CVE-2020-1654 Junos OS: SRX Series: processing a malformed HTTP message when ICAP redirect service is enabled may can lead to flowd process crash or remote code execution

On Juniper Networks SRX Series with ICAP Internet Content Adaptation Protocol redirect service enabled, processing a malformed HTTP message can lead to a Denial of Service DoS or Remote Code Execution RCE Continued processing of this malformed HTTP message may result in an extended Denial of...

CVE-2020-1655 Junos OS: MX Series: PFE crash on MPC7/8/9 upon receipt of large packets requiring fragmentation

When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2TP, MAP-E, GRE, and IPIP, the packet forwarding engine PFE will become disabled upon receipt of large packets requiring fragmentation,...

CVE-2020-1654

CVE-2020-1654 affects Juniper Networks Junos OS on SRX Series when ICAP redirect service is enabled. A malformed HTTP message can cause DoS or RCE; continued processing may extend DoS. Affected releases include 18.1 before 18.1R3-S9; 18.2 before 18.2R2-S7 (and 18.2R3-S3); 18.3 before 18.3R1-S7, 1...

CVE-2020-1655

CVE-2020-1655 affects Juniper Networks Junos OS on MX Series with MPC7/8/9 line cards when inline IP reassembly is enabled. The vulnerability enables an attacker to repeatedly disable the packet forwarding engine (PFE) by sending large fragmented packets that cannot be reassembled, causing a sust...

CVE-2020-1653

CVE-2020-1653 affects Juniper Networks Junos OS: a stream of TCP packets to the Routing Engine may cause an mbuf leak, potentially crashing the FPC or the whole system (vmcore). The issue is triggerable by IPv4 or IPv6 and is due to TCP packet handling, not a specific config. Affected releases st...

CVE-2020-1653 Junos OS: Kernel crash (vmcore) or FPC crash due to mbuf leak

On Juniper Networks Junos OS devices, a stream of TCP packets sent to the Routing Engine RE may cause mbuf leak which can lead to Flexible PIC Concentrator FPC crash or the system to crash and restart vmcore. This issue can be trigged by IPv4 or IPv6 and it is caused only by TCP packets. This iss...

CVE-2020-1650

CVE-2020-1650 affects Juniper Networks Junos OS on MX Series using MS-PIC/MS-MIC/MS-MPC service cards. A stream of specific packets can crash the MS-PIC component, enabling a sustained Denial of Service on affected MX Series devices (versions listed in the description). The connected documents pr...

CVE-2020-1651

CVE-2020-1651 affects Juniper Networks Junos OS on MX Series routers. A memory leak caused by processing a specific stream of Layer 2 frames can crash the line-card PFE, leading to DoS traffic interruption. Impact observed in MX Series revisions including 17.2 (prior to 17.2R3-S4) and 17.2X75 (pr...

CVE-2020-1650 Junos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC

On Juniper Networks Junos MX Series with service card configured, receipt of a stream of specific packets may crash the MS-PIC component on MS-MIC or MS-MPC. By continuously sending these specific packets, an attacker can repeatedly bring down MS-PIC on MS-MIC/MS-MPC causing a prolonged Denial of...

CVE-2020-1651 Junos OS: MX Series: PFE on the line card may crash due to memory leak.

On Juniper Networks MX series, receipt of a stream of specific Layer 2 frames may cause a memory leak resulting in the packet forwarding engine PFE on the line card to crash and restart, causing traffic interruption. By continuously sending this stream of specific layer 2 frame, an attacker...

CVE-2020-1649

CVE-2020-1649 affects Juniper Junos OS on MX Series with MPC7/8/9 line cards when inline IP reassembly is enabled. Continuous receipt of small fragments that cannot be reassembled can disable the packet forwarding engine (PFE), causing a sustained DoS. Affected Junos OS versions are listed across...

CVE-2020-1648

The CVE-2020-1648 issue on Juniper Networks Junos OS and Junos OS Evolved causes a routing process daemon (RPD) crash/restart when a specific BGP packet is processed, potentially leading to extended DoS. Affected are Junos OS versions starting from 18.2X75-D50.8/60 and later (excluding 18.2X75-D5...

CVE-2020-1648 Junos OS and Junos OS Evolved: RPD crash when processing a specific BGP packet

On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific BGP packet can lead to a routing process daemon RPD crash and restart. This issue can occur even before the BGP session with the peer is established. Repeated receipt of this specific BGP packet can result in an...

CVE-2020-1649 Junos OS: MX Series: PFE crash on MPC7/8/9 upon receipt of small fragments requiring reassembly

When a device running Juniper Networks Junos OS with MPC7, MPC8, or MPC9 line cards installed and the system is configured for inline IP reassembly, used by L2TP, MAP-E, GRE, and IPIP, the packet forwarding engine PFE will become disabled upon receipt of small fragments requiring reassembly,...

CVE-2020-1646

CVE-2020-1646 affects Juniper Networks Junos OS and Junos OS Evolved. The issue arises when processing a specific BGP UPDATE for an EBGP peer, causing the routing process daemon (RPD) to crash and restart. The crash occurs only for EBGP UPDATE processing toward an EBGP peer; an EBGP-originating u...

CVE-2020-1646 Junos OS and Junos OS Evolved: RPD crash while processing a specific BGP update information.

On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific UPDATE for an EBGP peer can lead to a routing process daemon RPD crash and restart. This issue occurs only when the device is receiving and processing the BGP UPDATE for an EBGP peer. This issue does not occur when t...

CVE-2020-1647

CVE-2020-1647 (Junos OS SRX ICAP redirect double-free) affects Juniper Networks SRX Series with ICAP redirect service enabled. A double-free vulnerability in the ICAP processing of a specific HTTP message can lead to a Denial of Service or Remote Code Execution . The offending HTTP message may or...

CVE-2020-1647 Junos OS: SRX Series: Double free vulnerability can lead to DoS or remote code execution due to the processing of a specific HTTP message when ICAP redirect service is enabled

On Juniper Networks SRX Series with ICAP Internet Content Adaptation Protocol redirect service enabled, a double free vulnerability can lead to a Denial of Service DoS or Remote Code Execution RCE due to processing of a specific HTTP message. Continued processing of this specific HTTP message may...

CVE-2020-1644 Junos OS and Junos OS Evolved: RPD crash due to specific BGP UPDATE packets

On Juniper Networks Junos OS and Junos OS Evolved devices, the receipt of a specific BGP UPDATE packet causes an internal counter to be incremented incorrectly, which over time can lead to the routing protocols process RPD crash and restart. This issue affects both IBGP and EBGP multihop deployme...

CVE-2020-1645

CVE-2020-1645 affects Juniper Networks Junos MX Series when DNS filtering is enabled and packets trigger the Multiservices PIC Management Daemon (mspmand). The issue can cause mspmand to crash, leading to a restart of the Services PIC; during boot, DNS filtering and other PIC services may be bypa...