PT-2020-4138 · Juniper Networks · Junos

Published

2020-04-08

·

Updated

2022-04-25

·

CVE-2020-1629

CVSS v3.1

5.9

Medium

VectorAV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 16.1 through 16.1R7-S5 Juniper Networks Junos OS versions 16.2 through 16.2R2-S10 Juniper Networks Junos OS versions 17.1 through 17.1R2-S10 Juniper Networks Junos OS versions 17.2 through 17.2R1-S8 Juniper Networks Junos OS versions 17.2X75 through 17.2X75-D104 Juniper Networks Junos OS versions 17.3 through 17.3R2-S4 Juniper Networks Junos OS versions 17.4 through 17.4R2-S6 Juniper Networks Junos OS versions 18.1 through 18.1R3-S7 Juniper Networks Junos OS versions 18.2 through 18.2R3-S2 Juniper Networks Junos OS versions 18.2X75 through 18.2X75-D409 Juniper Networks Junos OS versions 18.3 through 18.3R1-S4 Juniper Networks Junos OS versions 18.4 through 18.4R2-S1 Juniper Networks Junos OS versions 19.1 through 19.1R1-S1 Juniper Networks Junos OS versions 19.2 through 19.2R1-S3
Description: A race condition vulnerability on Juniper Network Junos OS devices may cause the routing protocol daemon (RPD) process to crash and restart while processing a BGP NOTIFICATION message. This issue is related to errors in synchronization when using a shared resource. Exploitation of this issue may allow a remote attacker to cause a denial of service.
Recommendations: For Juniper Networks Junos OS versions 16.1 through 16.1R7-S5, update to version 16.1R7-S6 or later. For Juniper Networks Junos OS versions 16.2 through 16.2R2-S10, update to version 16.2R2-S11 or later. For Juniper Networks Junos OS versions 17.1 through 17.1R2-S10, update to version 17.1R2-S11 or later. For Juniper Networks Junos OS versions 17.2 through 17.2R1-S8, update to version 17.2R1-S9 or later. For Juniper Networks Junos OS versions 17.2X75 through 17.2X75-D104, update to version 17.2X75-D105 or later. For Juniper Networks Junos OS versions 17.3 through 17.3R2-S4, update to version 17.3R2-S5 or later. For Juniper Networks Junos OS versions 17.4 through 17.4R2-S6, update to version 17.4R2-S7 or later. For Juniper Networks Junos OS versions 18.1 through 18.1R3-S7, update to version 18.1R3-S8 or later. For Juniper Networks Junos OS versions 18.2 through 18.2R3-S2, update to version 18.2R3-S3 or later. For Juniper Networks Junos OS versions 18.2X75 through 18.2X75-D409, update to version 18.2X75-D410 or later. For Juniper Networks Junos OS versions 18.3 through 18.3R1-S4, update to version 18.3R1-S5 or later. For Juniper Networks Junos OS versions 18.4 through 18.4R2-S1, update to version 18.4R2-S2 or later. For Juniper Networks Junos OS versions 19.1 through 19.1R1-S1, update to version 19.1R1-S2 or later. For Juniper Networks Junos OS versions 19.2 through 19.2R1-S3, update to version 19.2R1-S4 or later.

Fix

Time Of Check To Time Of Use

Race Condition

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-367CWE-362CWE-366

Related Identifiers

BDU:2020-04560
CVE-2020-1629

Affected Products

Junos