Juniper Networks Junos OS

• CVE-2020-1655 Medium 5.3 Junos OS: MX Series: PFE crash on MPC7/8/9 upon receipt of large packets requiring fragmentation 1.0%
• CVE-2020-1654 Critical 9.8 Junos OS: SRX Series: processing a malformed HTTP message when ICAP redirect service is enabled may can lead to flowd process crash or remote code execution 2.2%
• CVE-2020-1653 High 7.5 Junos OS: Kernel crash (vmcore) or FPC crash due to mbuf leak 1.6%
• CVE-2020-1651 Medium 6.5 Junos OS: MX Series: PFE on the line card may crash due to memory leak. 0.5%
• CVE-2020-1650 High 7.5 Junos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC 1.0%
• CVE-2020-1649 High 7.5 Junos OS: MX Series: PFE crash on MPC7/8/9 upon receipt of small fragments requiring reassembly 1.1%
• CVE-2020-1648 High 7.5 Junos OS and Junos OS Evolved: RPD crash when processing a specific BGP packet 1.3%
• CVE-2020-1647 Critical 9.8 Junos OS: SRX Series: Double free vulnerability can lead to DoS or remote code execution due to the processing of a specific HTTP message when ICAP redirect service is enabled 2.6%
• CVE-2020-1646 High 7.5 Junos OS and Junos OS Evolved: RPD crash while processing a specific BGP update information. 1.0%
• CVE-2020-1645 High 8.3 Junos OS: MX Series: Services card might restart when DNS filtering is enabled 0.6%
• CVE-2020-1644 High 7.5 Junos OS and Junos OS Evolved: RPD crash due to specific BGP UPDATE packets 1.3%
• CVE-2020-1643 Medium 5.5 Junos OS: EX Series: RPD crash when executing specific "show ospf interface" commands from the CLI with OSPF authentication configured 0.4%
• CVE-2020-1641 Medium 6.5 Junos OS: A race condition on receipt of crafted LLDP packets leads to a memory leak and an LLDP crash. 0.4%
• CVE-2020-1640 High 7.5 Junos OS: Receipt of certain genuine BGP packets from any BGP Speaker causes RPD to crash. 1.4%
• CVE-2020-1632 High 8.6 Junos OS and Junos OS Evolved: Invalid BGP UPDATE sent to peer device may cause BGP session to terminate. 1.1%
• CVE-2020-1633 High 7.4 Junos OS: MX Series: Crafted packets traversing a Broadband Network Gateway (BNG) configured with IPv6 NDP proxy could lead to Denial of Service 0.5%
• CVE-2020-1639 High 7.5 Junos OS: A crafted Ethernet OAM packet received by Junos may cause the Ethernet OAM connectivity fault management process (CFM) to core. 1.1%
• CVE-2020-1638 High 7.5 Junos OS & Junos OS Evolved: A specific IPv4 packet can lead to FPC restart. 1.3%
• CVE-2020-1637 High 7.2 Junos OS: SRX Series: Unified Access Control (UAC) bypass vulnerability 0.8%
• CVE-2020-1634 High 7.5 Junos OS: High-End SRX Series: Multicast traffic might cause all FPCs to reset. 1.3%
• CVE-2020-1630 Medium 5.0 Junos OS: Privilege escalation vulnerability in dual REs, VC or HA cluster may allow unauthorized configuration change. 0.2%
• CVE-2020-1629 Medium 5.9 Junos OS: A race condition vulnerability may cause RPD daemon to crash when processing a BGP NOTIFICATION message. 0.7%
• CVE-2020-1628 Medium 5.3 Junos OS: EX4300: Traffic from the network internal to the device (128.0.0.0) may be forwarded to egress interfaces 1.3%
• CVE-2020-1627 High 7.5 Junos OS: vMX and MX150: Denial of Service vulnerability in packet processing 1.3%
• CVE-2020-1625 Medium 6.5 Junos OS: Kernel memory leak in virtual-memory due to interface flaps 0.8%
• CVE-2020-1619 Medium 6.0 Junos OS: QFX10K Series, EX9200 Series, MX Series, PTX Series: Privilege escalation vulnerability in NG-RE. 0.3%
• CVE-2020-1618 Medium 6.3 Junos OS: EX and QFX Series: Console port authentication bypass vulnerability 0.4%
• CVE-2020-1617 High 7.5 Junos OS: PTX1000 and PTX10000 Series, QFX10000 Series using non-AFT architectures: A specific genuine packet inspected by sFlow will cause a reboot. 1.6%
• CVE-2020-1615 Critical 9.8 Junos OS: vMX: Default credentials supplied in vMX configuration 1.8%
• CVE-2020-1613 High 8.6 Junos OS: BGP session termination upon receipt of specific BGP FlowSpec advertisement. 1.3%
• CVE-2020-1609 High 8.8 Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv6 packets and arbitrarily execute commands on the target device. 0.9%
• CVE-2020-1608 High 7.5 Junos OS: MX Series: In BBE configurations, receipt of a specific MPLS or IPv6 packet causes a Denial of Service 1.3%
• CVE-2020-1607 High 7.5 Junos OS: Cross-Site Scripting (XSS) in J-Web 0.9%
• CVE-2020-1606 Medium 5.4 Junos OS: Path traversal vulnerability in J-Web 0.9%
• CVE-2020-1605 High 8.8 Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv4 packets and arbitrarily execute commands on the target device. 0.8%
• CVE-2020-1604 Medium 6.5 Junos OS: EX4300/EX4600/QFX3500/QFX5100 Series: Stateless IP firewall filter may fail to evaluate certain packets 0.8%
• CVE-2020-1603 High 8.6 Junos OS: Improper handling of specific IPv6 packets sent by clients eventually kernel crash (vmcore) the device. 1.4%
• CVE-2020-1602 High 7.1 Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv4 packets may take over the code execution of the JDHCPD process. 0.8%
• CVE-2020-1601 Medium 5.3 Junos OS: Upon receipt of certain types of malformed PCEP packets the pccd process may crash. 1.1%
• CVE-2020-1600 Medium 6.5 Junos OS: A specific SNMP command can trigger a high CPU usage Denial of Service in the RPD daemon. 1.2%