Vulnerabilidades de juniper junos_evolved (CVE)

Registros CVE publicados para juniper junos_evolved, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

9 resultados

5.8Media

CVE-2024-47507 hace 2 años

Junos OS and Junos OS Evolved: BGP update message containing aggregator attribute with an ASN value of zero (0) is accepted

Juniper Networks Junos OS; Juniper Networks Junos OS Evolved; juniper junos; juniper junos_evolved

An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause an integrity impact to the downstream devic…

7.5Alta

CVE-2024-47502 hace 2 años

Junos OS Evolved: TCP session state is not always cleared on the Routing Engine leading to DoS

Juniper Networks Junos OS Evolved; juniper junos_evolved

An Allocation of Resources Without Limits or Throttling vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated, network based attacker to cause a Denial of Service (DoS). In specific cases the state of TCP sessions that ar…

7.5Alta

CVE-2024-47499 hace 2 años

Junos OS and Junos OS Evolved: In a BMP scenario receipt of a malformed AS PATH attribute can cause an RPD crash

Juniper Networks Junos OS; Juniper Networks Junos OS Evolved; juniper junos; juniper junos_evolved

An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network based attacker to cause a Denial of Service (DoS). In a scenario …

6.7Media

CVE-2024-47495 hace 2 años

Junos OS Evolved: In a dual-RE scenario a locally authenticated attacker with shell privileges can take over the device.

Juniper Networks Junos OS Evolved; juniper junos_evolved

An Authorization Bypass Through User-Controlled Key vulnerability allows a locally authenticated attacker with shell access to gain full control of the device when Dual Routing Engines (REs) are in use on Juniper Networks Junos OS Evolved devices. This issue…

5.9Media

CVE-2024-47491 hace 2 años

Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP path attribute leads to an RPD crash

Juniper Networks Junos OS; Juniper Networks Junos OS Evolved; juniper junos; juniper junos_evolved

An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based, unauthenticated attacker to cause Denial of Service (DoS). When a BGP UPDATE with malf…

8.2Alta

CVE-2024-47490 hace 2 años

Junos OS Evolved: ACX 7000 Series: Receipt of specific transit MPLS packets causes resources to be exhausted

Juniper Networks Junos OS Evolved; juniper junos_evolved

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on ACX 7000 Series allows an unauthenticated, network based attacker to cause increased consumption…

5.8Media

CVE-2024-47489 hace 2 años

Junos OS Evolved: ACX Series: Receipt of specific transit protocol packets is incorrectly processed by the RE

Juniper Networks Junos OS Evolved; juniper junos_evolved

An Improper Handling of Exceptional Conditions vulnerability in the Packet Forwarding Engine (pfe) of the Juniper Networks Junos OS Evolved on ACX Series devices allows an unauthenticated, network based attacker sending specific transit protocol traffic to ca…

7.5Alta

CVE-2024-39547 hace 2 años

Junos OS and Junos OS Evolved: cRPD: Receipt of crafted TCP traffic can trigger high CPU utilization

Juniper Networks Junos OS; Juniper Networks Junos OS Evolved; juniper junos; juniper junos_evolved

An Improper Handling of Exceptional Conditions vulnerability in the rpd-server of Juniper Networks Junos OS and Junos OS Evolved within cRPD allows an unauthenticated network-based attacker sending crafted TCP traffic to the routing engine (RE) to cause a CPU…

6.6Media

CVE-2024-39512 hace 2 años

Junos OS Evolved: User is not logged out when the console cable is disconnected

Juniper Networks Junos OS Evolved; juniper junos_evolved

An Improper Physical Access Control vulnerability in the console port control of Juniper Networks Junos OS Evolved allows an attacker with physical access to the device to get access to a user account. When the console cable is disconnected, the logged in us…