Junos OS — Vulnerabilities & Security Advisories 678

All 678 CVE vulnerabilities found in Junos OS, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability data for Junos OS, a network operating system developed by Juniper Networks. It collects security flaws across multiple weakness types, covering advisories issued from 2010 through the most recent updates. Readers can use this resource to track the vendor's published advisories, understand specific weakness classes like memory corruption or improper input validation, and review the product's historical vulnerability trends without needing to search individual databases.

Vendor: Juniper Networks

CVE ID	Title	CVSS	Severity	Published
CVE-2019-0046	Junos OS: EX4300 Series: Denial of Service upon receipt of large number of specific valid packets on management interface. CWE-400	6.5	-	2019-07-11
CVE-2019-0048	EX4300 Series: When a firewall filter is applied to a loopback interface, other firewall filters for multicast traffic may fail CWE-200	-	-	2019-07-11
CVE-2019-0049	Junos OS: RPD process crashes when BGP peer restarts CWE-404	7.5	-	2019-07-11
CVE-2019-0052	SRX Series: srxpfe process crash while JSF/UTM module parses specific HTTP packets CWE-404	7.5	-	2019-07-11
CVE-2019-0053	Junos OS: Insufficient validation of environment variables in telnet client may lead to stack-based buffer overflow CWE-121	7.8	-	2019-07-11
CVE-2019-0041	Junos OS: EX4300-MP Series: IP transit traffic can reach the control plane via loopback interface. CWE-284	8.6	-	2019-04-10
CVE-2019-0043	Junos OS: RPD process crashes upon receipt of a specific SNMP packet CWE-404	7.5	-	2019-04-10
CVE-2019-0044	Junos OS: SRX5000 series: Kernel crash (vmcore) upon receipt of a specific packet on fxp0 interface CWE-404	7.5	-	2019-04-10
CVE-2019-0008	QFX5000 Series, EX4300, EX4600: A stack buffer overflow vulnerability in Packet Forwarding Engine manager (FXPC) process CWE-121	9.8	-	2019-04-10
CVE-2019-0019	BGP packets can trigger rpd crash when BGP tracing is enabled. CWE-404	7.5	-	2019-04-10
CVE-2019-0028	Junos OS: RPD process crashes due to specific BGP peer restarts condition. CWE-404	7.5	-	2019-04-10
CVE-2019-0031	Junos OS: jdhcpd daemon memory consumption Denial of Service when receiving specific IPv6 DHCP packets. CWE-400	6.5	-	2019-04-10
CVE-2019-0033	SRX Series: A remote attacker may cause a high CPU Denial of Service to the device when proxy ARP is configured. CWE-400	7.5	-	2019-04-10
CVE-2019-0035	Junos OS: 'set system ports console insecure' allows root password recovery on OAM volumes CWE-501	6.8	-	2019-04-10
CVE-2019-0036	Junos OS: Firewall filter terms named "internal-1" and "internal-2" being ignored CWE-284	9.8	-	2019-04-10
CVE-2019-0037	Junos OS: jdhcpd crash upon receipt of crafted DHCPv6 solicit message	7.5	-	2019-04-10
CVE-2019-0038	SRX Series: Crafted packets destined to fxp0 management interface on SRX340/SRX345 devices can lead to DoS CWE-400	7.5	-	2019-04-10
CVE-2019-0039	Junos OS: Login credentials are vulnerable to brute force attacks through the REST API CWE-307	8.1	-	2019-04-10
CVE-2019-0040	Junos OS: Specially crafted packets sent to port 111 on any interface triggers responses from the management interface CWE-200	8.2	-	2019-04-10
CVE-2019-0001	Junos OS: MX Series: uncontrolled recursion and crash in Broadband Edge subscriber management daemon (bbe-smgd). CWE-674	7.5	-	2019-01-15
CVE-2019-0002	Junos OS: EX2300 and EX3400 series: Certain stateless firewall filter rules might not take effect CWE-794	9.8	-	2019-01-15
CVE-2019-0003	Junos OS: A flowspec BGP update with a specific term-order causes routing protocol daemon (rpd) process to crash with a core. CWE-617	5.9	-	2019-01-15
CVE-2019-0006	Junos OS: EX, QFX and MX series: Packet Forwarding Engine manager (FXPC) process crashes due to a crafted HTTP packet in a Virtual Chassis configuration CWE-908	9.8	-	2019-01-15
CVE-2019-0007	Junos OS: vMX series: Predictable IP ID sequence numbers vulnerability	10.0	-	2019-01-15
CVE-2019-0009	Junos OS: EX2300 and EX3400: High disk I/O operations may disrupt the communication between RE and PFE	5.5	-	2019-01-15
CVE-2019-0010	Junos OS: SRX Series: Crafted HTTP traffic may cause UTM to consume all mbufs, leading to Denial of Service	7.5	-	2019-01-15
CVE-2019-0011	Junos OS: Kernel crash after processing specific incoming packet to the out of band management interface (CVE-2019-0011)	6.5	-	2019-01-15
CVE-2019-0012	Junos OS: rpd crash on VPLS PE upon receipt of specific BGP message	7.5	-	2019-01-15
CVE-2019-0013	Junos OS: RPD crash upon receipt of malformed PIM packet	7.5	-	2019-01-15
CVE-2019-0014	Junos OS: QFX and PTX Series: FPC process crashes after J-Flow processes a malformed packet	7.5	-	2019-01-15

All 678 known CVE vulnerabilities affecting Junos OS with full Chinese analysis, references, and POCs where available.