The version of Junos OS installed on the remote host is affected by denial of service vulnerabilities as referenced in the JSA11168 advisory:

  - On Juniper Networks Junos OS platforms configured as DHCPv6 local server or DHCPv6 Relay Agent, Juniper Networks     Dynamic Host Configuration Protocol Daemon (JDHCPD) process might crash with a core dump if a specific DHCPv6     packet is received, resulting in a restart of the daemon. The daemon automatically restarts without intervention,     but continued receipt and processing of these specific packets will repeatedly crash the JDHCPD process and sustain     the Denial of Service (DoS) condition. (CVE-2021-0241)

  - On Juniper Networks Junos OS platforms configured as DHCPv6 local server or DHCPv6 Relay Agent, the Juniper     Networks Dynamic Host Configuration Protocol Daemon (JDHCPD) process might crash if a malformed DHCPv6 packet is     received, resulting in a restart of the daemon. The daemon automatically restarts without intervention, but     continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition.
    (CVE-2021-0240)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11145 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11130 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA11169 advisory.

  - Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote     attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket.
    (CVE-2016-10009)

  - sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets     as root, which might allow local users to gain privileges via unspecified vectors, related to     serverloop.c. (CVE-2016-10010)

  - authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer     contents, which might allow local users to obtain sensitive private-key information by leveraging access     to a privilege-separated child process. (CVE-2016-10011)

  - The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4     does not ensure that a bounds check is enforced by all compilers, which might allows local users to gain     privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and     m_zlib data structures. (CVE-2016-10012)

  - sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference     and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c     and packet.c. (CVE-2016-10708)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11166 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11154 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11151 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11139 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11146 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11157 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11133 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11143 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11119 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11118 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11155 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11129 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11153 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11152 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11117 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11115 advisory.

  - NTP through 4.2.8p12 has a NULL Pointer Dereference. (CVE-2019-8936)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11158 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11163 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11136 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11159 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11149 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11162 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11135 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11144 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11164 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11138 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11150 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA11175 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self- reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11140 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA11171 advisory.

  - The control mode (mode 6) functionality in ntpd in NTP before 4.2.8p9 allows remote attackers to set or     unset traps via a crafted control mode packet. (CVE-2016-9310)

  - The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a     denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1     requests, as exploited in the wild in December 2013. (CVE-2013-5211)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a denial of service vulnerability as referenced in the JSA11094 advisory. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11100 advisory: an information exposure vulnerability in J-Web of Juniper Networks Junos OS allows an unauthenticated attacker to elevate their privileges over the target system through opportunistic use of an authenticated users session.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is prior to 14.1X53-D53, 15.1R7-S4, 15.1X53-D593, 16.1R7-S4, 17.1R2-S11, 17.2R3-S3, 17.3R2-S5, 17.4R2-S9, 18.1R3-S8, 18.2R2, or 18.3R1-S7. It is, therefore, affected by an authentication bypass vulnerability as referenced in the JSA11001 advisory. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a denial of service vulnerability. An unauthenticated remote attacker can send a valid BGP FlowSpec message thereby causing an unexpected change in the route advertisements within the BGP FlowSpec domain leading to disruptions in network traffic causing a Denial of Service (DoS) condition as referenced in the JSA11101 advisory. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An improper interpretation conflict of certain data between certain software components within the Juniper Networks Junos OS devices does not allow certain traffic to pass through the device upon receipt from an ingress interface filtering certain specific types of traffic which is then being redirected to an egress interface on a different VLAN. This causes a Denial of Service (DoS) to those clients sending these particular types of traffic. Such traffic being sent by a client may appear genuine, but is non-standard in nature and should be considered as potentially malicious, and can be targeted to the device, or destined through it for the issue to occur.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11098 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by multiple local privilege escalation vulnerabilities as referenced in the JSA11114 advisory. Specifically:

