csrx Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/csrx/ Sun, 26 Feb 2023 06:28:36 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png csrx Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/csrx/ 32 32 CVE-2019-0054 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-0054/ Sun, 26 Feb 2023 06:28:36 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-0054/ An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos OS allows an attacker to perform Man-in-the-Middle (MitM) attacks which may compromise the integrity and confidentiality of the device. This issue affects: Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D120 on SRX Series devices. No […]

The post CVE-2019-0054 appeared first on CVE Vulnerability.

]]> An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos OS allows an attacker to perform Man-in-the-Middle (MitM) attacks which may compromise the integrity and confidentiality of the device. This issue affects: Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D120 on SRX Series devices. No other versions of Junos OS are affected.

The post CVE-2019-0054 appeared first on CVE Vulnerability.

]]> CVE-2019-0055 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-0055/ Sun, 26 Feb 2023 06:28:36 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-0055/ A vulnerability in the SIP ALG packet processing service of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending specific types of valid SIP traffic to the device. In this case, the flowd process crashes and generates a core dump while processing SIP ALG traffic. […]

The post CVE-2019-0055 appeared first on CVE Vulnerability.

]]> A vulnerability in the SIP ALG packet processing service of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending specific types of valid SIP traffic to the device. In this case, the flowd process crashes and generates a core dump while processing SIP ALG traffic. Continued receipt of these valid SIP packets will result in a sustained Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D61, 12.3X48-D65 on SRX Series; 15.1X49 versions prior to 15.1X49-D130 on SRX Series; 17.3 versions prior to 17.3R3 on SRX Series; 17.4 versions prior to 17.4R2 on SRX Series.

The post CVE-2019-0055 appeared first on CVE Vulnerability.

]]> CVE-2019-0058 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-0058/ Sun, 26 Feb 2023 06:28:36 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-0058/ A vulnerability in the Veriexec subsystem of Juniper Networks Junos OS allowing an attacker to fully compromise the host system. A local authenticated user can elevate privileges to gain full control of the system even if they are specifically denied access to perform certain actions. This issue affects: Juniper Networks Junos OS: 12.3X48 versions prior […]

The post CVE-2019-0058 appeared first on CVE Vulnerability.

]]> A vulnerability in the Veriexec subsystem of Juniper Networks Junos OS allowing an attacker to fully compromise the host system. A local authenticated user can elevate privileges to gain full control of the system even if they are specifically denied access to perform certain actions. This issue affects: Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D80 on SRX Series.

The post CVE-2019-0058 appeared first on CVE Vulnerability.

]]> CVE-2019-0060 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-0060/ Sun, 26 Feb 2023 06:28:36 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-0060/ The flowd process, responsible for forwarding traffic in SRX Series services gateways, may crash and restart when processing specific transit IP packets through an IPSec tunnel. Continued processing of these packets may result in an extended Denial of Service (DoS) condition. This issue only occurs when IPSec tunnels are configured. Systems without IPSec tunnel configurations […]

The post CVE-2019-0060 appeared first on CVE Vulnerability.

]]> The flowd process, responsible for forwarding traffic in SRX Series services gateways, may crash and restart when processing specific transit IP packets through an IPSec tunnel. Continued processing of these packets may result in an extended Denial of Service (DoS) condition. This issue only occurs when IPSec tunnels are configured. Systems without IPSec tunnel configurations are not vulnerable to this issue. This issue affects Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D171, 15.1X49-D180 on SRX Series; 18.2 versions 18.2R2-S1 and later, prior to 18.2R3 on SRX Series; 18.4 versions prior to 18.4R2 on SRX Series.

The post CVE-2019-0060 appeared first on CVE Vulnerability.

]]> CVE-2019-0066 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-0066/ Sun, 26 Feb 2023 06:28:36 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-0066/ An unexpected status return value weakness in the Next-Generation Multicast VPN (NG-mVPN) service of Juniper Networks Junos OS allows attacker to cause a Denial of Service (DoS) condition and core the routing protocol daemon (rpd) process when a specific malformed IPv4 packet is received by the device running BGP. This malformed packet can be crafted […]

The post CVE-2019-0066 appeared first on CVE Vulnerability.

]]> An unexpected status return value weakness in the Next-Generation Multicast VPN (NG-mVPN) service of Juniper Networks Junos OS allows attacker to cause a Denial of Service (DoS) condition and core the routing protocol daemon (rpd) process when a specific malformed IPv4 packet is received by the device running BGP. This malformed packet can be crafted and sent to a victim device including when forwarded directly through a device receiving such a malformed packet, but not if the malformed packet is first de-encapsulated from an encapsulated format by a receiving device. Continued receipt of the malformed packet will result in a sustained Denial of Service condition. This issue affects: Juniper Networks Junos OS 15.1 versions prior to 15.1F6-S12, 15.1R7-S2; 15.1X49 versions prior to 15.1X49-D150 on SRX Series; 15.1X53 versions prior to 15.1X53-D68, 15.1X53-D235, 15.1X53-D495, 15.1X53-D590; 16.1 versions prior to 16.1R3-S10, 16.1R4-S12, 16.1R6-S6, 16.1R7-S2; 16.2 versions prior to 16.2R2-S7; 17.1 versions prior to 17.1R2-S9, 17.1R3; 17.2 versions prior to 17.2R1-S7, 17.2R2-S6, 17.2R3; 17.3 versions prior to 17.3R2-S4, 17.3R3.

