https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 06:22:38 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-172086 EUVD-2026-172086 https://cve.radiocsirt.org/vuln/euvd-2026-172086 https://cve.radiocsirt.org/vuln/fkie_cve-2021-31378 <p>In broadband environments, including but not limited to Enhanced Subscriber Management, (CHAP, PPP, DHCP, etc.), on Juniper Networks Junos OS devices where RADIUS servers are configured for managing subscriber access and a subscriber is logged in and then requests to logout, the subscriber may be forced into a &#34;Terminating&#34; state by an attacker who is able to send spoofed messages appearing to originate from trusted RADIUS server(s) destined to the device in response to the subscriber&#39;s request. These spoofed messages cause the Junos OS General Authentication Service (authd) daemon to force the broadband subscriber into this &#34;Terminating&#34; state which the subscriber will not recover from thereby causing a Denial of Service (DoS) to the endpoint device. Once in the &#34;Terminating&#34; state, the endpoint subscriber will no longer be able to access the network. Restarting the authd daemon on the Junos OS device will temporarily clear the subscribers out of the &#34;Terminating&#34; state. As long as the attacker continues to send these spoofed packets and subscribers request to be logged out, the subscribers will be returned to the &#34;Terminating&#34; state thereby creating a persistent Denial of Service to the subscriber. An indicator of compromise may be seen by displaying the output of &#34;show subscribers summary&#34;. The presence of subscribers in the &#34;Terminating&#34; state may indicate the issue is occurring. This issue affects: Juniper Networks Junos OS 17.3 versions prior to 17.3R3-S12; 17.4 versio…</p> <p>In broadband environments, including but not limited to Enhanced Subscriber Management, (CHAP, PPP, DHCP, etc.), on Juniper Networks Junos OS devices where RADIUS servers are configured for managing subscriber access and a subscriber is logged in and then requests to logout, the subscriber may be forced into a &#34;Terminating&#34; state by an attacker who is able to send spoofed messages appearing to originate from trusted RADIUS server(s) destined to the device in response to the subscriber&#39;s request. These spoofed messages cause the Junos OS General Authentication Service (authd) daemon to force the broadband subscriber into this &#34;Terminating&#34; state which the subscriber will not recover from thereby causing a Denial of Service (DoS) to the endpoint device. Once in the &#34;Terminating&#34; state, the endpoint subscriber will no longer be able to access the network. Restarting the authd daemon on the Junos OS device will temporarily clear the subscribers out of the &#34;Terminating&#34; state. As long as the attacker continues to send these spoofed packets and subscribers request to be logged out, the subscribers will be returned to the &#34;Terminating&#34; state thereby creating a persistent Denial of Service to the subscriber. An indicator of compromise may be seen by displaying the output of &#34;show subscribers summary&#34;. The presence of subscribers in the &#34;Terminating&#34; state may indicate the issue is occurring. This issue affects: Juniper Networks Junos OS 17.3 versions prior to 17.3R3-S12; 17.4 versio…</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-31378 https://cve.radiocsirt.org/vuln/ghsa-8pcm-vgvx-r5p5 <p>In broadband environments, including but not limited to Enhanced Subscriber Management, (CHAP, PPP, DHCP, etc.), on Juniper Networks Junos OS devices where RADIUS servers are configured for managing subscriber access and a subscriber is logged in and then requests to logout, the subscriber may be forced into a &#34;Terminating&#34; state by an attacker who is able to send spoofed messages appearing to originate from trusted RADIUS server(s) destined to the device in response to the subscriber&#39;s request. These spoofed messages cause the Junos OS General Authentication Service (authd) daemon to force the broadband subscriber into this &#34;Terminating&#34; state which the subscriber will not recover from thereby causing a Denial of Service (DoS) to the endpoint device. Once in the &#34;Terminating&#34; state, the endpoint subscriber will no longer be able to access the network. Restarting the authd daemon on the Junos OS device will temporarily clear the subscribers out of the &#34;Terminating&#34; state. As long as the attacker continues to send these spoofed packets and subscribers request to be logged out, the subscribers will be returned to the &#34;Terminating&#34; state thereby creating a persistent Denial of Service to the subscriber. An indicator of compromise may be seen by displaying the output of &#34;show subscribers summary&#34;. The presence of subscribers in the &#34;Terminating&#34; state may indicate the issue is occurring. This issue affects: Juniper Networks Junos OS 17.3 versions prior to 17.3R3-S12; 17.4 versio…</p> <p>In broadband environments, including but not limited to Enhanced Subscriber Management, (CHAP, PPP, DHCP, etc.), on Juniper Networks Junos OS devices where RADIUS servers are configured for managing subscriber access and a subscriber is logged in and then requests to logout, the subscriber may be forced into a &#34;Terminating&#34; state by an attacker who is able to send spoofed messages appearing to originate from trusted RADIUS server(s) destined to the device in response to the subscriber&#39;s request. These spoofed messages cause the Junos OS General Authentication Service (authd) daemon to force the broadband subscriber into this &#34;Terminating&#34; state which the subscriber will not recover from thereby causing a Denial of Service (DoS) to the endpoint device. Once in the &#34;Terminating&#34; state, the endpoint subscriber will no longer be able to access the network. Restarting the authd daemon on the Junos OS device will temporarily clear the subscribers out of the &#34;Terminating&#34; state. As long as the attacker continues to send these spoofed packets and subscribers request to be logged out, the subscribers will be returned to the &#34;Terminating&#34; state thereby creating a persistent Denial of Service to the subscriber. An indicator of compromise may be seen by displaying the output of &#34;show subscribers summary&#34;. The presence of subscribers in the &#34;Terminating&#34; state may indicate the issue is occurring. This issue affects: Juniper Networks Junos OS 17.3 versions prior to 17.3R3-S12; 17.4 versio…</p> https://cve.radiocsirt.org/vuln/ghsa-8pcm-vgvx-r5p5 https://cve.radiocsirt.org/vuln/gsd-2021-31378 gsd-2021-31378 https://cve.radiocsirt.org/vuln/gsd-2021-31378