CVE-2020-1687

CVE-2020-1687 affects Junos OS on Juniper EX4300-MP, EX4600 and QFX5K series used as EVPN-VXLAN L2/L3 gateways. The issue occurs when receiving a stream of specific VXLAN-encapsulated L2 frames within the same EVPN-VXLAN domain, causing high CPU load and potentially impacting network protocol ope...

CVE-2020-1686 Junos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet.

On Juniper Networks Junos OS devices, receipt of a malformed IPv6 packet may cause the system to crash and restart vmcore. This issue can be trigged by a malformed IPv6 packet destined to the Routing Engine. An attacker can repeatedly send the offending packet resulting in an extended Denial of...

CVE-2020-1686

CVE-2020-1686 affects Junos OS where receipt of a malformed IPv6 packet can crash the system (vmcore) and restart, enabling an extended DoS when attacked via IPv6 to the Routing Engine. The issue is IPv6-specific; IPv4 packets are not affected. Affected Junos OS versions include 18.4R2-S4 and ear...

CVE-2020-1687 Junos OS: EX4300-MP/EX4600/QFX5K Series: High CPU load due to receipt of specific layer 2 frames in EVPN-VXLAN deployment.

On Juniper Networks EX4300-MP Series, EX4600 Series and QFX5K Series deployed in Ethernet VPN EVPN-Virtual Extensible LAN VXLAN configuration, receipt of a stream of specific VXLAN encapsulated layer 2 frames can cause high CPU load, which could lead to network protocol operation issue and traffi...

CVE-2020-1685

CVE-2020-1685 affects Juniper Networks Junos OS on EX4600 and QFX5K (VXLAN) where stateless firewall filters with a single user-vlan-id match can cause the discard action to only drop traffic with that VLAN ID, allowing other VLANs through. Affected QFX5K/Junos versions are listed in the CVE entr...

CVE-2020-1685 Junos OS: EX4600, QFX5K Series: Stateless firewall filter matching 'user-vlan-id' will cause incomplete discard action

When configuring stateless firewall filters in Juniper Networks EX4600 and QFX 5000 Series devices using Virtual Extensible LAN protocol VXLAN, the discard action will fail to discard traffic under certain conditions. Given a firewall filter configuration similar to: family ethernet-switching...

CVE-2020-1684 Junos OS: SRX Series: High CPU load due to processing for HTTP traffic when Application Identification is enabled.

On Juniper Networks SRX Series configured with application identification inspection enabled, receipt of specific HTTP traffic can cause high CPU load utilization, which could lead to traffic interruption. Application identification is enabled by default and is automatically turned on when...

CVE-2020-1682

CVE-2020-1682 (Junos OS) affects SRX1500, SRX4100, SRX4200, NFX150, NFX250, and vSRX-based platforms. An input validation vulnerability exists in the srxpfe process that allows an attacker to crash the process by issuing specific maintenance commands, causing a Denial of Service. The srxpfe proce...

CVE-2020-1683 Junos OS: Memory leak leads to kernel crash (vmcore) due to SNMP polling

On Juniper Networks Junos OS devices, a specific SNMP OID poll causes a memory leak which over time leads to a kernel crash vmcore. Prior to the kernel crash other processes might be impacted, such as failure to establish SSH connection to the device. The administrator can monitor the output of t...

CVE-2020-1682 Junos OS: SRX1500, vSRX, SRX4K, NFX150, NFX250: Denial of service vulnerability executing local CLI command

An input validation vulnerability exists in Juniper Networks Junos OS, allowing an attacker to crash the srxpfe process, causing a Denial of Service DoS through the use of specific maintenance commands. The srxpfe process restarts automatically, but continuous execution of the commands could lead...

CVE-2020-1681

CVE-2020-1681 affects Juniper Networks Junos OS Evolved prior to 20.1R2-EVO. A malformed IPv6 NDP packet can crash the ndp process, causing a DoS with the service restarting automatically; extended malformed traffic can impair IPv6 neighbor learning. The issue is limited to IPv6 NDP packet proces...

CVE-2020-1680

CVE-2020-1680 affects Juniper Networks Junos OS on MX Series with MS-MIC/MS-MPC NAT64 translation. A malformed IPv6 packet can crash the MS-PIC component on the multiservice card, caused by translating the IPv6 packet to IPv4, allowing an unauthenticated attacker to trigger repeated MS-PIC crashe...

CVE-2020-1680 Junos OS: MX Series: MS-MPC/MIC might crash when processing malformed IPv6 packet in NAT64 configuration.

On Juniper Networks MX Series with MS-MIC or MS-MPC card configured with NAT64 configuration, receipt of a malformed IPv6 packet may crash the MS-PIC component on MS-MIC or MS-MPC. This issue occurs when a multiservice card is translating the malformed IPv6 packet to IPv4 packet. An unauthenticat...

CVE-2020-1679 Junos OS: PTX/QFX Series: Kernel Routing Table (KRT) queue stuck after packet sampling a malformed packet when the tunnel-observation mpls-over-udp configuration is enabled.

On Juniper Networks PTX and QFX Series devices with packet sampling configured using tunnel-observation mpls-over-udp, sampling of a malformed packet can cause the Kernel Routing Table KRT queue to become stuck. KRT is the module within the Routing Process Daemon RPD that synchronized the routing...

CVE-2020-1678 Junos OS and Junos OS Evolved: RPD can crash due to a slow memory leak.

On Juniper Networks Junos OS and Junos OS Evolved platforms with EVPN configured, receipt of specific BGP packets causes a slow memory leak. If the memory is exhausted the rpd process might crash. If the issue occurs, the memory leak could be seen by executing the "show task memory detail | match...

CVE-2020-1678

CVE-2020-1678 affects Juniper Networks Junos OS and Junos OS Evolved on devices with EVPN configured. The issue is a slow memory leak triggered by receipt of specific BGP EVPN traffic, which can exhaust memory and cause the rpd process to crash. The vulnerability is evidenced by repeated queries ...

CVE-2020-1677 Juniper Networks Mist Cloud UI: SAML authentication attribute elements handling vulnerability.

When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle child elements in SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating its cryptographic signature to bypass SAML authentication security controls. This issue...

CVE-2020-1675 Juniper Networks Mist Cloud UI: SAML authentication certificate vulnerability.

When Security Assertion Markup Language SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly process invalid authentication certificates which could allow a malicious network-based user to access unauthorized data. This issue affects all Juniper Networks Mist Cloud UI...

CVE-2020-1676 Juniper Networks Mist Cloud UI: SAML authentication response handling vulnerability.

When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating its cryptographic signature to bypass SAML authentication security controls. This issue affects all Juniper...

CVE-2020-1676

Juniper Networks Mist Cloud UI suffers a SAML authentication handling vulnerability: when SAML is enabled, the UI may incorrectly process SAML responses, allowing a remote attacker to modify a valid SAML response without invalidating the cryptographic signature and bypass SAML authentication cont...