高危保安警报 (A26-10-23): Juniper Networks多个漏洞


 

发布日期: 2026年 10月 15日

描述:

Juniper Networks 发布了安全公告，以应对 Junos OS 及 Junos OS Evolved 的多个漏洞。有关漏洞的详细资料，请参阅供应商网站的相应安全公告。

有报告指潜在入侵漏洞 (CVE-2024-24789) 的概念验证 (PoC) 程式码已被公开。系统管理员应立即为受影响的系统安装修补程式，以减低受到网络攻击的风险。

 

受影响的系统:

  • Juniper Networks Junos OS
  • Juniper Networks Junos OS Evolved

有关受影响系统的详细资料，请参阅供应商网站的相应安全公告。

 

影响:

成功利用漏洞可以导致受影响的系统发生服务被拒绝、远端执行程式码、绕过保安限制或泄漏资讯。

 

建议:

现已有适用于受影响系统的修补程式。受影响系统的系统管理员应遵从供应商的建议，立即採取行动以降低风险。

 

进一步资讯:

  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Juniper-Cloud-Native-Router-Multiple-vulnerabilities-resolved-in-26-2-release
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-Evolved-A-port-which-has-been-inadvertently-exposed-can-be-reached-by-an-attacker-CVE-2026-102085
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-Evolved-Multiple-vulnerabilities-resolved
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-MX-Series-Malformed-SyncE-or-PTP-clock-input-causes-continuous-RE-switchover-CVE-2026-102080
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-MX-Series-Missing-Authorization-for-specific-request-CLI-commands-allows-command-injection-CVE-2026-102079
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-MX-Series-Multiple-vulnerabilities-resolved
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-MX-Series-with-SPC3-In-a-NAT-scenario-malformed-packets-will-lead-to-resource-leaks-and-eventually-traffic-stops-CVE-2026-102077
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-Multiple-vulnerabilities-resolved
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-SRX-4000-Series-SRX5000-Series-with-SPC3-With-application-services-configured-high-session-churn-causes-memory-leak-which-will-ultimately-impact-traffic-CVE-2026-102081
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-SRX-Series-A-high-volume-of-DNS-traffic-over-TCP-can-lead-to-a-flowd-crash-CVE-2026-102078
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-SRX-Series-If-TLS-session-resumption-is-configured-and-a-specific-TLS-message-is-received-a-PFE-crash-occurs-CVE-2026-102082
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-SRX-Series-In-an-ADVPN-scenario-a-malformed-message-from-a-peer-causes-Remote-Code-Execution-CVE-2026-102084
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-SRX-Series-Multiple-DNS-queries-processed-by-SecIntel-and-DGA-in-the-same-session-cause-a-flowd-crash-CVE-2026-102086
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-SRX-Series-With-WebFiltering-enabled-prolonged-HTTP-session-load-can-cause-a-crash-CVE-2026-102083
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-If-in-a-traffic-engineering-scenario-a-specific-valid-BGP-LS-attribute-is-received-rpd-crashes-CVE-2026-102087
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Multiple-vulnerabilities-resolved
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-SRX-Series-Multiple-vulnerabilities-resolved
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2253
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7264
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24789
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52533
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33789
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33792
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33795 (to CVE-2026-33796)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33798
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101927
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101934
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101936 (to CVE-2026-101946)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101948 (to CVE-2026-101952)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101954 (to CVE-2026-101957)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101959 (to CVE-2026-101997)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101999 (to CVE-2026-102000)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102011 (to CVE-2026-102037)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102039 (to CVE-2026-102072)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102077 (to CVE-2026-102087)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102174 (to CVE-2026-102180)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102182 (to CVE-2026-102185)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-103993 (to CVE-2026-103994)


标签 : Junos OS , Junos OS Evolved
标签