The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69711 advisory.

A Use After Free vulnerability in the Advanced Forwarding Toolkit (AFT) manager process (aftmand) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause a kernel crash due to intensive polling of Abstracted Fabric (AF) interface statistics and thereby a Denial of Service (DoS). Continued gathering of AF interface statistics will create a sustained Denial of Service (DoS) condition

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69717 advisory.

  - A vulnerability in Handling of Undefined Values in the routing protocol daemon (RPD) process of Juniper     Networks Junos OS and Junos OS Evolved may allow an unauthenticated network-based attacker to crash the     RPD process by sending a specific BGP update while the system is under heavy load, leading to a Denial of     Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service     (DoS) condition. Malicious exploitation of this issue requires a very specific combination of load,     timing, and configuration of the vulnerable system which is beyond the direct control of the attacker.
    Internal reproduction has only been possible through artificially created load and specially instrumented     source code. Systems are only vulnerable to this issue if BGP multipath is enabled. Routers not configured     for BGP multipath are not vulnerable to this issue. This issue affects: Juniper Networks Junos OS: 21.1     versions prior to 21.1R3-S1; 21.2 versions prior to 21.2R2-S2, 21.2R3; 21.3 versions prior to 21.3R2,     21.3R3; 21.4 versions prior to 21.4R1-S1, 21.4R2. Juniper Networks Junos OS Evolved: 21.1 versions prior     to 21.1R3-S1-EVO; 21.2 version 21.2R1-EVO and later versions; 21.3 versions prior to 21.3R3-EVO; 21.4     versions prior to 21.4R1-S1-EVO, 21.4R2-EVO. This issue does not affect: Juniper Networks Junos OS     versions prior to 21.1. Juniper Networks Junos OS Evolved versions prior to 21.1-EVO. (CVE-2022-22213)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A vulnerability in the handling of exceptional conditions in Juniper Networks Junos OS Evolved (EVO) allows an attacker to send specially crafted packets to the device, causing the Advanced Forwarding Toolkit manager (evo-aftmand-bt or evo-aftmand-zx) process to crash and restart, impacting all traffic going through the FPC, resulting in a Denial of Service (DoS). Continued receipt and processing of these packets will create a sustained Denial of Service (DoS) condition.  

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A Buffer Overflow vulnerability in the PFE of Juniper Networks Junos OS on SRX series allows an unauthenticated network based attacker to cause a Denial of Service (DoS). The PFE will crash when specific traffic is scanned by Enhanced Web Filtering safe-search feature of UTM (Unified Threat management). Continued receipt of this specific traffic will create a sustained Denial of Service (DoS) condition, 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69716 advisory.

  - An Allocation of Resources Without Limits or Throttling vulnerability in the Packet Forwarding Engine     (PFE) of Juniper Networks Junos OS Evolved allows unauthenticated network based attacker to cause a Denial     of Service (DoS). On all Junos Evolved platforms hostbound protocols will be impacted by a high rate of     specific hostbound traffic from ports on a PFE. Continued receipt of this amount of traffic will create a     sustained Denial of Service (DoS) condition. This issue affects Juniper Networks Junos OS Evolved: 21.2     versions prior to 21.2R3-EVO; 21.3 versions prior to 21.3R2-EVO. This issue does not affect Juniper     Networks Junos OS Evolved versions prior to 21.2R1. (CVE-2022-22212)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA69705 advisory.

  - ** DISPUTED ** A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0     via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the     relevance of this report because a sqlite3.exe user already has full privileges (e.g., is intentionally     allowed to execute commands). This report does NOT imply any problem in the SQLite library.
    (CVE-2021-36690)

  - A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who     is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible     code execution by triggering a use-after-free. The highest threat from this vulnerability is to system     availability. (CVE-2021-20227)

  - In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy     heap overflow because of misuse of transitive properties for constant propagation. (CVE-2020-15358)

  - SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for     window functions is too late. (CVE-2020-13871)

  - ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo()     query. (CVE-2020-13632)

  - SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related     to alter.c and build.c. (CVE-2020-13631)

  - SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c. (CVE-2020-13435)

  - SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c. (CVE-2020-13434)

  - SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed     window-function query because the AggInfo object's initialization is mishandled. (CVE-2020-11655)

  - In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and     segmentation fault because of generated column optimizations. (CVE-2020-9327)

  - In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER     BY clause that belongs to a compound SELECT statement. (CVE-2020-11656)

  - ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet     feature. (CVE-2020-13630)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69713 advisory.    - A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos     OS allows an unauthenticated network based attacker to cause a Denial of Service (DoS). On all Junos platforms, the Kernel Routing Table (KRT) queue can get stuck due to a memory leak triggered by interface     flaps or route churn leading to RIB and PFEs getting out of sync. The memory leak causes RTNEXTHOP/route     and next-hop memory pressure issue and the KRT queue will eventually get stuck with the error- 'ENOMEM --     Cannot allocate memory'. The out-of-sync state between RIB and FIB can be seen with the show route and     show route forwarding-table command. This issue will lead to failures for adding new routes. The KRT     queue status can be checked using the CLI command show krt queue: user@host > show krt state High-     priority add queue: 1 queued ADD nhtype Router index 0 (31212) error 'ENOMEM -- Cannot allocate memory'     kqp '0x8ad5e40' The following messages will be observed in /var/log/messages, which indicate high memory     for routes/nexthops: host rpd[16279]: RPD_RT_HWM_NOTICE: New RIB highwatermark for routes: 266 [2022-03-04     05:06:07] host rpd[16279]: RPD_KRT_Q_RETRIES: nexthop ADD: Cannot allocate memory host rpd[16279]:     RPD_KRT_Q_RETRIES: nexthop ADD: Cannot allocate memory host kernel: rts_veto_net_delayed_unref_limit:
Route/nexthop memory is severe pressure. User Application to perform recovery actions. O p 8 err 12,     rtsm_id 0:-1, msg type 10, veto simulation: 0. host kernel: rts_veto_net_delayed_unref_limit: Memory usage     of M_RTNEXTHOP type = (806321208) Max size possible for M_RTNEXTHOP type = (689432176) Current delayed     unref = (0), Max delayed unref on this platform = (120000) Current delayed weight unref = (0) Max delayed     weight unref on this platform = (400000) curproc = rpd. This issue affects: Juniper Networks Junos OS 21.2     versions prior to 21.2R3; 21.3 versions prior to 21.3R2-S1, 21.3R3; 21.4 versions prior to 21.4R1-S2,     21.4R2; This issue does not affect Juniper Networks Junos OS versions prior to 21.2R1. (CVE-2022-22209)  Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.);   # http://www.nessus.org/u?99086ea4 script_set_attribute(attribute:see_also, value:http://www.nessus.org/u?99086ea4);   # http://www.nessus.org/u?b616ed59 script_set_attribute(attribute:see_also, value:http://www.nessus.org/u?b616ed59);   # http://www.nessus.org/u?0d4fd08b script_set_attribute(attribute:see_also, value:http://www.nessus.org/u?0d4fd08b);   # http://www.nessus.org/u?553f364c script_set_attribute(attribute:see_also, value:http://www.nessus.org/u?553f364c