The post CVE-2019-0066 appeared first on CVE Vulnerability.

]]> CVE-2019-0068 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-0068/ Sun, 26 Feb 2023 06:28:36 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-0068/ The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending the specific multicast packets, an attacker can repeatedly crash the flowd process causing a sustained Denial of Service. This issue affects Juniper Networks Junos OS on SRX Series: 12.3X48 versions prior to 12.3X48-D90; 15.1X49 versions […]

The post CVE-2019-0068 appeared first on CVE Vulnerability.

]]> The SRX flowd process, responsible for packet forwarding, may crash and restart when processing specific multicast packets. By continuously sending the specific multicast packets, an attacker can repeatedly crash the flowd process causing a sustained Denial of Service. This issue affects Juniper Networks Junos OS on SRX Series: 12.3X48 versions prior to 12.3X48-D90; 15.1X49 versions prior to 15.1X49-D180; 17.3 versions; 17.4 versions prior to 17.4R2-S5, 17.4R3; 18.1 versions prior to 18.1R3-S6; 18.2 versions prior to 18.2R2-S4, 18.2R3; 18.3 versions prior to 18.3R2-S1, 18.3R3; 18.4 versions prior to 18.4R2; 19.1 versions prior to 19.1R1-S1, 19.1R2.

The post CVE-2019-0068 appeared first on CVE Vulnerability.

]]> CVE-2019-0075 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-0075/ Sun, 26 Feb 2023 06:28:36 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-0075/ A vulnerability in the srxpfe process on Protocol Independent Multicast (PIM) enabled SRX series devices may lead to crash of the srxpfe process and an FPC reboot while processing (PIM) messages. Sustained receipt of these packets may lead to an extended denial of service condition. Affected releases are Juniper Networks Junos OS on SRX Series: […]

The post CVE-2019-0075 appeared first on CVE Vulnerability.

]]> A vulnerability in the srxpfe process on Protocol Independent Multicast (PIM) enabled SRX series devices may lead to crash of the srxpfe process and an FPC reboot while processing (PIM) messages. Sustained receipt of these packets may lead to an extended denial of service condition. Affected releases are Juniper Networks Junos OS on SRX Series: 12.3X48 versions prior to 12.3X48-D80; 15.1X49 versions prior to 15.1X49-D160; 17.3 versions prior to 17.3R3-S7 17.4 versions prior to 17.4R2-S8, 17.4R3; 18.1 versions prior to 18.1R3-S8; 18.2 versions prior to 18.2R2; 18.3 versions prior to 18.3R2.

The post CVE-2019-0075 appeared first on CVE Vulnerability.

]]> CVE-2021-0266 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-0266/ Thu, 23 Feb 2023 14:06:10 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-0266/ The use of multiple hard-coded cryptographic keys in cSRX Series software in Juniper Networks Junos OS allows an attacker to take control of any instance of a cSRX deployment through device management services. This issue affects: Juniper Networks Junos OS on cSRX Series: All versions prior to 20.2R3; 20.3 versions prior to 20.3R2; 20.4 versions […]

The post CVE-2021-0266 appeared first on CVE Vulnerability.

]]> The use of multiple hard-coded cryptographic keys in cSRX Series software in Juniper Networks Junos OS allows an attacker to take control of any instance of a cSRX deployment through device management services. This issue affects: Juniper Networks Junos OS on cSRX Series: All versions prior to 20.2R3; 20.3 versions prior to 20.3R2; 20.4 versions prior to 20.4R2.

The post CVE-2021-0266 appeared first on CVE Vulnerability.

]]> CVE-2022-22251 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-22251/ Thu, 23 Feb 2023 05:02:46 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-22251/ On cSRX Series devices software permission issues in the container filesystem and stored files combined with storing passwords in a recoverable format in Juniper Networks Junos OS allows a local, low-privileged attacker to elevate their permissions to take control of any instance of a cSRX software deployment. This issue affects Juniper Networks Junos OS 20.2 […]

The post CVE-2022-22251 appeared first on CVE Vulnerability.

]]> On cSRX Series devices software permission issues in the container filesystem and stored files combined with storing passwords in a recoverable format in Juniper Networks Junos OS allows a local, low-privileged attacker to elevate their permissions to take control of any instance of a cSRX software deployment. This issue affects Juniper Networks Junos OS 20.2 version 20.2R1 and later versions prior to 21.2R1 on cSRX Series.

The post CVE-2022-22251 appeared first on CVE Vulnerability.

]]>