  - A sensitive information disclosure vulnerability in delta-export configuration utility (dexp) of Juniper     Networks Junos OS may allow a locally authenticated shell user the ability to create and read database     files generated by the dexp utility, including password hashes of local users. Since dexp is shipped with     setuid permissions enabled and is owned by the root user, this vulnerability may allow a local privileged     user the ability to run dexp with root privileges and access sensitive information in the dexp database.
    (CVE-2021-0204)     
  - A local privilege escalation vulnerability in telnetd.real of Juniper Networks Junos OS may allow a locally     authenticated shell user to escalate privileges and execute arbitrary commands as root. telnetd.real is     shipped with setuid permissions enabled and is owned by the root user, allowing local users to run telnetd.real     with root privileges. (CVE-2021-0223)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11096 advisory. A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to send a specific packet causing the packet forwarding engine (PFE) to crash and restart, resulting in a Denial of Service (DoS). By continuously sending these specific packets, an attacker can repeatedly disable the PFE causing a sustained Denial of Service (DoS). This issue only affects Juniper Networks NFX Series, SRX Series platforms when SSL Proxy is configured.
This issue affects Juniper Networks Junos OS on NFX Series and SRX Series: 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R3-S1; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3; 19.2 versions prior to 19.2R1-S2, 19.2R2; 19.3 versions prior to 19.3R2. This issue does not affect Juniper Networks Junos OS versions on NFX Series and SRX Series prior to 18.3R1.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a denial of service vulnerability as referenced in the JSA11092 advisory. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a command injection vulnerability as referenced in the JSA11108 advisory. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a command injection vulnerability as referenced in the JSA11109 advisory. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a denial of service vulnerability as referenced in the JSA11111 advisory. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a denial of service vulnerability as referenced in the JSA11091 advisory. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11105 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a denial of service vulnerability as referenced in the JSA11107 advisory. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11083 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
149351	Juniper Junos OS DoS (JSA11168)	medium
148683	Juniper Junos OS Vulnerability (JSA11145)	medium
148682	Juniper Junos OS Vulnerability (JSA11130)	medium
148681	Juniper Junos OS Multiple Vulnerabilities (JSA11169)	high
148680	Juniper Junos OS Vulnerability (JSA11166)	high
148679	Juniper Junos OS Vulnerability (JSA11154)	medium
148678	Juniper Junos OS Vulnerability (JSA11151)	high
148677	Juniper Junos OS Vulnerability (JSA11139)	medium
148676	Juniper Junos OS Vulnerability (JSA11146)	medium
148675	Juniper Junos OS Vulnerability (JSA11157)	high
148673	Juniper Junos OS Vulnerability (JSA11133)	low
148672	Juniper Junos OS Vulnerability (JSA11143)	medium
148671	Juniper Junos OS Vulnerability (JSA11119)	medium
148670	Juniper Junos OS Vulnerability (JSA11118)	medium
148669	Juniper Junos OS Vulnerability (JSA11155)	medium
148668	Juniper Junos OS Vulnerability (JSA11129)	medium
148667	Juniper Junos OS Vulnerability (JSA11153)	low
148666	Juniper Junos OS Vulnerability (JSA11152)	medium
148665	Juniper Junos OS Vulnerability (JSA11117)	low
148664	Juniper Junos OS Vulnerability (JSA11115)	medium
148663	Juniper Junos OS Vulnerability (JSA11158)	medium
148662	Juniper Junos OS Vulnerability (JSA11163)	medium
148661	Juniper Junos OS Vulnerability (JSA11136)	low
148660	Juniper Junos OS Vulnerability (JSA11159)	medium
148659	Juniper Junos OS Vulnerability (JSA11149)	high
148658	Juniper Junos OS Vulnerability (JSA11162)	medium
148657	Juniper Junos OS Vulnerability (JSA11135)	medium
148654	Juniper Junos OS Vulnerability (JSA11144)	medium
148653	Juniper Junos OS Vulnerability (JSA11164)	medium
148651	Juniper Junos OS Vulnerability (JSA11138)	high
148650	Juniper Junos OS Vulnerability (JSA11150)	low
148649	Juniper Junos OS Multiple Vulnerabilities (JSA11175)	high
148648	Juniper Junos OS Vulnerability (JSA11140)	medium
148645	Juniper Junos OS Multiple Vulnerabilities (JSA11171)	medium
146194	Juniper Junos OS DoS (JSA11094)	medium
146106	Juniper Junos OS Privilege Escalation in J-Web (JSA11100)	medium
146092	Juniper Junos Authentication Bypass (JSA11001)	medium
146090	Juniper Junos OS DoS (JSA11101)	medium
145691	Juniper Junos OS DoS (JSA11097)	medium
145571	Juniper Junos OS Denial of Service (JSA11098)	low
145502	Juniper Junos OS Multiple Local Privilege Escalation Vulnerabilities (JSA11114)	high
145261	Juniper Junos DoS (JSA11096)	medium
144986	Juniper Junos OS DoS (JSA11092)	medium
144985	Juniper Junos OS Command Injection (JSA11108)	high
144984	Juniper Junos OS Command Injection (JSA11109)	high
144983	Juniper Junos OS DoS (JSA11111)	low
144982	Juniper Junos OS DoS (JSA11091)	medium
144978	Juniper Junos OS Denial of Service (JSA11105)	low
144933	Juniper Junos OS DoS (JSA11107)	low
143383	Junos OS malformed IPv6 packet DoS (JSA11083)	high

Junos Local Security Checks Family for Nessus

medium

medium

medium

high

high

medium

high

medium

medium

high

low

medium

medium

medium

medium

medium

low

medium

low

medium

medium

medium

low

medium

high

medium

medium

medium

medium

high

low

high

medium

medium

medium

medium

medium

medium

medium

low

high

medium

medium

high

high

low

medium

low

low

high