CVSS: 6.5EPSS: 0%CPEs: 7EXPL: 0CVE-2020-1681 – Junos OS Evolved: Receipt of a specifically malformed NDP packet could lead to Denial of Service
https://notcve.org/view.php?id=CVE-2020-1681
16 Oct 2020 — Receipt of a specifically malformed NDP packet sent from the local area network (LAN) to a device running Juniper Networks Junos OS Evolved can cause the ndp process to crash, resulting in a Denial of Service (DoS). The process automatically restarts without intervention, but a continuous receipt of the malformed NDP packets could leaded to an extended Denial of Service condition. During this time, IPv6 neighbor learning will be affected. The issue occurs when parsing the incoming malformed NDP packet. Rath... • https://kb.juniper.net/JSA11078 • CWE-617: Reachable Assertion CWE-755: Improper Handling of Exceptional Conditions •
CVSS: 6.5EPSS: 0%CPEs: 13EXPL: 0CVE-2020-1678 – Junos OS and Junos OS Evolved: RPD can crash due to a slow memory leak.
https://notcve.org/view.php?id=CVE-2020-1678
16 Oct 2020 — On Juniper Networks Junos OS and Junos OS Evolved platforms with EVPN configured, receipt of specific BGP packets causes a slow memory leak. If the memory is exhausted the rpd process might crash. If the issue occurs, the memory leak could be seen by executing the "show task memory detail | match policy | match evpn" command multiple times to check if memory (Alloc Blocks value) is increasing. root@device> show task memory detail | match policy | match evpn ------------------------ Allocator Memory Report -... • https://kb.juniper.net/JSA11075 • CWE-400: Uncontrolled Resource Consumption CWE-401: Missing Release of Memory after Effective Lifetime •
CVSS: 7.2EPSS: 0%CPEs: 7EXPL: 0CVE-2020-1666 – Junos OS Evolved: 'console log-out-on-disconnect' fails to terminate session on console cable disconnection
https://notcve.org/view.php?id=CVE-2020-1666
16 Oct 2020 — The system console configuration option 'log-out-on-disconnect' In Juniper Networks Junos OS Evolved fails to log out an active CLI session when the console cable is disconnected. This could allow a malicious attacker with physical access to the console the ability to resume a previous interactive session and possibly gain administrative privileges. This issue affects all Juniper Networks Junos OS Evolved versions after 18.4R1-EVO, prior to 20.2R1-EVO. La opción de configuración de la consola del sistema "l... • https://kb.juniper.net/JSA11063 • CWE-284: Improper Access Control CWE-613: Insufficient Session Expiration •
CVSS: 7.5EPSS: 0%CPEs: 13EXPL: 0CVE-2020-1648 – Junos OS and Junos OS Evolved: RPD crash when processing a specific BGP packet
https://notcve.org/view.php?id=CVE-2020-1648
17 Jul 2020 — On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific BGP packet can lead to a routing process daemon (RPD) crash and restart. This issue can occur even before the BGP session with the peer is established. Repeated receipt of this specific BGP packet can result in an extended Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS: 18.2X75 versions starting from 18.2X75-D50.8, 18.2X75-D60 and later versions, prior to 18.2X75-D52.8, 18.2X75-D53, 18.2X75-D60... • https://kb.juniper.net/JSA11035 • CWE-159: Improper Handling of Invalid Use of Special Elements CWE-690: Unchecked Return Value to NULL Pointer Dereference •
CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0CVE-2020-1646 – Junos OS and Junos OS Evolved: RPD crash while processing a specific BGP update information.
