Vulnerabilities

TI-2020-01580 CVE-2020-1626 · GHSA-5pv5-vwqw-425f

Junos OS Evolved: Denial of Service vulnerability in processing high rate of specific packets

LOW 36

A vulnerability in Juniper Networks Junos OS Evolved may allow an attacker to cause a Denial of Service (DoS) by sending a high rate of specific packets to the device, resulting in a pfemand process crash.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01363 Published 2020-04-08 Fixed in 19.1R1-EVO

TI-2020-01578 CVE-2020-1624 · GHSA-hf43-vx6m-vr9g

Junos OS Evolved: objmon logs may leak sensitive information

LOW 25

A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via raw objmon configuration files.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00315 Published 2020-04-08 Fixed in 19.1R1-EVO CWE-532

TI-2020-01576 CVE-2020-1622 · GHSA-85q4-g73v-3g52

Junos OS Evolved: EvoSharedObjStore may leak sensitive information

LOW 25

A local, authenticated user with shell can obtain the hashed values of login passwords and shared secrets via the EvoSharedObjStore.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00315 Published 2020-04-08 Fixed in 19.1R1-EVO CWE-664

Vulnerabilities

Filters

Junos OS Evolved: Denial of Service vulnerability in processing high rate of specific packets

Junos OS Evolved: objmon logs may leak sensitive information

Junos OS Evolved: EvoSharedObjStore may leak sensitive information