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69718 advisory.

  - An Improper Input Validation vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos     OS and Junos OS Evolved allows an adjacent attacker to cause a PFE crash and thereby a Denial of Service     (DoS). An FPC will crash and reboot after receiving a specific transit IPv6 packet over MPLS. Continued     receipt of this packet will create a sustained Denial of Service (DoS) condition. This issue does not     affect systems configured for IPv4 only. This issue affects: Juniper Networks Junos OS All versions prior     to 12.3R12-S21; 15.1 versions prior to 15.1R7-S10; 17.3 versions prior to 17.3R3-S12; 18.3 versions prior     to 18.3R3-S6; 18.4 versions prior to 18.4R2-S9, 18.4R3-S9; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7;
    19.2 versions prior to 19.2R1-S7, 19.2R3-S3; 19.3 versions prior to 19.3R2-S7, 19.3R3-S4; 19.4 versions     prior to 19.4R3-S5; 20.1 versions prior to 20.1R3; 20.2 versions prior to 20.2R3-S2; 20.3 versions prior     to 20.3R3; 20.4 versions prior to 20.4R2-S2, 20.4R3; 21.1 versions prior to 21.1R2. Juniper Networks Junos     OS Evolved All versions prior to 20.4R3-S3-EVO; 21.2 versions prior to 21.2R3-EVO; 21.3 versions prior to     21.3R2-S1-EVO, 21.3R3-EVO; 21.4 versions prior to 21.4R2-EVO. (CVE-2022-22214)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69719 advisory.

  - A Missing Release of File Descriptor or Handle after Effective Lifetime vulnerability in plugable     authentication module (PAM) of Juniper Networks Junos OS and Junos OS Evolved allows a locally     authenticated attacker with low privileges to cause a Denial of Service (DoS). It is possible that after     the termination of a gRPC connection the respective/var/run/<pid>.env file is not getting deleted which if     occurring repeatedly can cause inode exhaustion. Inode exhaustion can present itself in two different     ways: 1. The following log message can be observed: host kernel: pid <pid> (<process>), uid <uid> inumber     <number> on /.mount/var: out of inodes which by itself is a clear indication. 2. The following log message     can be observed: host <process>[<pid>]: ... : No space left on device which is not deterministic and just     a representation of a write error which could have several reasons. So the following check needs to be     done: user@host> show system storage no-forwarding Filesystem Size Used Avail Capacity Mounted on     /dev/ada1p1 475M 300M 137M 69% /.mount/var which indicates that the write error is not actually due to a     lack of disk space. If either 1. or 2. has been confirmed, then the output of: user@host> file list     /var/run/*.env | count need to be checked and if it indicates a high (>10000) number of files the system     has been affected by this issue. This issue affects: Juniper Networks Junos OS All versions prior to     19.1R3-S8; 19.2 versions prior to 19.2R3-S6; 19.3 versions prior to 19.3R3-S5; 19.4 versions prior to     19.4R2-S6, 19.4R3-S7; 20.1 version 20.1R1 and later versions; 20.2 versions prior to 20.2R3-S5; 20.3     versions prior to 20.3R3-S4; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R3; 21.2 versions     prior to 21.2R2. Juniper Networks Junos OS Evolved All versions prior to 20.4R3-EVO; 21.1 versions prior     to 21.1R3-S1-EVO; 21.2 versions prior to 21.2R1-S1-EVO, 21.2R2-EVO. (CVE-2022-22215)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A Missing Release of Memory after Effective Lifetime vulnerability in the Application Quality of Experience (appqoe) subsystem of the PFE of Juniper Networks Junos OS on SRX Series allows an unauthenticated network based attacker to cause a Denial of Service (DoS). Upon receiving specific traffic a memory leak will occur. Sustained processing of such specific traffic will eventually lead to an out of memory condition that prevents all services from continuing to function, and requires a manual restart to recover.
 A device is only vulnerable when advance(d) policy based routing (APBR) is configured and AppQoE (sla rule) is not configured for these APBR rules.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An Incorrect Comparison vulnerability in PFE of Juniper Networks Junos OS allows an adjacent unauthenticated attacker  to cause a Denial of Service (DoS). On QFX5000 Series, and EX4600 and EX4650 platforms, the fxpc process will crash followed by the FPC reboot upon receipt of a specific hostbound packet. Continued receipt of these specific packets will create a sustained Denial of Service (DoS) condition.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69708 advisory.