https://notcve.org/view.php?id=CVE-2020-1646
17 Jul 2020 — On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific UPDATE for an EBGP peer can lead to a routing process daemon (RPD) crash and restart. This issue occurs only when the device is receiving and processing the BGP UPDATE for an EBGP peer. This issue does not occur when the device is receiving and processing the BGP UPDATE for an IBGP peer. However, the offending BGP UPDATE can originally come from an EBGP peer, propagates through the network via IBGP peers without causing crash, ... • https://kb.juniper.net/JSA11033 • CWE-159: Improper Handling of Invalid Use of Special Elements •
CVSS: 7.5EPSS: 0%CPEs: 127EXPL: 0CVE-2020-1644 – Junos OS and Junos OS Evolved: RPD crash due to specific BGP UPDATE packets
https://notcve.org/view.php?id=CVE-2020-1644
17 Jul 2020 — On Juniper Networks Junos OS and Junos OS Evolved devices, the receipt of a specific BGP UPDATE packet causes an internal counter to be incremented incorrectly, which over time can lead to the routing protocols process (RPD) crash and restart. This issue affects both IBGP and EBGP multihop deployment in IPv4 or IPv6 network. This issue affects: Juniper Networks Junos OS: 17.2X75 versions prior to 17.2X75-D105.19; 17.3 versions prior to 17.3R3-S8; 17.4 versions prior to 17.4R2-S10, 17.4R3-S2; 18.1 versions p... • https://kb.juniper.net/JSA11032 • CWE-20: Improper Input Validation CWE-703: Improper Check or Handling of Exceptional Conditions •
CVSS: 8.6EPSS: 0%CPEs: 121EXPL: 0CVE-2020-1632 – Junos OS and Junos OS Evolved: Invalid BGP UPDATE sent to peer device may cause BGP session to terminate.
https://notcve.org/view.php?id=CVE-2020-1632
15 Apr 2020 — In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evolved devices to advertise an invalid BGP UPDATE message to other peers, causing the other peers to terminate the established BGP session, creating a Denial of Service (DoS) condition. For example, Router A sends a specific BGP UPDATE to Router B, causing Router B to send an invalid BGP UPDATE message to Router C, resulting in termination of the BGP session between Router B and Router C. Thi... • https://kb.juniper.net/JSA11013 • CWE-755: Improper Handling of Exceptional Conditions •
CVSS: 7.5EPSS: 0%CPEs: 22EXPL: 0CVE-2020-1638 – Junos OS & Junos OS Evolved: A specific IPv4 packet can lead to FPC restart.
https://notcve.org/view.php?id=CVE-2020-1638
08 Apr 2020 — The FPC (Flexible PIC Concentrator) of Juniper Networks Junos OS and Junos OS Evolved may restart after processing a specific IPv4 packet. Only packets destined to the device itself, successfully reaching the RE through existing edge and control plane filtering, will be able to cause the FPC restart. When this issue occurs, all traffic via the FPC will be dropped. By continuously sending this specific IPv4 packet, an attacker can repeatedly crash the FPC, causing an extended Denial of Service (DoS) conditio... • https://kb.juniper.net/JSA11019 • CWE-467: Use of sizeof() on a Pointer Type •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-1626 – Junos OS Evolved: Denial of Service vulnerability in processing high rate of specific packets
https://notcve.org/view.php?id=CVE-2020-1626
08 Apr 2020 — A vulnerability in Juniper Networks Junos OS Evolved may allow an attacker to cause a Denial of Service (DoS) by sending a high rate of specific packets to the device, resulting in a pfemand process crash. The pfemand process is responsible for packet forwarding on the device. By continuously sending the packet flood, an attacker can repeatedly crash the pfemand process causing a sustained Denial of Service. This issue can only be triggered by traffic sent to the device. Transit traffic does not cause this ... • https://kb.juniper.net/JSA11005 •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-1624 – Junos OS Evolved: objmon logs may leak sensitive information
https://notcve.org/view.php?id=CVE-2020-1624
08 Apr 2020 — A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via raw objmon configuration files. This issue affects all versions of Junos OS Evolved prior to 19.1R1. Un usuario local autenticado con shell puede obtener los valores de las contraseñas de inicio de sesión del hash y los secretos compartidos por medio de archivos de configuración objmon sin procesar. Este problema afecta a todas las versiones de Junos OS Evolved anteriores a 19.1R1. • https://kb.juniper.net/JSA11003 • CWE-532: Insertion of Sensitive Information into Log File •