CVE-2020-1671

CVE-2020-1671 affects Junos OS when JDHCPD handles malformed DHCPv6 packets on DHCPv6 local server or Relay Agent configurations, causing a crash and JDHCPD restart. Affected are Junos OS versions: 17.4 prior to 17.4R2-S12 and 17.4R3-S3; 18.1 prior to 18.1R3-S11; 18.2 prior to 18.2R3-S6; 18.2X75 ...

CVE-2020-1672 Junos OS: jdhcpd process crash when processing a specific DHCPDv6 packet in DHCPv6 relay configuration.

On Juniper Networks Junos OS devices configured with DHCPv6 relay enabled, receipt of a specific DHCPv6 packet might crash the jdhcpd daemon. The jdhcpd daemon automatically restarts without intervention, but continuous receipt of specific crafted DHCP messages will repeatedly crash jdhcpd, leadi...

CVE-2020-1672

CVE-2020-1672 describes a DoS condition in Juniper Networks Junos OS where a crafted DHCPv6 relay packet crashes the jdhcpd daemon. The issue is triggered only by DHCPv6 traffic (not DHCPv4) when DHCPv6 relay is enabled, and the jdhcpd process restarts automatically but can be repeatedly crashed ...

CVE-2020-1670

CVE-2020-1670 affects Juniper Junos OS on EX4300 Series. A stream of specific IPv4 packets entering the IRB interface can cause Routing Engine high CPU load, potentially leading to network protocol operation issues and traffic interruption. The trigger is limited to IPv4 (IPv6 is not affected) an...

CVE-2020-1668

CVE-2020-1668 affects Juniper Networks Junos OS on the EX2300 Series. The issue is triggered by receipt of a stream of specific multicast packets on the layer-2 interface, causing high CPU load and potential traffic interruption. Affected versions include 18.1 before 18.1R3-S11; 18.2 before 18.2R...

CVE-2020-1666 Junos OS Evolved: 'console log-out-on-disconnect' fails to terminate session on console cable disconnection

The system console configuration option 'log-out-on-disconnect' In Juniper Networks Junos OS Evolved fails to log out an active CLI session when the console cable is disconnected. This could allow a malicious attacker with physical access to the console the ability to resume a previous interactiv...

CVE-2020-1667

The CVE-2020-1667 entry describes a race-condition exploit in Juniper Networks Junos OS MX Series affecting DNS filtering. Affected devices include MX Series with MS-PIC/MS-MIC/MS-MPC cards; when DNS filtering is enabled, a race in the Multiservices PIC Management Daemon (mspmand) can cause the S...

CVE-2020-1667 Junos OS: MX Series: Services card might restart due to a race condition when DNS filtering is enabled.

When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets processed by the Multiservices PIC Management Daemon mspmand process might be bypassed due to a race condition. Due to this vulnerability,...

CVE-2020-1666

CVE-2020-1666 affects Juniper Networks Junos OS Evolved: the console logout-on-disconnect option fails to terminate an active CLI session when the console cable is disconnected. Descriptions across connected documents indicate that a physically proximate attacker could resume a prior interactive ...

CVE-2020-1664 Junos OS: Buffer overflow vulnerability in device control daemon

A stack buffer overflow vulnerability in the device control daemon DCD on Juniper Networks Junos OS allows a low privilege local user to create a Denial of Service DoS against the daemon or execute arbitrary code in the system with root privilege. This issue affects Juniper Networks Junos OS: 17....

CVE-2020-1664

CVE-2020-1664 documents a stack buffer overflow in Juniper Networks Junos OS device control daemon (DCD). The issue allows a low-privilege local user to cause a DoS or execute arbitrary code with root privileges. Affected products include Junos OS versions listed in the CVE (e.g., 17.3 through 20...

CVE-2020-1665

Juniper Junos OS IPv6 DDoS protection can fail to activate under a threshold condition on MX Series and EX9200 Series with Trio-based PFEs. This may allow the Routing Engine (RE) and/or the Flexible PIC Concentrator (FPC) to become overwhelmed, potentially disrupting network protocol operations o...

CVE-2020-1662

CVE-2020-1662 describes a vulnerability in Juniper Networks Junos OS and Junos OS Evolved where BGP session flapping can cause the routing process daemon (RPD) to crash and restart when BGP damping is used with an accepted-prefix-limit configuration. Affected versions span multiple 17.x to 20.x r...

CVE-2020-1662 Junos OS and Junos OS Evolved: RPD crash due to BGP session flapping.

On Juniper Networks Junos OS and Junos OS Evolved devices, BGP session flapping can lead to a routing process daemon RPD crash and restart, limiting the attack surface to configured BGP peers. This issue only affects devices with BGP damping in combination with accepted-prefix-limit configuration...

CVE-2020-1661

Summary of CVE-2020-1661 : Juniper Networks Junos OS devices acting as DHCP forwarders with the forward-only option may experience a crash in the jdhcpd daemon when processing malformed DHCP packets. This can lead to an extended Denial of Service (DoS) as jdhcpd restarts automatically but continu...

CVE-2020-1660

CVE-2020-1660 affects Juniper Networks Junos OS on MX Series when DNS filtering is enabled on cards MS-PIC, MS-MIC or MS-MPC. A crafted stream processed by the Multiservices PIC Management Daemon (mspmand) may crash the Services PIC, causing the Services PIC to restart and temporarily bypass DNS ...

CVE-2020-1661 Junos OS: jdhcpd process crash when forwarding a malformed DHCP packet.

On Juniper Networks Junos OS devices configured as a DHCP forwarder, the Juniper Networks Dynamic Host Configuration Protocol Daemon jdhcp process might crash when receiving a malformed DHCP packet. This issue only affects devices configured as DHCP forwarder with forward-only option, that forwar...

CVE-2020-1657 Junos OS: SRX Series: An attacker sending spoofed packets to IPSec peers may cause a Denial of Service.

On SRX Series devices, a vulnerability in the key-management-daemon kmd daemon of Juniper Networks Junos OS allows an attacker to spoof packets targeted to IPSec peers before a security association SA is established thereby causing a failure to set up the IPSec channel. Sustained receipt of these...

CVE-2020-1657

Affected software: Juniper Junos OS on SRX Series. Vulnerable in the key-management-daemon (kmd) before established SA, allowing spoofed IPSec packets to disrupt IPSec setup and cause DoS. Affected releases include 12.3X48 (before 12.3X48-D90), 15.1X49 (before 15.1X49-D190), 17.4 (before 17.4R2-S...

CVE-2020-1656

CVE-2020-1656 covers an Improper Input Validation flaw in the DHCPv6 Relay-Agent portion of Juniper Junos OS (jdhcpd). The issue is triggered when a DHCPv6 client sends a specific message, enabling a potential attacker to cause Denial of Service and, in some cases, Remote Code Execution on the ta...