  - An Improper Release of Memory Before Removing Last Reference vulnerability in the Session Initiation Protocol (SIP)     Application Layer Gateway (ALG) of Juniper Networks Junos OS allows unauthenticated network-based attacker to cause     a partial Denial of Service (DoS). On all MX and SRX platforms, if the SIP ALG is enabled, receipt of a specific     SIP packet will create a stale SIP entry. Sustained receipt of such packets will cause the SIP call table to     eventually fill up and cause a DoS for all SIP traffic. This issue affects Juniper Networks Junos OS on SRX Series     and MX Series: 20.4 versions prior to 20.4R3-S2; 21.1 versions prior to 21.1R3-S2; 21.2 versions prior to 21.2R2-S2;     21.2 versions prior to 21.2R3; 21.3 versions prior to 21.3R2; 21.4 versions prior to 21.4R2. This issue does not     affect Juniper Networks Junos OS versions prior to 20.4R1. (CVE-2022-22204)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An Improper Neutralization of Special Elements vulnerability in the download manager of Juniper Networks Junos OS allows a locally authenticated attacker with low privileges to take full control over the device.
 A workaround would be to deny users access to the 'request system download ...' and 'show system download ...' CLI commands.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on QFX5000 Series and MX Series allows an unauthenticated adjacent attacker to cause a Denial of Service (DoS).

On QFX5K Series and MX Series, when the PFE receives a specific VxLAN packet the Layer 2 Address Learning Manager (L2ALM) process will crash leading to an FPC reboot. Continued receipt of this specific packet will create a sustained Denial of Service (DoS) condition.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a Denial of Service (DoS). The issue is caused by malformed MLD packets looping on a multi-homed Ethernet Segment Identifier (ESI) when VXLAN is configured.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the PFE of Juniper Networks Junos OS on PTX Series and QFX10k Series allows an adjacent unauthenticated attacker to gain access to sensitive information. PTX1000 and PTX10000 Series, and QFX10000 Series and PTX5000 Series devices sometimes do not reliably pad Ethernet packets, and thus some packets can contain fragments of system memory or data from previous packets. This issue is also known as 'Etherleak' and often detected as CVE-2003-0001.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in J-Web of Juniper Networks Junos OS allows any low-privileged authenticated attacker to elevate their privileges to root. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

A persistent Cross-Site Scripting (XSS) vulnerability in Juniper Networks Junos OS on SRX Series, J-Web interface may allow a remote authenticated user to inject persistent and malicious scripts. An attacker can exploit this vulnerability to steal sensitive data and credentials from a web administration session, or hijack another user's active session to perform administrative actions. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11247 advisory. An Incorrect Behavior Order vulnerability in the MAP-E automatic tunneling mechanism of Juniper Networks Junos OS allows an attacker to send certain malformed IPv4 or IPv6 packets to cause a Denial of Service (DoS) to the PFE on the device which is disabled as a result of the processing of these packets. Continued receipt and processing of these malformed IPv4 or IPv6 packets will create a sustained Denial of Service (DoS) condition.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An Improper Access Control vulnerability in Juniper Networks Junos OS Evolved allows a network-based unauthenticated attacker who is able to connect to a specific open IPv4 port, which in affected releases should otherwise be unreachable, to cause the CPU to consume all resources as more traffic is sent to the port to create a denial of service (DoS) condition. Continued receipt and processing of these packets will create a sustained denial of service (DoS) condition. This issue affects: Juniper Networks Junos OS Evolved 20.4 versions prior to 20.4R3-S2-EVO; 21.1 versions prior to 21.1R3-S1-EVO; 21.2 versions prior to 21.2R3-EVO; 21.3 versions prior to 21.3R2-EVO; 21.4 versions prior to 21.4R2-EVO. This issue does not affect Junos OS.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An uncontrolled memory allocation vulnerability leading to a heap-based buffer overflow in the packet forwarding engine (PFE) of Juniper Networks Junos OS allows a network-based unauthenticated attacker to flood the device with traffic leading to a Denial of Service (DoS). The device must be configured with storm control profiling limiting the number of unknown broadcast, multicast, or unicast traffic to be vulnerable to this issue.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11213 advisory. An Improper Handling of Exceptional Conditions vulnerability in the processing of a transit or directly received malformed IPv6 packet in Juniper Networks Junos OS results in a kernel crash, causing the device to restart, leading to a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue only affects systems with IPv6 configured. Devices with only IPv4 configured are not vulnerable to this issue. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11229 advisory.

A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on PTX Series allows an adjacent attacker to cause a Denial of Service (DoS) by sending genuine BGP flowspec packets which cause an FPC heap memory leak. Once having run out of memory the FPC will crash and restart along with a core dump. Continued receipted of these packets will create a sustained Denial of Service (DoS) condition. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69494 advisory.

  - Due to an Improper Initialization vulnerability in Juniper Networks Junos OS on EX4650 devices, packets     received on the management interface (em0) but not destined to the device, may be improperly forwarded to     an egress interface, instead of being discarded. Such traffic being sent by a client may appear genuine,     but is non-standard in nature and should be considered as potentially malicious. This issue affects:
    Juniper Networks Junos OS on EX4650 Series: All versions prior to 19.1R3-S8; 19.2 versions prior to     19.2R3-S5; 19.3 versions prior to 19.3R3-S5; 19.4 versions prior to 19.4R3-S7; 20.1 versions prior to     20.1R3-S3; 20.2 versions prior to 20.2R3-S4; 20.3 versions prior to 20.3R3-S3; 20.4 versions prior to     20.4R3-S2; 21.1 versions prior to 21.1R3-S1; 21.2 versions prior to 21.2R3; 21.3 versions prior to 21.3R2;
    21.4 versions prior to 21.4R2; 22.1 versions prior to 22.1R1. (CVE-2022-22186)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11212 advisory.

  - A Race Condition in the 'show chassis pic' command in Juniper Networks Junos OS Evolved may allow an attacker to     crash the port interface concentrator daemon (picd) process on the FPC, if the command is executed coincident with     other system events outside the attacker's control, leading to a Denial of Service (DoS) condition. Continued     execution of the CLI command, under precise conditions, could create a sustained Denial of Service (DoS) condition.     This issue affects all Juniper Networks Junos OS Evolved versions prior to 20.1R2-EVO on PTX10003 and PTX10008     platforms. Junos OS is not affected by this vulnerability. (CVE-2021-0298)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69503 advisory.

