Juniper Networks - Channel: Security Advisories Category: SIRT Advisory http://kb.juniper.net/InfoCenter/index?page=home Security Advisories by: SIRT Advisory en Copyright © 2002, 2022, Oracle and/or its affiliates. All rights reserved. Oracle Knowledge Information Manager http://blogs.law.harvard.edu/tech/rss <![CDATA[JSA11253 - 2021-10 Security Bulletin: Junos OS: J-Web: A path traversal vulnerability allows an authenticated attacker to elevate their privileges to root (CVE-2021-31385) ]]> Wed, 13 Oct 2021 12:00:00 -0400 <![CDATA[JSA11283 - 2022-01 Security Bulletin: Junos OS and Junos OS Evolved: After receiving a specific number of crafted packets snmpd will segmentation fault (SIGSEGV) requiring a manual restart. (CVE-2022-22177) ]]> Wed, 12 Jan 2022 12:00:00 -0500 <![CDATA[JSA11260 - 2022-01 Security Bulletin: Contrail Service Orchestration: Tenants able to see other tenants policies via REST API interface (CVE-2022-22152) ]]> Wed, 12 Jan 2022 12:00:00 -0500 <![CDATA[JSA11261 - 2022-01 Security Bulletin: SRX Series and MX Series with SPC3: A high percentage of fragments might lead to high latency or packet drops (CVE-2022-22153) ]]> Wed, 12 Jan 2022 12:00:00 -0500 <![CDATA[JSA11262 - 2022-01 Security Bulletin: Junos Fusion: A Satellite Device can be controlled by rewiring it to a foreign AD causing a DoS (CVE-2022-22154) ]]> Wed, 12 Jan 2022 12:00:00 -0500 <![CDATA[JSA11263 - 2022-01 Security Bulletin: Junos OS: ACX5448: FPC memory leak due to IPv6 neighbor flaps (CVE-2022-22155) ]]> Wed, 12 Jan 2022 12:00:00 -0500 <![CDATA[JSA11264 - 2022-01 Security Bulletin: Junos OS: Certificate validation is skipped when fetching system scripts from a HTTPS URL (CVE-2022-22156) ]]> Wed, 12 Jan 2022 12:00:00 -0500 <![CDATA[JSA11265 - 2022-01 Security Bulletin: Junos OS: SRX Series: Multiple vulnerabilities in traffic classification when 'no-syn-check' is enabled (CVE-2022-22157, CVE-2022-22167) ]]> Wed, 12 Jan 2022 12:00:00 -0500 <![CDATA[JSA11267 - 2022-01 Security Bulletin: Junos OS: An attacker sending crafted packets can cause a traffic and CPU Denial of Service (DoS). (CVE-2022-22159) ]]> Wed, 12 Jan 2022 12:00:00 -0500 <![CDATA[JSA11268 - 2022-01 Security Bulletin: Junos OS: MX Series: The bbe-smgd process crashes if an unsupported configuration exists and a PPPoE client sends a specific message (CVE-2022-22160) ]]> Wed, 12 Jan 2022 12:00:00 -0500