高危保安警報 (A26-10-23): Juniper Networks多個漏洞


 

發布日期: 2026年 10月 15日

描述:

Juniper Networks 發布了安全公告，以應對 Junos OS 及 Junos OS Evolved 的多個漏洞。有關漏洞的詳細資料，請參閱供應商網站的相應安全公告。

有報告指潛在入侵漏洞 (CVE-2024-24789) 的概念驗證 (PoC) 程式碼已被公開。系統管理員應立即為受影響的系統安裝修補程式，以減低受到網絡攻擊的風險。

 

受影響的系統:

  • Juniper Networks Junos OS
  • Juniper Networks Junos OS Evolved

有關受影響系統的詳細資料，請參閱供應商網站的相應安全公告。

 

影響:

成功利用漏洞可以導致受影響的系統發生服務被拒絕、遠端執行程式碼、繞過保安限制或泄漏資訊。

 

建議:

現已有適用於受影響系統的修補程式。受影響系統的系統管理員應遵從供應商的建議，立即採取行動以降低風險。

 

進一步資訊:

  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Juniper-Cloud-Native-Router-Multiple-vulnerabilities-resolved-in-26-2-release
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-Evolved-A-port-which-has-been-inadvertently-exposed-can-be-reached-by-an-attacker-CVE-2026-102085
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-Evolved-Multiple-vulnerabilities-resolved
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-MX-Series-Malformed-SyncE-or-PTP-clock-input-causes-continuous-RE-switchover-CVE-2026-102080
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-MX-Series-Missing-Authorization-for-specific-request-CLI-commands-allows-command-injection-CVE-2026-102079
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-MX-Series-Multiple-vulnerabilities-resolved
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-MX-Series-with-SPC3-In-a-NAT-scenario-malformed-packets-will-lead-to-resource-leaks-and-eventually-traffic-stops-CVE-2026-102077
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-Multiple-vulnerabilities-resolved
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-SRX-4000-Series-SRX5000-Series-with-SPC3-With-application-services-configured-high-session-churn-causes-memory-leak-which-will-ultimately-impact-traffic-CVE-2026-102081
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-SRX-Series-A-high-volume-of-DNS-traffic-over-TCP-can-lead-to-a-flowd-crash-CVE-2026-102078
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-SRX-Series-If-TLS-session-resumption-is-configured-and-a-specific-TLS-message-is-received-a-PFE-crash-occurs-CVE-2026-102082
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-SRX-Series-In-an-ADVPN-scenario-a-malformed-message-from-a-peer-causes-Remote-Code-Execution-CVE-2026-102084
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-SRX-Series-Multiple-DNS-queries-processed-by-SecIntel-and-DGA-in-the-same-session-cause-a-flowd-crash-CVE-2026-102086
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-SRX-Series-With-WebFiltering-enabled-prolonged-HTTP-session-load-can-cause-a-crash-CVE-2026-102083
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-If-in-a-traffic-engineering-scenario-a-specific-valid-BGP-LS-attribute-is-received-rpd-crashes-CVE-2026-102087
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Multiple-vulnerabilities-resolved
  • https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-SRX-Series-Multiple-vulnerabilities-resolved
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2253
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-7264
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24789
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52533
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33789
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33792
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33795 (to CVE-2026-33796)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33798
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101927
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101934
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101936 (to CVE-2026-101946)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101948 (to CVE-2026-101952)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101954 (to CVE-2026-101957)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101959 (to CVE-2026-101997)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-101999 (to CVE-2026-102000)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102011 (to CVE-2026-102037)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102039 (to CVE-2026-102072)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102077 (to CVE-2026-102087)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102174 (to CVE-2026-102180)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-102182 (to CVE-2026-102185)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-103993 (to CVE-2026-103994)


標籤 : Junos OS , Junos OS Evolved
標籤