PT-2020-4142 · Juniper Networks · Junos

Published 2020-04-08 · Updated 2022-10-21 · CVE-2020-1639

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 12.3R12-S15 Juniper Networks Junos OS 12.3X48 versions prior to 12.3X48-D95 on SRX Series Juniper Networks Junos OS 14.1X50 versions prior to 14.1X50-D145 Juniper Networks Junos OS 14.1X53 versions prior to 14.1X53-D47 Juniper Networks Junos OS 15.1 versions prior to 15.1R2 Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D170 on SRX Series Juniper Networks Junos OS 15.1X53 versions prior to 15.1X53-D67

Description: The issue is related to the improper handling of malformed Ethernet Operation, Administration, and Maintenance (Ethernet OAM) packets. When an attacker sends a specific crafted packet, it may cause an overflow condition, allowing the attacker to cause a Denial of Service (DoS) condition by crashing the CFM daemon. Continued receipt of these packets may cause an extended Denial of Service condition.

Recommendations: For Juniper Networks Junos OS versions prior to 12.3R12-S15, update to version 12.3R12-S15 or later. For Juniper Networks Junos OS 12.3X48 versions prior to 12.3X48-D95 on SRX Series, update to version 12.3X48-D95 or later. For Juniper Networks Junos OS 14.1X50 versions prior to 14.1X50-D145, update to version 14.1X50-D145 or later. For Juniper Networks Junos OS 14.1X53 versions prior to 14.1X53-D47, update to version 14.1X53-D47 or later. For Juniper Networks Junos OS 15.1 versions prior to 15.1R2, update to version 15.1R2 or later. For Juniper Networks Junos OS 15.1X49 versions prior to 15.1X49-D170 on SRX Series, update to version 15.1X49-D170 or later. For Juniper Networks Junos OS 15.1X53 versions prior to 15.1X53-D67, update to version 15.1X53-D67 or later.

Fix

DoS

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-703

CWE-755

Related Identifiers

BDU:2020-04564

CVE-2020-1639

Affected Products

Junos

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2020-1639 · Security Note
• https://osv.dev/vulnerability/CVE-2020-1639 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-04564 · Security Note
• https://kb.juniper.net · Vendor Advisory
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11020&cat=SIRT_1&actp=LIST · Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11020&cat=SIRT_1&actp=LIST · Note