CVE-2020-1689

The CVE-2020-1689 entry affects Junos OS on Juniper EX4300-MP, EX4600, and QFX5K Series deployed in Virtual Chassis. It describes a DoS-like high CPU load caused by receipt of a stream of specific Layer 2 frames from within the broadcast domain, potentially leading to traffic interruption. The is...

CVE-2020-1687 Junos OS: EX4300-MP/EX4600/QFX5K Series: High CPU load due to receipt of specific layer 2 frames in EVPN-VXLAN deployment.

On Juniper Networks EX4300-MP Series, EX4600 Series and QFX5K Series deployed in Ethernet VPN EVPN-Virtual Extensible LAN VXLAN configuration, receipt of a stream of specific VXLAN encapsulated layer 2 frames can cause high CPU load, which could lead to network protocol operation issue and traffi...

CVE-2020-1687: Uncontrolled Resource Consumption

On Juniper Networks EX4300-MP Series, EX4600 Series and QFX5K Series deployed in Ethernet VPN EVPN-Virtual Extensible LAN VXLAN configuration, receipt of a stream of specific VXLAN encapsulated layer 2 frames can cause high CPU load, which could lead to network protocol operation issue and traffi...

PT-2020-14895

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series and QFX5K Series versions 17.3 prior to 17.3R3-S9 Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series and QFX5K Series versions 17.4 prior to 17.4R2-S11, 17.4R3-S2, 17.4R3-S...

PT-2020-5508

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 17.3R3-S9 Junos OS versions prior to 17.4R2-S11, 17.4R3-S2, 17.4R3-S3 Junos OS versions prior to 18.1R3-S11 Junos OS versions prior to 18.2R3-S5 Junos OS versions prior to 18.3R2-S4, 18.3R3-S3 Junos OS versions prior...

CVE-2020-1685: Observable Discrepancy

When configuring stateless firewall filters in Juniper Networks EX4600 and QFX 5000 Series devices using Virtual Extensible LAN protocol VXLAN, the discard action will fail to discard traffic under certain conditions. Given a firewall filter configuration similar to: family ethernet-switching...

CVE-2020-1689: Uncontrolled Resource Consumption

On Juniper Networks EX4300-MP Series, EX4600 Series and QFX5K Series deployed in a Virtual Chassis configuration, receipt of a stream of specific layer 2 frames can cause high CPU load, which could lead to traffic interruption. This issue does not occur when the device is deployed in Stand Alone...

PT-2020-14893

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on QFX5K Series versions prior to 18.1R3-S7 Juniper Networks Junos OS on QFX5K Series versions prior to 18.2R2-S7 Juniper Networks Junos OS on QFX5K Series versions prior to 18.3R1-S5 Juniper Networks Junos OS on QFX5...

Code injection

On EX2300, EX3400, EX4600, QFX3K and QFX5K series, firewall filter configuration cannot perform packet matching on any IPv6 extension headers. This issue may allow IPv6 packets that should have been blocked to be forwarded. IPv4 packet filtering is unaffected by this vulnerability. Affected...

CVE-2019-0005

On EX2300, EX3400, EX4600, QFX3K and QFX5K series, firewall filter configuration cannot perform packet matching on any IPv6 extension headers. This issue may allow IPv6 packets that should have been blocked to be forwarded. IPv4 packet filtering is unaffected by this vulnerability. Affected...

CVE-2019-0005

CVE-2019-0005 affects Juniper Junos OS on EX and QFX series (EX2300/3400/4600; QFX3K/5K). The vulnerability is that firewall filter configuration cannot match IPv6 extension headers, potentially allowing IPv6 packets that should be blocked to be forwarded; IPv4 filtering is unaffected. Affected r...