CVE-2020-1644: Improper Check or Handling of Exceptional Conditions

On Juniper Networks Junos OS and Junos OS Evolved devices, the receipt of a specific BGP UPDATE packet causes an internal counter to be incremented incorrectly, which over time can lead to the routing protocols process RPD crash and restart. This issue affects both IBGP and EBGP multihop deployme...

CVE-2020-1641: Concurrent Execution using Shared Resource with Improper Synchronization

A Race Condition vulnerability in Juniper Networks Junos OS LLDP implementation allows an attacker to cause LLDP to crash leading to a Denial of Service DoS. This issue occurs when crafted LLDP packets are received by the device from an adjacent device. Multiple LACP flaps will occur after LLDP...

CVE-2020-1655: Undefined Security Weakness

When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2TP, MAP-E, GRE, and IPIP, the packet forwarding engine PFE will become disabled upon receipt of large packets requiring fragmentation,...

CVE-2020-1640: Improper Use of Validation Framework

An improper use of a validation framework when processing incoming genuine BGP packets within Juniper Networks RPD routing protocols process daemon allows an attacker to crash RPD thereby causing a Denial of Service DoS condition. This framework requires these packets to be passed. By continuousl...

CVE-2020-1649: Undefined Security Weakness

When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2TP, MAP-E, GRE, and IPIP, the packet forwarding engine PFE will become disabled upon receipt of small fragments requiring reassembly,...

CVE-2020-1647: Double Free

On Juniper Networks SRX Series with ICAP Internet Content Adaptation Protocol redirect service enabled, a double free vulnerability can lead to a Denial of Service DoS or Remote Code Execution RCE due to processing of a specific HTTP message. Continued processing of this specific HTTP message may...

CVE-2020-1643: Improper Handling of Exceptional Conditions

Execution of the "show ospf interface extensive" or "show ospf interface detail" CLI commands on a Juniper Networks device running Junos OS may cause the routing protocols process RPD to crash and restart if OSPF interface authentication is configured, leading to a Denial of Service DoS. By...

CVE-2020-1653: Improper Handling of Invalid Use of Special Elements

On Juniper Networks Junos OS devices, a stream of TCP packets sent to the Routing Engine RE may cause mbuf leak which can lead to Flexible PIC Concentrator FPC crash or the system to crash and restart vmcore. This issue can be trigged by IPv4 or IPv6 and it is caused only by TCP packets. This iss...

PT-2020-14870

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 12.3R12-S15 Juniper Networks Junos OS 12.3X48 versions prior to 12.3X48-D95 Juniper Networks Junos OS 15.1 versions prior to 15.1R7-S6 Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D200...

Juniper Networks Junos OS Input Validation Error Vulnerability (CNVD-2020-50488)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. An input validation error vulnerability exists in Juniper Networks Junos OS MX Series. An attacker could exploit this...

Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2020-49039)

Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. A denial-of-service vulnerability exists in Juniper Networks Junos OS's handling of fractional reorganization, which can be exploited by an attacker to cause the Packet Forwarding Engine P...

Juniper Networks Junos OS Denial of Service Vulnerability

Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. A denial of service vulnerability exists in the Juniper Networks Junos OS MS-PIC component message handling, which can be exploited by an attacker to crash denial of service the MS-PIC...

Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2020-49037)

Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. A denial of service vulnerability in Juniper Networks Junos OS BGP update message handling can be exploited by an attacker to cause the Routing Process Daemon RPD to crash and restart...

Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2020-49036)

Juniper Networks Junos OS is a set of network operating systems dedicated to the company's hardware devices. A denial of service vulnerability exists in the Juniper Networks Junos OS ICAP redirection service handling of malformed HTTP messages, which can be exploited by an attacker to cause a...

Juniper Networks Junos OS Resource Management Error Vulnerability (CNVD-2020-50489)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in the Juniper Networks Junos OS MX Series. An attacker could exploit the vulnerability by...

Juniper Networks Junos OS Resource Management Error Vulnerability (CNVD-2020-43753)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A resource management error vulnerability exists in Juniper Networks Junos OS SRX Series. A remote attacker could exploit...

Juniper Networks Junos OS Buffer Overflow Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS. An attacker could exploit this vulnerability by sending TCP...

Juniper Networks Junos OS Code Issue Vulnerability (CNVD-2020-51515)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A code issue vulnerability exists in Juniper Networks Junos OS MX Series. An attacker could exploit this vulnerability to...

Juniper Networks Junos OS Input Validation Error Vulnerability (CNVD-2020-51514)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS that arises from the improper use of an authentication...

PT-2020-5930

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on MX Series versions 17.2 prior to 17.2R3-S4 Juniper Networks Junos OS on MX Series versions 17.2X75 prior to 17.2X75-D105.19 Juniper Networks Junos OS on MX Series versions 17.3 prior to 17.3R3-S7 Juniper Networks...