https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:39:55.067257+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-03133 bdu:2024-03133 2026-10-03T12:39:55.146596+00:00 bdu:2024-03133 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0297 certfr-2024-avi-0297 — De multiples vulnérabilités ont été découvertes dans Juniper. Certaines d'entre elles permettent à un attaquant de prov… 2026-10-03T12:39:55.146633+00:00 certfr-2024-avi-0297 https://cve.radiocsirt.org/vuln/euvd-2026-4816 EUVD-2026-4816 2026-10-03T12:39:55.146661+00:00 EUVD-2026-4816 https://cve.radiocsirt.org/vuln/fkie_cve-2024-30386 fkie_cve-2024-30386 2026-10-03T12:39:55.146675+00:00

A Use-After-Free vulnerability in the Layer 2 Address Learning Daemon (l2ald)

of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause l2ald to crash leading to a Denial-of-Service (DoS).

In an EVPN-VXLAN scenario, when

state updates are received and processed by the affected system, the correct order of some processing steps is not ensured, which can lead to an l2ald crash and restart. Whether the crash occurs depends on system internal timing which is outside the attackers control. This issue affects:

Junos OS:

* All versions before 20.4R3-S8, * 21.2 versions before 21.2R3-S6, * 21.3 versions before 21.3R3-S5, * 21.4 versions before 21.4R3-S4, * 22.1 versions before 22.1R3-S3, * 22.2 versions before 22.2R3-S1, * 22.3 versions before 22.3R3,, * 22.4 versions before 22.4R2;

Junos OS Evolved:

* All versions before 20.4R3-S8-EVO, * 21.2-EVO versions before 21.2R3-S6-EVO,  * 21.3-EVO

versions before 21.3R3-S5-EVO, * 21.4-EVO

versions before 21.4R3-S4-EVO, * 22.1-EVO

versions before 22.1R3-S3-EVO, * 22.2-EVO

versions before 22.2R3-S1-EVO, * 22.3-EVO

versions before 22.3R3-EVO, * 22.4-EVO

versions before 22.4R2-EVO.

 https://cve.radiocsirt.org/vuln/ghsa-r4g7-rp4j-9cv7 GHSA-r4g7-rp4j-9cv7 2026-10-03T12:39:55.146725+00:00

A Use-After-Free vulnerability in the Layer 2 Address Learning Daemon (l2ald)

of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause l2ald to crash leading to a Denial-of-Service (DoS).

In an EVPN-VXLAN scenario, when

state updates are received and processed by the affected system, the correct order of some processing steps is not ensured, which can lead to an l2ald crash and restart. Whether the crash occurs depends on system internal timing which is outside the attackers control. This issue affects:

Junos OS:

* All versions before 20.4R3-S8, * 21.2 versions before 21.2R3-S6, * 21.3 versions before 21.3R3-S5, * 21.4 versions before 21.4R3-S4, * 22.1 versions before 22.1R3-S3, * 22.2 versions before 22.2R3-S1, * 22.3 versions before 22.3R3,, * 22.4 versions before 22.4R2;

Junos OS Evolved:

* All versions before 20.4R3-S8-EVO, * 21.2-EVO versions before 21.2R3-S6-EVO,  * 21.3-EVO

versions before 21.3R3-S5-EVO, * 21.4-EVO

versions before 21.4R3-S4-EVO, * 22.1-EVO

versions before 22.1R3-S3-EVO, * 22.2-EVO

versions before 22.2R3-S1-EVO, * 22.3-EVO

versions before 22.3R3-EVO, * 22.4-EVO

versions before 22.4R2-EVO.

 https://cve.radiocsirt.org/vuln/gsd-2024-30386 gsd-2024-30386 2026-10-03T12:39:55.146757+00:00 gsd-2024-30386 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0855 WID-SEC-W-2024-0855 — Juniper Produkte: Mehrere Schwachstellen 2026-10-03T12:39:55.146769+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Juniper Produkten ausnutzen um Denial of Service Zustände zu verursachen, Informationen offenzulegen und Sicherheitsmechanismen zu umgehen.