  - An Improper Handling of Unexpected Data Type vulnerability in the Routing Protocol Daemon (rpd) of Juniper     Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with low privileges to     cause a Denial of Service (DoS). Continued execution of this command might cause a sustained Denial of     Service condition. If BGP rib sharding is configured and a certain CLI command is executed the rpd process     can crash. During the rpd crash and restart, the routing protocols might be impacted and traffic     disruption might be seen due to the loss of routing information. This issue affects: Juniper Networks     Junos OS 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R3;
    21.2 versions prior to 21.2R2. Juniper Networks Junos OS Evolved 20.4 versions prior to 20.4R3-EVO; 21.1     versions prior to 21.1R3-EVO; 21.2 versions prior to 21.2R2-EVO. This issue does not affect: Juniper     Networks Junos OS versions prior to 20.3R1. Juniper Networks Junos OS Evolved versions prior to     20.3R1-EVO. (CVE-2022-22193)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69505 advisory.

  - An Improper Check for Unusual or Exceptional Conditions vulnerability in the packetIO daemon of Juniper Networks     Junos OS Evolved on PTX10003, PTX10004, and PTX10008 allows an unauthenticated, network-based attacker to cause     a Denial of Service (DoS). Continued receipt of these crafted packets will cause a sustained Denial of Service     condition. This issue affects Juniper Networks Junos OS Evolved all versions prior to 20.4R2-S3-EVO on PTX10003,     PTX10004, and PTX10008. This issue does not affect: Juniper Networks Junos OS Evolved versions 21.1R1-EVO and     above; Juniper Networks Junos OS. (CVE-2022-22194)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69519 advisory.

  - A Cross-site Scripting (XSS) vulnerability in Juniper Networks Junos OS J-Web allows an attacker to construct a URL     that when visited by another user enables the attacker to execute commands with the target's permissions, including     an administrator. This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S19; 15.1 versions     prior to 15.1R7-S10; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R2-S10, 18.4R3-S9; 19.1 versions     prior to 19.1R2-S3, 19.1R3-S6; 19.2 versions prior to 19.2R1-S8, 19.2R3-S3; 19.3 versions prior to 19.3R2-S6, 19.3R3-S3;     19.4 versions prior to 19.4R3-S5; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S2; 20.3 versions prior     to 20.3R3; 20.4 versions prior to 20.4R2-S2, 20.4R3; 21.1 versions prior to 21.1R1-S1, 21.1R2; 21.2 versions prior to     21.2R1-S1, 21.2R2.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69493 advisory.

  - A vulnerability in Juniper Networks Junos OS on SRX Series, allows a network-based unauthenticated     attacker to cause a Denial of Service (DoS) by sending a specific fragmented packet to the device,     resulting in a flowd process crash, which is responsible for packet forwarding. Continued receipt and     processing of this specific packet will create a sustained DoS condition. This issue only affects SRX     Series when 'preserve-incoming-fragment-size' feature is enabled. This issue affects Juniper Networks     Junos OS on SRX Series: 18.3 versions prior to 18.3R3-S6; 18.4 versions prior to 18.4R3-S10; 19.1 versions     prior to 19.1R3-S7; 19.2 versions prior to 19.2R3-S4; 19.3 versions prior to 19.3R3-S4; 19.4 versions     prior to 19.4R3-S6; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions     prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions     prior to 21.2R2. This issue does not affect Juniper Networks Junos OS prior to 17.3R1. (CVE-2022-22185)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11239 advisory. On Juniper Networks Junos OS and Junos OS Evolved devices processing a specially crafted BGP UPDATE or KEEPALIVE message can lead to a routing process daemon (RPD) crash and restart, causing a Denial of Service (DoS). Continued receipt and processing of this message will create a sustained Denial of Service (DoS) condition. This issue affects both IBGP and EBGP deployments over IPv4 or IPv6. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11237 advisory. An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated J-Web attacker to escalate their privileges to root over the target device. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11240 advisory.

  - An Improper Input Validation vulnerability in routing process daemon (RPD) of Juniper Networks Junos OS devices     configured with BGP origin validation using Resource Public Key Infrastructure (RPKI), allows an attacker to send a     specific BGP update which may cause RPKI policy-checks to be bypassed. This, in turn, may allow a spoofed     advertisement to be accepted or propagated. This issue affects: Juniper Networks Junos OS 12.3 versions prior to     12.3R12-S18; 15.1 versions prior to 15.1R7-S9; 17.2 versions prior to 17.2R3-S3; 17.3 versions prior to 17.3R3-S7;     17.4 versions prior to 17.4R2-S9, 17.4R3; 18.1 versions prior to 18.1R3-S13; 18.2 versions prior to 18.2R3-S3; 18.3     versions prior to 18.3R3-S1; 18.4 versions prior to 18.4R3; 19.1 versions prior to 19.1R2; 19.2 versions prior to     19.2R2; 19.3 versions prior to 19.3R2. (CVE-2021-31375)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11264 advisory. An Improper Certificate Validation weakness in the Juniper Networks Junos OS allows an attacker to perform Person-in-the-Middle (PitM) attacks when a system script is fetched from a remote source at a specified HTTPS URL, which may compromise the integrity and confidentiality of the device.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11189 advisory.

  - In a Segment Routing ISIS (SR-ISIS)/MPLS environment, on Juniper Networks Junos OS and Junos OS Evolved     devices, configured with ISIS Flexible Algorithm for Segment Routing and sensor-based statistics, a flap     of a ISIS link in the network, can lead to a routing process daemon (RPD) crash and restart, causing a     Denial of Service (DoS). Continued link flaps will create a sustained Denial of Service (DoS) condition.
    This issue affects: Juniper Networks Junos OS: 19.4 versions prior to 19.4R1-S4, 19.4R3-S2; 20.1 versions     prior to 20.1R2-S1, 20.1R3; 20.2 versions prior to 20.2R2-S2, 20.2R3; 20.3 versions prior to 20.3R2;
    Juniper Networks Junos OS Evolved: 20.3-EVO versions prior to 20.3R2-EVO; 20.4-EVO versions prior to     20.4R2-EVO. This issue does not affect: Juniper Networks Junos OS releases prior to 19.4R1. Juniper     Networks Junos OS Evolved releases prior to 19.4R1-EVO. (CVE-2021-0287)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11246 advisory.

