CVE-2024-39560Medium 6.5Junos OS and Junos OS Evolved: Memory leak due to RSVP neighbor persistent error leading to kernel crash0.2%
CVE-2024-39558Medium 6.5Junos OS and Junos OS Evolved: Receipt of specific PIM packet causes rpd crash when PIM is configured along with MoFRR0.3%
CVE-2024-39556Medium 6.4Junos OS and Junos OS Evolved: Loading a malicious certificate from the CLI may result in a stack-based overflow<0.1%
CVE-2024-39555High 7.5Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP update causes the session to reset0.5%
CVE-2024-39554Medium 5.9Junos OS and Junos OS Evolved: BGP multipath incremental calculation is resulting in an rpd crash0.4%
CVE-2024-21586High 7.5Junos OS: SRX Series and NFX Series: Specific valid traffic leads to a PFE crash0.5%
CVE-2024-30380Medium 6.5Junos OS and Junos OS Evolved: l2cpd crash upon receipt of a specific TLV0.3%
CVE-2024-30378Medium 5.5Junos OS: MX Series: bbe-smgd process crash upon execution of specific CLI commands0.2%
CVE-2024-30402Medium 5.9Junos OS and Junos OS Evolved: The l2ald crashes on receiving telemetry messages from a specific subscription0.5%
CVE-2024-30401Medium 5.9Junos OS: MX Series and EX9200-15C: Stack-based buffer overflow in aftman0.6%
CVE-2024-30398High 7.5Junos OS: SRX4600 Series - A high amount of specific traffic causes packet drops and an eventual PFE crash0.6%
CVE-2024-30397High 7.5Junos OS: An invalid certificate causes a Denial of Service in the Internet Key Exchange (IKE) process0.3%
CVE-2024-30391Medium 4.8Junos OS: MX Series with SPC3, and SRX Series: When IPsec authentication is configured with "hmac-sha-384" and "hmac-sha-512" no authentication of traffic is performed0.4%
CVE-2024-30386Medium 5.3Junos OS and Junos OS Evolved: In a EVPN-VXLAN scenario state changes on adjacent systems can cause an l2ald process crash0.3%
CVE-2024-30384Medium 5.5Junos OS: EX4300 Series: If a specific CLI command is issued PFE crashes will occur0.2%
CVE-2024-30382High 7.5Junos OS and Junos OS Evolved: RPD crash when CoS-based forwarding (CBF) policy is configured0.7%
CVE-2024-30387Medium 6.5Junos OS: ACX5448 & ACX710: Due to interface flaps the PFE process can crash0.2%
CVE-2024-30388Medium 6.5Junos OS: QFX5000 Series and EX Series: Specific malformed LACP packets will cause flaps0.3%
CVE-2024-30392High 7.5Junos OS: MX Series with SPC3 and MS-MPC/-MIC: When URL filtering is enabled and a specific URL request is received a flowd crash occurs0.7%
CVE-2024-30394High 7.5Junos OS and Junos OS Evolved: A specific EVPN type-5 route causes rpd crash0.7%
CVE-2024-30395High 7.5Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash0.5%
CVE-2024-30405High 7.5Junos OS: SRX 5000 Series with SPC2: Processing of specific crafted packets when ALG is enabled causes a transit traffic Denial of Service0.6%
CVE-2024-30409Medium 5.3Junos OS and Junos OS Evolved: Higher CPU consumption on routing engine leads to Denial of Service (DoS).0.5%
CVE-2024-21618Medium 6.5Junos OS and Junos OS Evolved: When LLDP is enabled and a malformed LLDP packet is received, l2cpd crashes0.3%
CVE-2024-21615Medium 5.0Junos OS and Junos OS Evolved: A low-privileged user can access confidential information0.2%
CVE-2024-21610Medium 4.3Junos OS: If in a scaled CoS scenario information on CoS state is gathered mgd processes get stuck0.5%
CVE-2024-21609Medium 6.5Junos OS: MX Series with SPC3, and SRX Series: If specific IPsec parameters are negotiated iked will crash due to a memory leak0.3%
CVE-2024-21605Medium 6.5Junos OS: SRX 300 Series: Specific link local traffic causes a control plane overload0.3%
CVE-2024-21598High 7.5Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash0.6%
CVE-2024-21593Medium 6.5Junos OS: MX Series with MPC10, MPC11, LC9600, and MX304: A specific MPLS packet will cause a PFE crash0.3%
CVE-2024-21620High 8.8Junos OS: SRX Series and EX Series: J-Web doesn't sufficiently sanitize input to prevent XSS0.9%
CVE-2024-21619Medium 5.3Junos OS: SRX Series and EX Series: J-Web - unauthenticated access to temporary files containing sensitive information0.9%
CVE-2024-21616High 7.5Junos OS: MX Series and SRX Series: Processing of a specific SIP packet causes NAT IP allocation to fail0.5%
CVE-2024-21614High 7.5Junos OS and Junos OS Evolved: A specific query via DREND causes rpd crash0.7%
CVE-2024-21613Medium 6.5Junos OS and Junos OS Evolved: A link flap causes patroot memory leak which leads to rpd crash0.3%
CVE-2024-21611High 7.5Junos OS and Junos OS Evolved: In a jflow scenario continuous route churn will cause a memory leak and eventually an rpd crash0.6%
CVE-2024-21607Medium 5.3Junos OS: MX Series and EX9200 Series: If the "tcp-reset" option used in an IPv6 filter, matched packets are accepted instead of rejected0.3%
CVE-2024-21606High 7.5Junos OS: SRX Series: When "tcp-encap" is configured and specific packets are received flowd will crash0.6%
CVE-2024-21603Medium 6.5Junos OS: MX Series: Gathering statistics in a scaled SCU/DCU configuration will lead to a device crash0.5%
CVE-2024-21601Medium 5.9Junos OS: SRX Series: Due to an error in processing TCP events flowd will crash0.5%
CVE-2024-21600Medium 6.5Junos OS: PTX Series: In an FTI scenario MPLS packets hitting reject next-hop will cause a host path wedge condition0.3%
CVE-2024-21597Medium 5.3Junos OS: MX Series: In an AF scenario traffic can bypass configured lo0 firewall filters0.4%
CVE-2024-21596Medium 5.3Junos OS and Junos OS Evolved: A specific BGP UPDATE message will cause a crash in the backup Routing Engine in NSR-enabled devices0.5%
CVE-2024-21595High 7.5Junos OS: EX4100, EX4400, EX4600, QFX5000 Series: A high rate of specific ICMP traffic will cause the PFE to hang0.5%
CVE-2024-21594Medium 5.5Junos OS: SRX 5000 Series: Repeated execution of a specific CLI command causes a flowd crash0.2%
CVE-2024-21591Critical 9.8Junos OS: SRX Series and EX Series: Security Vulnerability in J-web allows a preAuth Remote Code Execution17.7%
CVE-2024-21587Medium 6.5Junos OS: MX Series: Memory leak in bbe-smgd process if BFD liveness detection for DHCP subscribers is enabled0.3%