CVE-2020-1644 Junos OS and Junos OS Evolved: RPD crash due to specific BGP UPDATE packets

On Juniper Networks Junos OS and Junos OS Evolved devices, the receipt of a specific BGP UPDATE packet causes an internal counter to be incremented incorrectly, which over time can lead to the routing protocols process RPD crash and restart. This issue affects both IBGP and EBGP multihop deployme...

CVE-2020-1644

CVE-2020-1644 affects Juniper Networks Junos OS and Junos OS Evolved. A specific BGP UPDATE packet can increment an internal counter incorrectly, leading to the Routing Protocols Daemon (RPD) crash and restart for both IBGP and EBGP multihop in IPv4/IPv6. Affected software ranges include Junos OS...

CVE-2020-1640

CVE-2020-1640 describes a DoS in Juniper Networks Junos OS caused by an improper use of a validation framework when processing incoming genuine BGP packets in the Routing Protocol Daemon (RPD). The vulnerability allows an attacker to repeatedly crash the RPD by sending specific formatted BGP pack...

CVE-2020-1643 Junos OS: EX Series: RPD crash when executing specific "show ospf interface" commands from the CLI with OSPF authentication configured

Execution of the "show ospf interface extensive" or "show ospf interface detail" CLI commands on a Juniper Networks device running Junos OS may cause the routing protocols process RPD to crash and restart if OSPF interface authentication is configured, leading to a Denial of Service DoS. By...

CVE-2020-1640: Improper Use of Validation Framework

An improper use of a validation framework when processing incoming genuine BGP packets within Juniper Networks RPD routing protocols process daemon allows an attacker to crash RPD thereby causing a Denial of Service DoS condition. This framework requires these packets to be passed. By continuousl...

CVE-2020-1644: Improper Check or Handling of Exceptional Conditions

On Juniper Networks Junos OS and Junos OS Evolved devices, the receipt of a specific BGP UPDATE packet causes an internal counter to be incremented incorrectly, which over time can lead to the routing protocols process RPD crash and restart. This issue affects both IBGP and EBGP multihop deployme...

CVE-2020-1646: Improper Handling of Invalid Use of Special Elements

On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific UPDATE for an EBGP peer can lead to a routing process daemon RPD crash and restart. This issue occurs only when the device is receiving and processing the BGP UPDATE for an EBGP peer. This issue does not occur when t...

CVE-2020-1643: Improper Handling of Exceptional Conditions

Execution of the "show ospf interface extensive" or "show ospf interface detail" CLI commands on a Juniper Networks device running Junos OS may cause the routing protocols process RPD to crash and restart if OSPF interface authentication is configured, leading to a Denial of Service DoS. By...

CVE-2020-1648: Improper Handling of Invalid Use of Special Elements

On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific BGP packet can lead to a routing process daemon RPD crash and restart. This issue can occur even before the BGP session with the peer is established. Repeated receipt of this specific BGP packet can result in an...

PT-2020-5899

Name of the Vulnerable Software and Affected Versions: Junos OS versions 16.1R7-S6 through 16.1R7-S8 Junos OS versions 17.3R2-S5 through 17.3R3-S8 Junos OS versions 17.4R2-S7 through 17.4R2-S11, 17.4R3 through 17.4R3-S2 Junos OS versions 18.1R3-S7 through 18.1R3-S10 Junos OS versions 18.2R2-S6...

PT-2020-5900

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 17.3R3-S6 through 18.1R3-S7 Juniper Networks Junos OS Evolved versions 19.2R2-EVO through versions prior to 19.3R1-EVO Description: The issue occurs when a specific UPDATE for an EBGP peer is processed,...

PT-2020-5901

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 18.2X75-D50.8 through 18.2X75-D52.7, 18.2X75-D60 and later versions prior to 18.2X75-D60.2, 18.2X75-D65.1, 18.2X75-D70; versions 19.4R1 and 19.4R1-S1; versions prior to 20.1R1-S2, 20.1R2 Juniper Networks Jun...

PT-2020-5929

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 12.3X48-D100 Junos OS versions prior to 14.1X53-D140 Junos OS versions prior to 14.1X53-D54 Junos OS versions prior to 15.1R7-S7 Junos OS versions prior to 15.1X49-D210 Junos OS versions prior to 15.1X53-D593 Junos ...

Race condition

A race condition vulnerability on Juniper Network Junos OS devices may cause the routing protocol daemon RPD process to crash and restart while processing a BGP NOTIFICATION message. This issue affects Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S6; 16.2 versions prior to 16.2R2-S11;...

CVE-2020-1629

CVE-2020-1629 describes a race-condition vulnerability in Juniper Networks Junos OS where the Routing Protocol Daemon (RPD) may crash and restart while processing a BGP NOTIFICATION message. Affected versions include Junos OS 16.1 prior to 16.1R7-S6; 16.2 prior to 16.2R2-S11; 17.1 prior to 17.1R2...

CVE-2020-1629 Junos OS: A race condition vulnerability may cause RPD daemon to crash when processing a BGP NOTIFICATION message.

A race condition vulnerability on Juniper Network Junos OS devices may cause the routing protocol daemon RPD process to crash and restart while processing a BGP NOTIFICATION message. This issue affects Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S6; 16.2 versions prior to 16.2R2-S11;...

PT-2020-4138

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 16.1 through 16.1R7-S5 Juniper Networks Junos OS versions 16.2 through 16.2R2-S10 Juniper Networks Junos OS versions 17.1 through 17.1R2-S10 Juniper Networks Junos OS versions 17.2 through 17.2R1-S8 Juniper...

CVE-2020-1629: Race Condition within a Thread

A race condition vulnerability on Juniper Network Junos OS devices may cause the routing protocol daemon RPD process to crash and restart while processing a BGP NOTIFICATION message. This issue affects Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S6; 16.2 versions prior to 16.2R2-S11;...

CVE-2020-1600 Junos OS: A specific SNMP command can trigger a high CPU usage Denial of Service in the RPD daemon.

In a Point-to-Multipoint P2MP Label Switched Path LSP scenario, an uncontrolled resource consumption vulnerability in the Routing Protocol Daemon RPD in Juniper Networks Junos OS allows a specific SNMP request to trigger an infinite loop causing a high CPU usage Denial of Service DoS condition...

PT-2020-1513

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 12.3X48 prior to 12.3X48-D90 Juniper Networks Junos OS versions 15.1 prior to 15.1R7-S6 Juniper Networks Junos OS versions 15.1X49 prior to 15.1X49-D200 Juniper Networks Junos OS versions 15.1X53 prior to...