CVE-2020-1661

Summary of CVE-2020-1661 : Juniper Networks Junos OS devices acting as DHCP forwarders with the forward-only option may experience a crash in the jdhcpd daemon when processing malformed DHCP packets. This can lead to an extended Denial of Service (DoS) as jdhcpd restarts automatically but continu...

CVE-2020-1656 Junos OS: When a DHCPv6 Relay-Agent is configured upon receipt of a specific DHCPv6 client message, Remote Code Execution may occur.

The DHCPv6 Relay-Agent service, part of the Juniper Enhanced jdhcpd daemon shipped with Juniper Networks Junos OS has an Improper Input Validation vulnerability which will result in a Denial of Service DoS condition when a DHCPv6 client sends a specific DHPCv6 message allowing an attacker to...

CVE-2020-1656

CVE-2020-1656 covers an Improper Input Validation flaw in the DHCPv6 Relay-Agent portion of Juniper Junos OS (jdhcpd). The issue is triggered when a DHCPv6 client sends a specific message, enabling a potential attacker to cause Denial of Service and, in some cases, Remote Code Execution on the ta...

CVE-2020-1657

Affected software: Juniper Junos OS on SRX Series. Vulnerable in the key-management-daemon (kmd) before established SA, allowing spoofed IPSec packets to disrupt IPSec setup and cause DoS. Affected releases include 12.3X48 (before 12.3X48-D90), 15.1X49 (before 15.1X49-D190), 17.4 (before 17.4R2-S...

CVE-2020-1657 Junos OS: SRX Series: An attacker sending spoofed packets to IPSec peers may cause a Denial of Service.

On SRX Series devices, a vulnerability in the key-management-daemon kmd daemon of Juniper Networks Junos OS allows an attacker to spoof packets targeted to IPSec peers before a security association SA is established thereby causing a failure to set up the IPSec channel. Sustained receipt of these...

CVE-2020-1678: Uncontrolled Resource Consumption

On Juniper Networks Junos OS and Junos OS Evolved platforms with EVPN configured, receipt of specific BGP packets causes a slow memory leak. If the memory is exhausted the rpd process might crash. If the issue occurs, the memory leak could be seen by executing the "show task memory detail | match...

CVE-2020-1687: Uncontrolled Resource Consumption

On Juniper Networks EX4300-MP Series, EX4600 Series and QFX5K Series deployed in Ethernet VPN EVPN-Virtual Extensible LAN VXLAN configuration, receipt of a stream of specific VXLAN encapsulated layer 2 frames can cause high CPU load, which could lead to network protocol operation issue and traffi...

PT-2020-14893

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on QFX5K Series versions prior to 18.1R3-S7 Juniper Networks Junos OS on QFX5K Series versions prior to 18.2R2-S7 Juniper Networks Junos OS on QFX5K Series versions prior to 18.3R1-S5 Juniper Networks Junos OS on QFX5...

PT-2020-14880

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on EX2300 Series versions prior to 18.1R3-S11 Juniper Networks Junos OS on EX2300 Series versions prior to 18.2R3-S5 Juniper Networks Junos OS on EX2300 Series versions prior to 18.3R2-S4 Juniper Networks Junos OS on...

PT-2020-4829

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 17.3R3-S8 Juniper Networks Junos OS versions prior to 18.3R3-S1 Juniper Networks Junos OS versions prior to 18.4R3 Juniper Networks Junos OS versions prior to 19.1R3 Juniper Networks Junos OS versio...

PT-2020-14887 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 20.1R2-EVO Description: The issue occurs when parsing a specifically malformed NDP packet sent from the local area network to a device running Juniper Networks Junos OS Evolved, causing the...

PT-2020-14894 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 18.4R1 through 18.4R2-S4 Juniper Networks Junos OS versions 18.4R3 through 18.4R3-S1 Juniper Networks Junos OS versions 19.1 through 19.1R2-S1 Juniper Networks Junos OS versions 19.1R3 and earlier Juniper...

CVE-2020-1661: Undefined Security Weakness

On Juniper Networks Junos OS devices configured as a DHCP forwarder, the Juniper Networks Dynamic Host Configuration Protocol Daemon jdhcp process might crash when receiving a malformed DHCP packet. This issue only affects devices configured as DHCP forwarder with forward-only option, that forwar...

CVE-2020-1660: Concurrent Execution using Shared Resource with Improper Synchronization

When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets processed by the Multiservices PIC Management Daemon mspmand process, responsible for managing "URL Filtering service", may crash, causing the...

CVE-2020-1664: Stack-based Buffer Overflow

A stack buffer overflow vulnerability in the device control daemon DCD on Juniper Networks Junos OS allows a low privilege local user to create a Denial of Service DoS against the daemon or execute arbitrary code in the system with root privilege. This issue affects Juniper Networks Junos OS: 17....

PT-2020-14888

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on SRX Series versions prior to 12.3X48-D105 Juniper Networks Junos OS on SRX Series versions prior to 15.1X49-D221 Juniper Networks Junos OS on SRX Series versions prior to 15.1X49-D230 Juniper Networks Junos OS on S...

PT-2020-4368

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 15.1X49-D220 on SRX1500, SRX4100, SRX4200, vSRX Junos OS versions prior to 17.4R3-S3 on SRX1500, SRX4100, SRX4200, vSRX Junos OS versions prior to 18.1R3-S11 on SRX1500, SRX4100, SRX4200, vSRX, NFX150 Junos OS...

PT-2020-14895

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series and QFX5K Series versions 17.3 prior to 17.3R3-S9 Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series and QFX5K Series versions 17.4 prior to 17.4R2-S11, 17.4R3-S2, 17.4R3-S...

PT-2020-14881

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on NFX350 versions prior to 19.4R3 Juniper Networks Junos OS on NFX350 versions prior to 20.1R1-S4 Juniper Networks Junos OS on NFX350 versions prior to 20.1R2 Description The issue concerns the storage of password...

PT-2020-14882

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on EX4300 series versions 17.3 prior to 17.3R3-S9 Juniper Networks Junos OS on EX4300 series versions 17.4 prior to 17.4R2-S11 Juniper Networks Junos OS on EX4300 series versions 17.4 prior to 17.4R3-S2 Juniper Networ...