PT-2020-5148 · Juniper Networks · Junos

Published

2020-10-14

·

Updated

2022-01-01

·

CVE-2020-1672

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 17.3 prior to 17.3R3-S9 Juniper Networks Junos OS versions 17.4 prior to 17.4R2-S11, 17.4R3-S2, 17.4R3-S3 Juniper Networks Junos OS versions 18.1 prior to 18.1R3-S11 Juniper Networks Junos OS versions 18.2 prior to 18.2R3-S5 Juniper Networks Junos OS versions 18.3 prior to 18.3R2-S4, 18.3R3-S3 Juniper Networks Junos OS versions 18.4 prior to 18.4R2-S5, 18.4R3-S4 Juniper Networks Junos OS versions 19.1 prior to 19.1R2-S2, 19.1R3-S2 Juniper Networks Junos OS versions 19.2 prior to 19.2R1-S5, 19.2R2-S1, 19.2R3 Juniper Networks Junos OS versions 19.3 prior to 19.3R2-S4, 19.3R3 Juniper Networks Junos OS versions 19.4 prior to 19.4R1-S3, 19.4R2-S1, 19.4R3 Juniper Networks Junos OS versions 20.1 prior to 20.1R1-S3, 20.1R2
Description The issue is caused by insufficient input validation in the jdhcpd daemon of Juniper Networks Junos OS devices configured with DHCPv6 relay enabled. Receipt of a specific DHCPv6 packet can crash the jdhcpd daemon, leading to an extended Denial of Service (DoS) condition. Continuous receipt of specific crafted DHCP messages will repeatedly crash jdhcpd. Only DHCPv6 packets can trigger this issue, not DHCPv4 packets.
Recommendations For Juniper Networks Junos OS versions 17.3 prior to 17.3R3-S9, update to version 17.3R3-S9 or later. For Juniper Networks Junos OS versions 17.4 prior to 17.4R2-S11, 17.4R3-S2, 17.4R3-S3, update to version 17.4R2-S11, 17.4R3-S2, or 17.4R3-S3 or later. For Juniper Networks Junos OS versions 18.1 prior to 18.1R3-S11, update to version 18.1R3-S11 or later. For Juniper Networks Junos OS versions 18.2 prior to 18.2R3-S5, update to version 18.2R3-S5 or later. For Juniper Networks Junos OS versions 18.3 prior to 18.3R2-S4, 18.3R3-S3, update to version 18.3R2-S4, 18.3R3-S3 or later. For Juniper Networks Junos OS versions 18.4 prior to 18.4R2-S5, 18.4R3-S4, update to version 18.4R2-S5, 18.4R3-S4 or later. For Juniper Networks Junos OS versions 19.1 prior to 19.1R2-S2, 19.1R3-S2, update to version 19.1R2-S2, 19.1R3-S2 or later. For Juniper Networks Junos OS versions 19.2 prior to 19.2R1-S5, 19.2R2-S1, 19.2R3, update to version 19.2R1-S5, 19.2R2-S1, 19.2R3 or later. For Juniper Networks Junos OS versions 19.3 prior to 19.3R2-S4, 19.3R3, update to version 19.3R2-S4, 19.3R3 or later. For Juniper Networks Junos OS versions 19.4 prior to 19.4R1-S3, 19.4R2-S1, 19.4R3, update to version 19.4R1-S3, 19.4R2-S1, 19.4R3 or later. For Juniper Networks Junos OS versions 20.1 prior to 20.1R1-S3, 20.1R2, update to version 20.1R1-S3, 20.1R2 or later.

Fix

DoS

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2020-05754
CVE-2020-1672

Affected Products

Junos