PT-2020-14870 · Juniper Networks · Junos
Published
2020-07-17
·
Updated
2021-07-23
·
CVE-2020-1641
CVSS v3.1
6.5
Medium
| Vector | AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Juniper Networks Junos OS versions prior to 12.3R12-S15
Juniper Networks Junos OS 12.3X48 versions prior to 12.3X48-D95
Juniper Networks Junos OS 15.1 versions prior to 15.1R7-S6
Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D200
Juniper Networks Junos OS 15.1X53 versions prior to 15.1X53-D593
Juniper Networks Junos OS 16.1 versions prior to 16.1R7-S7
Juniper Networks Junos OS 17.1 versions prior to 17.1R2-S11, 17.1R3-S2
Juniper Networks Junos OS 17.2 versions prior to 17.2R1-S9, 17.2R3-S3
Juniper Networks Junos OS 17.3 versions prior to 17.3R2-S5, 17.3R3-S6
Juniper Networks Junos OS 17.4 versions prior to 17.4R2-S4, 17.4R3
Juniper Networks Junos OS 18.1 versions prior to 18.1R3-S5
Juniper Networks Junos OS 18.2 versions prior to 18.2R2-S7, 18.2R3
Juniper Networks Junos OS 18.2X75 versions prior to 18.2X75-D12, 18.2X75-D33, 18.2X75-D50, 18.2X75-D420
Juniper Networks Junos OS 18.3 versions prior to 18.3R1-S7, 18.3R2-S3, 18.3R3
Juniper Networks Junos OS 18.4 versions prior to 18.4R1-S5, 18.4R2
Juniper Networks Junos OS 19.1 versions prior to 19.1R1-S4, 19.1R2
Description
A Race Condition vulnerability in Juniper Networks Junos OS LLDP implementation allows an attacker to cause LLDP to crash, leading to a Denial of Service (DoS). This issue occurs when crafted LLDP packets are received by the device from an adjacent device. Multiple LACP flaps will occur after LLDP crashes. An indicator of compromise is to evaluate log file details for LLDP with RLIMIT. Intervention should occur before 85% threshold of used KB versus maximum available KB memory is reached.
Recommendations
For Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S15, update to 12.3R12-S15 or later.
For Juniper Networks Junos OS 12.3X48 versions prior to 12.3X48-D95, update to 12.3X48-D95 or later.
For Juniper Networks Junos OS 15.1 versions prior to 15.1R7-S6, update to 15.1R7-S6 or later.
For Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D200, update to 15.1X49-D200 or later.
For Juniper Networks Junos OS 15.1X53 versions prior to 15.1X53-D593, update to 15.1X53-D593 or later.
For Juniper Networks Junos OS 16.1 versions prior to 16.1R7-S7, update to 16.1R7-S7 or later.
For Juniper Networks Junos OS 17.1 versions prior to 17.1R2-S11, 17.1R3-S2, update to 17.1R2-S11, 17.1R3-S2 or later.
For Juniper Networks Junos OS 17.2 versions prior to 17.2R1-S9, 17.2R3-S3, update to 17.2R1-S9, 17.2R3-S3 or later.
For Juniper Networks Junos OS 17.3 versions prior to 17.3R2-S5, 17.3R3-S6, update to 17.3R2-S5, 17.3R3-S6 or later.
For Juniper Networks Junos OS 17.4 versions prior to 17.4R2-S4, 17.4R3, update to 17.4R2-S4, 17.4R3 or later.
For Juniper Networks Junos OS 18.1 versions prior to 18.1R3-S5, update to 18.1R3-S5 or later.
For Juniper Networks Junos OS 18.2 versions prior to 18.2R2-S7, 18.2R3, update to 18.2R2-S7, 18.2R3 or later.
For Juniper Networks Junos OS 18.2X75 versions prior to 18.2X75-D12, 18.2X75-D33, 18.2X75-D50, 18.2X75-D420, update to 18.2X75-D12, 18.2X75-D33, 18.2X75-D50, 18.2X75-D420 or later.
For Juniper Networks Junos OS 18.3 versions prior to 18.3R1-S7, 18.3R2-S3, 18.3R3, update to 18.3R1-S7, 18.3R2-S3, 18.3R3 or later.
For Juniper Networks Junos OS 18.4 versions prior to 18.4R1-S5, 18.4R2, update to 18.4R1-S5, 18.4R2 or later.
For Juniper Networks Junos OS 19.1 versions prior to 19.1R1-S4, 19.1R2, update to 19.1R1-S4, 19.1R2 or later.
Fix
DoS
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Junos