  - In broadband environments, including but not limited to Enhanced Subscriber Management, (CHAP, PPP, DHCP, etc.),     on Juniper Networks Junos OS devices where RADIUS servers are configured for managing subscriber access and a     subscriber is logged in and then requests to logout, the subscriber may be forced into a 'Terminating' state     by an attacker who is able to send spoofed messages appearing to originate from trusted RADIUS server(s) destined     to the device in response to the subscriber's request. These spoofed messages cause the Junos OS General     Authentication Service (authd) daemon to force the broadband subscriber into this 'Terminating' state which the     subscriber will not recover from thereby causing a Denial of Service (DoS) to the endpoint device. Once in the     'Terminating'state, the endpoint subscriber will no longer be able to access the network. Restarting the authd     daemon on the Junos OS device will temporarily clear the subscribers out of the 'Terminating' state. As long as the     attacker continues to send these spoofed packets and subscribers request to be logged out, the subscribers will be     returned to the 'Terminating' state thereby creating a persistent Denial of Service to the subscriber. An indicator     of compromise may be seen by displaying the output of 'show subscribers summary'. The presence of subscribers in     the 'Terminating' state may indicate the issue is occurring. (CVE-2021-31378)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a denial of service vulnerability due to the routing protocol (rdp) daemon not properly validating data properly in BGP update messages. An unauthenticated, remote attacker can exploit this, by sending a malformed BGP update message, to cause the rdp daemon to crash.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a denial of service vulnerability in the Juniper DHCP daemon (jdhcpd). An unauthenticated, adjacent attacker can exploit this, by sending a DHCPv4 packet with specific options to the host, to cause jdhcpd to crash and restart.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11284 advisory.

  - A Stack-based Buffer Overflow vulnerability in the flow processing daemon (flowd) of Juniper Networks     Junos OS on MX Series and SRX series allows an unauthenticated networked attacker to cause a flowd crash     and thereby a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained     Denial of Service condition. This issue can be triggered by a specific Session Initiation Protocol (SIP)     invite packet if the SIP ALG is enabled. Due to this, the PIC will be rebooted and all traffic that     traverses the PIC will be dropped. This issue affects: Juniper Networks Junos OS 20.4 versions prior to     20.4R3-S2; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R2; 21.3 versions prior to     21.3R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.4R1. (CVE-2022-22178)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11281 advisory.

  - An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series     allows an unauthenticated networked attacker to cause a flowprocessing daemon (flowd) crash and thereby a     Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of     Service condition. This issue can occur in a scenario where the SIP ALG is enabled and specific SIP     messages are being processed simultaneously. This issue affects: Juniper Networks Junos OS on MX Series     and SRX Series 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R2-S2, 21.1R3; 21.2 versions     prior to 21.2R1-S2, 21.2R2; 21.3 versions prior to 21.3R1-S1, 21.3R2. This issue does not affect Juniper     Networks Junos OS versions prior to 20.4R1. (CVE-2022-22175)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11293 advisory.

  - ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a     buffer holding the string data and a field holding the buffer length. This contrasts with normal C strings     which are repesented as a buffer for the string data which is terminated with a NUL (0) byte. Although not     a strict requirement, ASN.1 strings that are parsed using OpenSSL's own d2i functions (and other similar     parsing functions) as well as any string whose value has been set with the ASN1_STRING_set() function will     additionally NUL terminate the byte array in the ASN1_STRING structure. However, it is possible for     applications to directly construct valid ASN1_STRING structures which do not NUL terminate the byte array     by directly setting the data and length fields in the ASN1_STRING array. This can also happen by using     the ASN1_STRING_set0() function. Numerous OpenSSL functions that print ASN.1 data have been found to     assume that the ASN1_STRING byte array will be NUL terminated, even though this is not guaranteed for     strings that have been directly constructed. Where an application requests an ASN.1 structure to be     printed, and where that ASN.1 structure contains ASN1_STRINGs that have been directly constructed by the     application without NUL terminating the data field, then a read buffer overrun can occur. The same thing     can also occur during name constraints processing of certificates (for example if a certificate has been     directly constructed by the application instead of loading it via the OpenSSL parsing functions, and the     certificate contains non NUL terminated ASN1_STRING structures). It can also occur in the     X509_get1_email(), X509_REQ_get1_email() and X509_get1_ocsp() functions. If a malicious actor can cause an     application to directly construct an ASN1_STRING and then process it through one of the affected OpenSSL     functions then this issue could be hit. This might result in a crash (causing a Denial of Service attack).
    It could also result in the disclosure of private memory contents (such as private keys, or sensitive     plaintext). Fixed in OpenSSL 1.1.1l (Affected 1.1.1-1.1.1k). Fixed in OpenSSL 1.0.2za (Affected     1.0.2-1.0.2y). (CVE-2021-3712)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11261 advisory.

  - An Insufficient Algorithmic Complexity combined with an Allocation of Resources Without Limits or     Throttling vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX Series     and MX Series with SPC3 allows an unauthenticated network attacker to cause latency in transit packet     processing and even packet loss. If transit traffic includes a significant percentage (> 5%) of fragmented     packets which need to be reassembled, high latency or packet drops might be observed. This issue affects     Juniper Networks Junos OS on SRX Series, MX Series with SPC3: All versions prior to 18.2R3; 18.3 versions     prior to 18.3R3; 18.4 versions prior to 18.4R2-S9, 18.4R3; 19.1 versions prior to 19.1R2; 19.2 versions     prior to 19.2R1-S1, 19.2R2. (CVE-2022-22153)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11280 advisory.

