Evolved: When LLDP is enabled and a malformed LLDP packet is received, l2cpd crashes Affected: 21.4-EVO before 21.4R3-S5-EVO; 22.1-EVO before 22.1R3-S4-EVO; 22.2-EVO before 22.2R3-S2-EVO; 22.3-EVO before 22.3R2-S2-EVO, 22.3R3-S1-EVO; 22.4-EVO before 22.4R3-EVO; 23.2-EVO before 23.2R2-EVO |
| CVE-2024-21590 | 6.5 | Apr 12 | Junos OS Evolved: Packets which are not destined to the device can reach the RE Affected: before 21.2R3-S8-EVO; 21.4-EVO before 21.4R3-S6-EVO; 22.2-EVO before 22.2R3-S4-EVO; 22.3-EVO before 22.3R3-S3-EVO; 22.4-EVO before 22.4R3-EVO; 23.2-EVO before 23.2R2-EVO; +1 more |
| CVE-2024-21613 | 6.5 | Jan 12 | Junos OS and Junos OS Evolved: A link flap causes patroot memory leak which leads to rpd crash Affected: before 21.3R3-S5-EVO; 21.4 before 21.4R3-EVO; 22.1 before 22.1R3-EVO; 22.2 before 22.2R3-EVO |
| CVE-2022-22250 | 6.5 | Oct 18 | Junos OS and Junos OS Evolved: An FPC crash might be seen due to an EVPN MAC entry moving from local to remote Affected: before 20.4R3-S3-EVO; 21.1R1-EVO before 21.1-EVO*; 21.2-EVO before 21.2R3-EVO; 21.3-EVO before 21.3R2-EVO; 21.4-EVO before 21.4R1-S1-EVO, 21.4R2-EVO |
| CVE-2022-22238 | 6.5 | Oct 18 | Junos OS and Junos OS Evolved: The rpd process will crash when a malformed incoming RESV message is processed Affected: before 20.2R3-S3-EVO; 20.3R1-EVO before 20.3-EVO*; 20.4-EVO before 20.4R3-S1-EVO; 21.1R1-EVO before 21.1-EVO*; 21.2R1-EVO before 21.2-EVO*; 21.3-EVO before 21.3R2-EVO |
| CVE-2022-22230 | 6.5 | Oct 18 | Junos OS and Junos OS Evolved: RPD crash upon receipt of specific OSPFv3 LSAs Affected: before 20.4R3-S5-EVO; 21.1-EVO before 21.1R3-S2-EVO; 21.2-EVO before 21.2R3-S1-EVO; 21.3-EVO before 21.3R3-S2-EVO; 21.4-EVO before 21.4R2-EVO; 22.1-EVO before 22.1R2-EVO; +1 more |
| CVE-2022-22224 | 6.5 | Oct 18 | Junos OS and Junos OS Evolved: PPMD goes into infinite loop upon receipt of malformed OSPF TLV Affected: before 20.4R3-S3-EVO; 21.1 before 21.1R2-EVO |
| CVE-2024-39532 | 6.3 | Jul 11 | Junos OS and Junos OS Evolved: Confidential information in logs can be accessed by another user Affected: before 22.1R3-EVO; 22.2-EVO before 22.2R2-S1-EVO, 22.2R3-EVO; 22.3-EVO before 22.3R1-S1-EVO, 22.3R2-EVO |
| CVE-2026-33794 | 5.9 | Jul 9 | Junos OS Evolved: PTX Series: Receipt of repeated ECMP routing updates results in PFE crash Affected: 24.4R2-EVO before 24.4R2-S3-EVO; 25.2 before 25.2R2, 25.2R2-EVO |
| CVE-2025-52984 | 5.9 | Jul 11 | Junos OS and Junos OS Evolved: When a static route points to a reject next-hop and a gNMI query for this route is processed, RPD crashes Affected: before 22.4R3-S7-EVO; 23.2-EVO before 23.2R2-S3-EVO; 23.4-EVO before 23.4R2-S4-EVO; 24.2-EVO before 24.2R2-EVO |
