13 enero, 2022 – Javier García

JSA11270 – 2022-01 Security Bulletin: Junos OS: A low privileged user can elevate their privileges to the ones of the highest privileged j-web user logged in (CVE-2022-22162)

More info: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA11270&actp=RSS

JSA11269 – 2022-01 Security Bulletin: Junos OS: MX104 might become unresponsive if the out-of-band management port receives a flood of traffic (CVE-2022-22161)

More info: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA11269&actp=RSS

JSA11268 – 2022-01 Security Bulletin: Junos OS: MX Series: The bbe-smgd process crashes if an unsupported configuration exists and a PPPoE client sends a specific message (CVE-2022-22160)

More info: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA11268&actp=RSS

JSA11267 – 2022-01 Security Bulletin: Junos OS: An attacker sending crafted packets can cause a traffic and CPU Denial of Service (DoS). (CVE-2022-22159)

More info: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA11267&actp=RSS

JSA11265 – 2022-01 Security Bulletin: Junos OS: SRX Series: Multiple vulnerabilities in traffic classification when no-syn-check is enabled (CVE-2022-22157, CVE-2022-22167)

More info: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA11265&actp=RSS

JSA11263 – 2022-01 Security Bulletin: Junos OS: ACX5448: FPC memory leak due to IPv6 neighbor flaps (CVE-2022-22155)

More info: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA11263&actp=RSS

JSA11264 – 2022-01 Security Bulletin: Junos OS: Certificate validation is skipped when fetching system scripts from a HTTPS URL (CVE-2022-22156)

More info: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA11264&actp=RSS

JSA11261 – 2022-01 Security Bulletin: SRX Series and MX Series with SPC3: A high percentage of fragments might lead to high latency or packet drops (CVE-2022-22153)

More info: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA11261&actp=RSS

JSA11262 – 2022-01 Security Bulletin: Junos Fusion: A Satellite Device can be controlled by rewiring it to a foreign AD causing a DoS (CVE-2022-22154)

More info: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA11262&actp=RSS

JSA11260 – 2022-01 Security Bulletin: Contrail Service Orchestration: Tenants able to see other tenants policies via REST API interface (CVE-2022-22152)

More info: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA11260&actp=RSS

Translate »