  - A vulnerability in the processing of inbound IPv6 packets in Juniper Networks Junos OS on QFX5000 Series     and EX4600 switches may cause the memory to not be freed, leading to a packet DMA memory leak, and     eventual Denial of Service (DoS) condition. Once the condition occurs, further packet processing will be     impacted, creating a sustained Denial of Service (DoS) condition. The following error logs may be observed     using the show heap command and the device may eventually run out of memory if such packets are received     continuously. Jan 12 12:00:00 device-name fpc0 (buf alloc) failed allocating packet buffer Jan 12 12:00:01     device-name fpc0 (buf alloc) failed allocating packet buffer user@device-name> request pfe execute target     fpc0 timeout 30 command show heap ID Base Total(b) Free(b) Used(b) % Name -- ---------- -----------
    ----------- ----------- --- ----------- 0 246fc1a8 536870488 353653752 183216736 34 Kernel 1 91800000     16777216 12069680 4707536 28 DMA 2 92800000 75497472 69997640 5499832 7 PKT DMA DESC 3 106fc000 335544320     221425960 114118360 34 Bcm_sdk 4 97000000 176160768 200 176160568 99 Packet DMA <<<<<<<<<<<<<< 5 903fffe0     20971504 20971504 0 0 Blob This issue affects Juniper Networks Junos OS on QFX5000 Series, EX4600: 18.3R3     versions prior to 18.3R3-S6; 18.4 versions prior to 18.4R2-S9, 18.4R3-S9; 19.1 versions prior to     19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S8, 19.2R3-S3; 19.3 versions prior to 19.3R2-S7,     19.3R3-S4; 19.4 versions prior to 19.4R2-S5, 19.4R3-S6; 20.1 versions prior to 20.1R3-S1; 20.2 versions     prior to 20.2R3-S2; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior     to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R1-S1, 21.2R2. This issue does not affect Juniper     Networks Junos OS: Any versions prior to 17.4R3; 18.1 versions prior to 18.1R3-S6; 18.2 versions prior to     18.2R3; 18.3 versions prior to 18.3R3; 18.4 versions prior to 18.4R2; 19.1 versions prior to 19.1R2.
    (CVE-2022-22174)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11270 advisory.

  - A Generation of Error Message Containing Sensitive Information vulnerability in the CLI of Juniper     Networks Junos OS allows a locally authenticated attacker with low privileges to elevate these to the     level of any other user logged in via J-Web at this time, potential leading to a full compromise of the     device. This issue affects Juniper Networks Junos OS: All versions prior to 15.1R7-S11; 18.3 versions     prior to 18.3R3-S6; 18.4 versions prior to 18.4R2-S9, 18.4R3-S10; 19.1 versions prior to 19.1R2-S3,     19.1R3-S7; 19.2 versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R3-S4; 19.4 versions     prior to 19.4R3-S6; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions     prior to 20.3R3-S1; 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2     versions prior to 21.2R1-S1, 21.2R2. (CVE-2022-22162)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11269 advisory.

  - An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks Junos OS allows an     unauthenticated network based attacker to cause 100% CPU load and the device to become unresponsive by     sending a flood of traffic to the out-of-band management ethernet port. Continued receipted of a flood     will create a sustained Denial of Service (DoS) condition. Once the flood subsides the system will recover     by itself. An indication that the system is affected by this issue would be that an irq handled by the     fman process is shown to be using a high percentage of CPU cycles like in the following example output:
    user@host> show system processes extensive ... PID USERNAME PRI NICE SIZE RES STATE TIME WCPU COMMAND 31     root -84 -187 0K 16K WAIT 22.2H 56939.26% irq96: fman0 This issue affects Juniper Networks Junos OS: All     versions prior to 18.3R3-S6; 18.4 versions prior to 18.4R2-S9, 18.4R3-S9; 19.1 versions prior to     19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S7, 19.2R3-S3; 19.3 versions prior to 19.3R2-S7,     19.3R3-S4; 19.4 versions prior to 19.4R2-S5, 19.4R3-S5; 20.1 versions prior to 20.1R3-S1; 20.2 versions     prior to 20.2R3-S2; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R2-S2, 20.4R3; 21.1     versions prior to 21.1R2; 21.2 versions prior to 21.2R1-S1, 21.2R2. (CVE-2022-22161)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA11277 advisory.

  - An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine     (PFE) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause a Denial of     Service (DoS) by sending specific packets over VXLAN which cause the PFE to reset. This issue affects:
    Juniper Networks Junos OS 19.4 versions prior to 19.4R3-S7; 20.1 versions prior to 20.1R3-S3; 20.2     versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S2; 20.4 versions prior to 20.4R3-S1; 21.1     versions prior to 21.1R3; 21.2 versions prior to 21.2R2; 21.3 versions prior to 21.3R1-S1, 21.3R2. This     issue does not affect versions of Junos OS prior to 19.4R1. (CVE-2022-22171)

  - A Missing Release of Resource after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE)     of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause a Denial of Service     (DoS) by sending specific packets over VXLAN which cause heap memory to leak and on exhaustion the PFE to     reset. The heap memory utilization can be monitored with the command: user@host> show chassis fpc This     issue affects: Juniper Networks Junos OS 19.4 versions prior to 19.4R2-S6, 19.4R3-S6; 20.1 versions prior     to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to     20.4R3; 21.1 versions prior to 21.1R3; 21.2 versions prior to 21.2R2. This issue does not affect versions     of Junos OS prior to 19.4R1. (CVE-2022-22170)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11263 advisory.

