PT-2020-5147 · Juniper Networks · Junos

Published

2020-10-14

·

Updated

2021-02-05

·

CVE-2020-1664

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 17.3R3-S9 Junos OS versions prior to 17.4R2-S12, 17.4R3-S3 Junos OS versions prior to 18.1R3-S11 Junos OS versions prior to 18.2R3-S6 Junos OS versions prior to 18.2X75-D53, 18.2X75-D65 Junos OS versions prior to 18.3R2-S4, 18.3R3-S4 Junos OS versions prior to 18.4R2-S5, 18.4R3-S5 Junos OS versions prior to 19.1R3-S3 Junos OS versions prior to 19.2R1-S5, 19.2R3 Junos OS versions prior to 19.3R2-S4, 19.3R3 Junos OS versions prior to 19.4R1-S3, 19.4R2-S2, 19.4R3 Junos OS versions prior to 20.1R1-S4, 20.1R2 Junos OS versions prior to 20.2R1-S1, 20.2R2
Description A stack buffer overflow vulnerability in the device control daemon (DCD) on Juniper Networks Junos OS allows a low privilege local user to create a Denial of Service (DoS) against the daemon or execute arbitrary code in the system with root privilege.
Recommendations For Junos OS versions prior to 17.3R3-S9, update to version 17.3R3-S9 or later. For Junos OS versions prior to 17.4R2-S12, 17.4R3-S3, update to version 17.4R2-S12 or 17.4R3-S3 or later. For Junos OS versions prior to 18.1R3-S11, update to version 18.1R3-S11 or later. For Junos OS versions prior to 18.2R3-S6, update to version 18.2R3-S6 or later. For Junos OS versions prior to 18.2X75-D53, 18.2X75-D65, update to version 18.2X75-D53 or 18.2X75-D65 or later. For Junos OS versions prior to 18.3R2-S4, 18.3R3-S4, update to version 18.3R2-S4 or 18.3R3-S4 or later. For Junos OS versions prior to 18.4R2-S5, 18.4R3-S5, update to version 18.4R2-S5 or 18.4R3-S5 or later. For Junos OS versions prior to 19.1R3-S3, update to version 19.1R3-S3 or later. For Junos OS versions prior to 19.2R1-S5, 19.2R3, update to version 19.2R1-S5 or 19.2R3 or later. For Junos OS versions prior to 19.3R2-S4, 19.3R3, update to version 19.3R2-S4 or 19.3R3 or later. For Junos OS versions prior to 19.4R1-S3, 19.4R2-S2, 19.4R3, update to version 19.4R1-S3 or 19.4R2-S2 or 19.4R3 or later. For Junos OS versions prior to 20.1R1-S4, 20.1R2, update to version 20.1R1-S4 or 20.1R2 or later. For Junos OS versions prior to 20.2R1-S1, 20.2R2, update to version 20.2R1-S1 or 20.2R2 or later.

Fix

DoS

Memory Corruption

Stack Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-787CWE-121

Related Identifiers

BDU:2020-05752
CVE-2020-1664

Affected Products

Junos