CVE-2020-1645 Junos OS: MX Series: Services card might restart when DNS filtering is enabled

When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets processed by the Multiservices PIC Management Daemon mspmand process, responsible for managing "URL Filtering service", may crash, causing the...

CVE-2020-1644

CVE-2020-1644 affects Juniper Networks Junos OS and Junos OS Evolved. A specific BGP UPDATE packet can increment an internal counter incorrectly, leading to the Routing Protocols Daemon (RPD) crash and restart for both IBGP and EBGP multihop in IPv4/IPv6. Affected software ranges include Junos OS...

CVE-2020-1643 Junos OS: EX Series: RPD crash when executing specific "show ospf interface" commands from the CLI with OSPF authentication configured

Execution of the "show ospf interface extensive" or "show ospf interface detail" CLI commands on a Juniper Networks device running Junos OS may cause the routing protocols process RPD to crash and restart if OSPF interface authentication is configured, leading to a Denial of Service DoS. By...

CVE-2020-1641

The CVE-2020-1641 entry describes a race-condition in Juniper Networks Junos OS LLDP handling: crafted LLDP packets can cause the LLDP process to crash, resulting in a Denial of Service. The issue is tied to memory/resource limits (RLIMIT) and may produce multiple LACP flaps after the LLDP crash....

CVE-2020-1643

CVE-2020-1643 affects Juniper Networks Junos OS on EX2300/EX3400 devices with ARM processors. The issue arises when executing specific CLI commands (show ospf interface extensive/detail) with OSPF authentication enabled, which can crash the routing protocols daemon (RPD) and cause a DoS through r...

CVE-2020-1641 Junos OS: A race condition on receipt of crafted LLDP packets leads to a memory leak and an LLDP crash.

A Race Condition vulnerability in Juniper Networks Junos OS LLDP implementation allows an attacker to cause LLDP to crash leading to a Denial of Service DoS. This issue occurs when crafted LLDP packets are received by the device from an adjacent device. Multiple LACP flaps will occur after LLDP...

CVE-2020-1650: Undefined Security Weakness

On Juniper Networks Junos MX Series with service card configured, receipt of a stream of specific packets may crash the MS-PIC component on MS-MIC or MS-MPC. By continuously sending these specific packets, an attacker can repeatedly bring down MS-PIC on MS-MIC/MS-MPC causing a prolonged Denial of...

CVE-2020-1645: Concurrent Execution using Shared Resource with Improper Synchronization

When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets processed by the Multiservices PIC Management Daemon mspmand process, responsible for managing "URL Filtering service", may crash, causing the...

CVE-2020-1651: Missing Release of Memory after Effective Lifetime

On Juniper Networks MX series, receipt of a stream of specific Layer 2 frames may cause a memory leak resulting in the packet forwarding engine PFE on the line card to crash and restart, causing traffic interruption. By continuously sending this stream of specific layer 2 frame, an attacker...

CVE-2020-1648: Improper Handling of Invalid Use of Special Elements

On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific BGP packet can lead to a routing process daemon RPD crash and restart. This issue can occur even before the BGP session with the peer is established. Repeated receipt of this specific BGP packet can result in an...

CVE-2020-1654: Buffer Copy without Checking Size of Input

On Juniper Networks SRX Series with ICAP Internet Content Adaptation Protocol redirect service enabled, processing a malformed HTTP message can lead to a Denial of Service DoS or Remote Code Execution RCE Continued processing of this malformed HTTP message may result in an extended Denial of...

CVE-2020-1646: Improper Handling of Invalid Use of Special Elements

On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific UPDATE for an EBGP peer can lead to a routing process daemon RPD crash and restart. This issue occurs only when the device is receiving and processing the BGP UPDATE for an EBGP peer. This issue does not occur when t...

CVE-2020-1644: Improper Check or Handling of Exceptional Conditions

On Juniper Networks Junos OS and Junos OS Evolved devices, the receipt of a specific BGP UPDATE packet causes an internal counter to be incremented incorrectly, which over time can lead to the routing protocols process RPD crash and restart. This issue affects both IBGP and EBGP multihop deployme...

CVE-2020-1641: Concurrent Execution using Shared Resource with Improper Synchronization

A Race Condition vulnerability in Juniper Networks Junos OS LLDP implementation allows an attacker to cause LLDP to crash leading to a Denial of Service DoS. This issue occurs when crafted LLDP packets are received by the device from an adjacent device. Multiple LACP flaps will occur after LLDP...

CVE-2020-1655: Undefined Security Weakness

When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2TP, MAP-E, GRE, and IPIP, the packet forwarding engine PFE will become disabled upon receipt of large packets requiring fragmentation,...

CVE-2020-1640: Improper Use of Validation Framework

An improper use of a validation framework when processing incoming genuine BGP packets within Juniper Networks RPD routing protocols process daemon allows an attacker to crash RPD thereby causing a Denial of Service DoS condition. This framework requires these packets to be passed. By continuousl...

CVE-2020-1649: Undefined Security Weakness

When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2TP, MAP-E, GRE, and IPIP, the packet forwarding engine PFE will become disabled upon receipt of small fragments requiring reassembly,...

CVE-2020-1647: Double Free

On Juniper Networks SRX Series with ICAP Internet Content Adaptation Protocol redirect service enabled, a double free vulnerability can lead to a Denial of Service DoS or Remote Code Execution RCE due to processing of a specific HTTP message. Continued processing of this specific HTTP message may...

CVE-2020-1643: Improper Handling of Exceptional Conditions

Execution of the "show ospf interface extensive" or "show ospf interface detail" CLI commands on a Juniper Networks device running Junos OS may cause the routing protocols process RPD to crash and restart if OSPF interface authentication is configured, leading to a Denial of Service DoS. By...

CVE-2020-1653: Improper Handling of Invalid Use of Special Elements

On Juniper Networks Junos OS devices, a stream of TCP packets sent to the Routing Engine RE may cause mbuf leak which can lead to Flexible PIC Concentrator FPC crash or the system to crash and restart vmcore. This issue can be trigged by IPv4 or IPv6 and it is caused only by TCP packets. This iss...