  - An Uncontrolled Resource Consumption vulnerability in the handling of IPv6 neighbor state change events in     Juniper Networks Junos OS allows an adjacent attacker to cause a memory leak in the Flexible PIC     Concentrator (FPC) of an ACX5448 router. The continuous flapping of an IPv6 neighbor with specific timing     will cause the FPC to run out of resources, leading to a Denial of Service (DoS) condition. Once the     condition occurs, further packet processing will be impacted, creating a sustained Denial of Service (DoS)     condition, requiring a manual PFE restart to restore service. The following error messages will be seen     after the FPC resources have been exhausted: fpc0 DNX_NH::dnx_nh_tag_ipv4_hw_install(),3135:
    dnx_nh_tag_ipv4_hw_install: BCM L3 Egress create object failed for NH 602 (-14:No resources for     operation), BCM NH Params: unit:0 Port:41, L3_INTF:0 Flags: 0x40 fpc0     DNX_NH::dnx_nh_tag_ipv4_hw_install(),3135: dnx_nh_tag_ipv4_hw_install: BCM L3 Egress create object failed     for NH 602 (-14:No resources for operation), BCM NH Params: unit:0 Port:41, L3_INTF:0 Flags: 0x40 fpc0     DNX_NH::dnx_nh_tag_ipv4_hw_install(),3135: dnx_nh_tag_ipv4_hw_install: BCM L3 Egress create object failed     for NH 602 (-14:No resources for operation), BCM NH Params: unit:0 Port:41, L3_INTF:0 Flags: 0x40 fpc0     DNX_NH::dnx_nh_tag_ipv4_hw_install(),3135: dnx_nh_tag_ipv4_hw_install: BCM L3 Egress create object failed     for NH 602 (-14:No resources for operation), BCM NH Params: unit:0 Port:41, L3_INTF:0 Flags: 0x40 This     issue only affects the ACX5448 router. No other products or platforms are affected by this vulnerability.
    This issue affects Juniper Networks Junos OS on ACX5448: 18.4 versions prior to 18.4R3-S10; 19.1 versions     prior to 19.1R3-S5; 19.2 versions prior to 19.2R1-S8, 19.2R3-S2; 19.3 versions prior to 19.3R2-S6,     19.3R3-S2; 19.4 versions prior to 19.4R1-S3, 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R2; 20.2     versions prior to 20.2R1-S1, 20.2R2. (CVE-2022-22155)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11279 advisory.

  - A Missing Release of Memory after Effective Lifetime vulnerability in the Public Key Infrastructure daemon     (pkid) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause Denial of     Service (DoS). In a scenario where Public Key Infrastructure (PKI) is used in combination with Certificate     Revocation List (CRL), if the CRL fails to download the memory allocated to store the CRL is not released.
    Repeated occurrences will eventually consume all available memory and lead to an inoperable state of the     affected system causing a DoS. This issue affects Juniper Networks Junos OS: All versions prior to     18.3R3-S6; 18.4 versions prior to 18.4R2-S9, 18.4R3-S10; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2     versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to     19.4R2-S5, 19.4R3-S5; 20.1 versions prior to 20.1R3-S1; 20.2 versions prior to 20.2R3-S2; 20.3 versions     prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2, 21.1R3; 21.2 versions     prior to 21.2R1-S1, 21.2R2. This issue can be observed by monitoring the memory utilization of the pkid     process via: root@jtac-srx1500-r2003> show system processes extensive | match pki 20931 root 20 0 733M     14352K select 0:00 0.00% pkid which increases over time: root@jtac-srx1500-r2003> show system processes     extensive | match pki 22587 root 20 0 901M 181M select 0:03 0.00% pkid (CVE-2022-22173)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11267 advisory.

  - A vulnerability in the NETISR network queue functionality of Juniper Networks Junos OS kernel allows an     attacker to cause a Denial of Service (DoS) by sending crafted genuine packets to a device. During an     attack, the routing protocol daemon (rpd) CPU may reach 100% utilization, yet FPC CPUs forwarding traffic     will operate normally. This attack occurs when the attackers' packets are sent over an IPv4 unicast     routing equal-cost multi-path (ECMP) unilist selection. Continued receipt and processing of these packets     will create a sustained Denial of Service (DoS) condition. An indicator of compromise may be to monitor     NETISR drops in the network with the assistance of JTAC. Please contact JTAC for technical support for     further guidance. This issue affects: Juniper Networks Junos OS 17.3 version 17.3R3-S9 and later versions     prior to 17.3R3-S12; 17.4 version 17.4R3-S3 and later versions prior to 17.4R3-S5; 18.1 version 18.1R3-S11     and later versions prior to 18.1R3-S13; 18.2 version 18.2R3-S6 and later versions; 18.3 version 18.3R3-S4     and later versions prior to 18.3R3-S5; 18.4 version 18.4R3-S5 and later versions prior to 18.4R3-S9; 19.1     version 19.1R3-S3 and later versions prior to 19.1R3-S7. This issue does not affect Juniper Networks Junos     OS versions prior to 17.3R3-S9. This issue does not affect Juniper Networks Junos OS Evolved.
    (CVE-2022-22159)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA11265 advisory.

  - A traffic classification vulnerability in Juniper Networks Junos OS on the SRX Series Services Gateways     may allow an attacker to bypass Juniper Deep Packet Inspection (JDPI) rules and access unauthorized     networks or resources, when 'no-syn-check' is enabled on the device. While JDPI correctly classifies out-     of-state asymmetric TCP flows as the dynamic-application UNKNOWN, this classification is not provided to     the policy module properly and hence traffic continues to use the pre-id-default-policy, which is more     permissive, causing the firewall to allow traffic to be forwarded that should have been denied. This issue     only occurs when 'set security flow tcp-session no-syn-check' is configured on the device. This issue     affects Juniper Networks Junos OS on SRX Series: 18.4 versions prior to 18.4R2-S10, 18.4R3-S10; 19.1     versions prior to 19.1R3-S8; 19.2 versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to     19.3R3-S3; 19.4 versions prior to 19.4R3-S5; 20.1 versions prior to 20.1R3-S1; 20.2 versions prior to     20.2R3-S2; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R2-S2, 20.4R3; 21.1 versions prior     to 21.1R2-S2, 21.1R3; 21.2 versions prior to 21.2R2. This issue does not affect Juniper Networks Junos OS     versions prior to 18.4R1. (CVE-2022-22167)

