PT-2020-14895 · Juniper Networks · Junos
Published
2020-10-16
·
Updated
2022-01-01
·
CVE-2020-1687
CVSS v3.1
6.5
Medium
| Vector | AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series and QFX5K Series versions 17.3 prior to 17.3R3-S9
Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series and QFX5K Series versions 17.4 prior to 17.4R2-S11, 17.4R3-S2, 17.4R3-S3
Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series and QFX5K Series versions 18.1 prior to 18.1R3-S11
Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series and QFX5K Series versions 18.2 prior to 18.2R3-S5
Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series and QFX5K Series versions 18.3 prior to 18.3R2-S4, 18.3R3-S3
Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series and QFX5K Series versions 18.4 prior to 18.4R2-S5, 18.4R3-S4
Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series and QFX5K Series versions 19.1 prior to 19.1R2-S2, 19.1R3-S2
Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series and QFX5K Series versions 19.2 prior to 19.2R1-S5, 19.2R2-S1, 19.2R3
Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series and QFX5K Series versions 19.3 prior to 19.3R2-S4, 19.3R3
Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series and QFX5K Series versions 19.4 prior to 19.4R1-S3, 19.4R2-S1, 19.4R3
Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series and QFX5K Series versions 20.1 prior to 20.1R1-S3, 20.1R2
Description
The issue affects devices configured as a Layer 2 or Layer 3 gateway of an EVPN-VXLAN deployment, where receipt of a stream of specific VXLAN encapsulated layer 2 frames can cause high CPU load, leading to network protocol operation issues and traffic interruption. The offending layer 2 frames originate from a different access switch that get encapsulated within the same EVPN-VXLAN domain.
Recommendations
For versions 17.3 prior to 17.3R3-S9, update to version 17.3R3-S9 or later.
For versions 17.4 prior to 17.4R2-S11, 17.4R3-S2, 17.4R3-S3, update to version 17.4R2-S11, 17.4R3-S2, or 17.4R3-S3 or later.
For versions 18.1 prior to 18.1R3-S11, update to version 18.1R3-S11 or later.
For versions 18.2 prior to 18.2R3-S5, update to version 18.2R3-S5 or later.
For versions 18.3 prior to 18.3R2-S4, 18.3R3-S3, update to version 18.3R2-S4, 18.3R3-S3 or later.
For versions 18.4 prior to 18.4R2-S5, 18.4R3-S4, update to version 18.4R2-S5, 18.4R3-S4 or later.
For versions 19.1 prior to 19.1R2-S2, 19.1R3-S2, update to version 19.1R2-S2, 19.1R3-S2 or later.
For versions 19.2 prior to 19.2R1-S5, 19.2R2-S1, 19.2R3, update to version 19.2R1-S5, 19.2R2-S1, or 19.2R3 or later.
For versions 19.3 prior to 19.3R2-S4, 19.3R3, update to version 19.3R2-S4, 19.3R3 or later.
For versions 19.4 prior to 19.4R1-S3, 19.4R2-S1, 19.4R3, update to version 19.4R1-S3, 19.4R2-S1, or 19.4R3 or later.
For versions 20.1 prior to 20.1R1-S3, 20.1R2, update to version 20.1R1-S3, 20.1R2 or later.
Fix
Resource Exhaustion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Junos