  - A traffic classification vulnerability in Juniper Networks Junos OS on the SRX Series Services Gateways     may allow an attacker to bypass Juniper Deep Packet Inspection (JDPI) rules and access unauthorized     networks or resources, when 'no-syn-check' is enabled on the device. JDPI incorrectly classifies out-of-     state asymmetric TCP flows as the dynamic-application INCONCLUSIVE instead of UNKNOWN, which is more     permissive, causing the firewall to allow traffic to be forwarded that should have been denied. This issue     only occurs when 'set security flow tcp-session no-syn-check' is configured on the device. This issue     affects Juniper Networks Junos OS on SRX Series: 18.4 versions prior to 18.4R2-S9, 18.4R3-S9; 19.1     versions prior to 19.1R2-S3, 19.1R3-S6; 19.2 versions prior to 19.2R1-S7, 19.2R3-S3; 19.3 versions prior     to 19.3R2-S6, 19.3R3-S2; 19.4 versions prior to 19.4R2-S5, 19.4R3-S3; 20.1 versions prior to 20.1R2-S2,     20.1R3; 20.2 versions prior to 20.2R3-S1; 20.3 versions prior to 20.3R3; 20.4 versions prior to 20.4R2-S1,     20.4R3; 21.1 versions prior to 21.1R1-S1, 21.1R2. This issue does not affect Juniper Networks Junos OS     versions prior to 18.4R1. (CVE-2022-22157)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11271 advisory.

  - An Improper Input Validation vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper Networks Junos     OS allows an adjacent unauthenticated attacker to cause a crash of jdhcpd and thereby a Denial of Service     (DoS). If a device is configured as DHCPv6 local server and persistent storage is enabled, jdhcpd will     crash when receiving a specific DHCPv6 message. This issue affects: Juniper Networks Junos OS All versions     prior to 15.1R7-S11; 18.4 versions prior to 18.4R3-S9; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2     versions prior to 19.2R1-S8, 19.2R3-S3; 19.4 versions prior to 19.4R3-S5; 20.1 versions prior to     20.1R3-S1; 20.2 versions prior to 20.2R3-S2; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to     20.4R3; 21.1 versions prior to 21.1R2; 21.2 versions prior to 21.2R2. (CVE-2022-22163)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Severity
164897	Juniper Junos OS DOS (JSA69711)	high
164339	Juniper Junos OS Vulnerability (JSA69717)	medium
164079	Juniper Junos OS DoS (JSA11188)	high
164019	Juniper Junos DOS (JSA10928)	high
163788	Juniper Junos OS Vulnerability (JSA69716)	high
163770	Juniper Junos OS Multiple Vulnerabilities (JSA69705)	critical
163769	Juniper Junos OS Vulnerability (JSA69713)	high
163768	Juniper Junos OS Vulnerability (JSA69718)	medium
163761	Juniper Junos OS Vulnerability (JSA69719)	medium
163629	Juniper Junos OS DOS (JSA69709)	high
163614	Juniper Junos OS DoS (JSA69707)	medium
163604	Juniper Junos OS DoS (JSA69708)	medium
163461	Juniper Junos Local Privilege Escalation Vulnerability (JSA69725)	high
163435	Juniper Junos DOS (JSA69714)	medium
163410	Juniper Junos DOS (JSA69721)	medium
163331	Juniper Junos Information Exposure (JSA69720)	medium
161953	Juniper Junos OS Vulnerability (JSA11253)	high
161775	Juniper Junos OS Vulnerability (JSA11238)	medium
161525	Juniper Junos OS DoS (JSA11247)	high
161299	Juniper Junos OS Evolved DoS (JSA69516)	high
161287	Juniper Junos OS Heap-based Buffer Overflow (JSA69497)	high
161264	Juniper Junos OS Kernel Crash DoS (JSA11213)	high
161261	Juniper Junos OS FPC Crash (JSA11229)	medium
161217	Juniper Junos OS Vulnerability (JSA69494)	medium
160200	Juniper Junos OS DoS (JSA11212)	medium
160183	Juniper Junos OS Vulnerability (JSA69503)	medium
160125	Juniper Junos OS Evolved DoS (JSA69505)	high
160087	Juniper Junos OS Vulnerability (JSA69519)	medium
160076	Juniper Junos OS DoS (JSA69493)	high
159280	Juniper Junos OS DoS (JSA11239)	high
159271	Juniper Junos OS Privilege Escalation (JSA11237)	high
159234	Juniper Junos OS Spoofing (JSA11240)	medium
159063	Juniper Junos OS Improper Certificate Validation (JSA11264)	high
158934	Juniper Junos OS Vulnerability (JSA11189)	medium
158896	Juniper Junos OS Vulnerability (JSA11246)	high
158041	Juniper Junos OS DoS (JSA11274)	medium
156782	Juniper Junos OS DoS (JSA11285)	medium
156694	Juniper Junos OS Vulnerability (JSA11284)	high
156693	Juniper Junos OS Vulnerability (JSA11281)	high
156692	Juniper Junos OS Vulnerability (JSA11293)	high
156689	Juniper Junos OS Vulnerability (JSA11261)	high
156687	Juniper Junos OS Vulnerability (JSA11280)	high
156686	Juniper Junos OS Vulnerability (JSA11270)	high
156685	Juniper Junos OS Vulnerability (JSA11269)	high
156684	Juniper Junos OS Multiple Vulnerabilities (JSA11277)	high
156683	Juniper Junos OS Vulnerability (JSA11263)	medium
156682	Juniper Junos OS Vulnerability (JSA11279)	high
156681	Juniper Junos OS Vulnerability (JSA11267)	high
156680	Juniper Junos OS Multiple Vulnerabilities (JSA11265)	critical
156679	Juniper Junos OS Vulnerability (JSA11271)	medium

Junos Local Security Checks Family for Nessus

high

medium

high

high

high

critical

high

medium

medium

high

medium

medium

high

medium

medium

medium

high

medium

high

high

high

high

medium

medium

medium

medium

high

medium

high

high

high

medium

high

medium

high

medium

medium

high

high

high

high

high

high

high

high

medium

high

high

critical

medium