PT-2020-5508 · Juniper Networks · Qfx5K Series+3

Published 2020-10-16 · Updated 2022-01-01 · CVE-2020-1689

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 17.3R3-S9 Junos OS versions prior to 17.4R2-S11, 17.4R3-S2, 17.4R3-S3 Junos OS versions prior to 18.1R3-S11 Junos OS versions prior to 18.2R3-S5 Junos OS versions prior to 18.3R2-S4, 18.3R3-S3 Junos OS versions prior to 18.4R2-S5, 18.4R3-S4 Junos OS versions prior to 19.1R3-S2 Junos OS versions prior to 19.2R1-S5, 19.2R3 Junos OS versions prior to 19.3R2-S4, 19.3R3 Junos OS versions prior to 19.4R1-S3, 19.4R2-S1, 19.4R3 Junos OS versions prior to 20.1R1-S3, 20.1R2

Description The issue is related to an uncontrolled resource consumption in Junos OS on certain Juniper Networks devices, including EX4300-MP Series, EX4600 Series, and QFX5K Series. This can be exploited by a remote attacker using specially crafted layer 2 frames, potentially leading to a denial of service. The offending packets can only originate from within the broadcast domain where the device is connected. This issue does not affect devices deployed in a Stand Alone configuration.

Recommendations For Junos OS versions prior to 17.3R3-S9, update to 17.3R3-S9 or later. For Junos OS versions prior to 17.4R2-S11, 17.4R3-S2, 17.4R3-S3, update to 17.4R2-S11, 17.4R3-S2, 17.4R3-S3 or later. For Junos OS versions prior to 18.1R3-S11, update to 18.1R3-S11 or later. For Junos OS versions prior to 18.2R3-S5, update to 18.2R3-S5 or later. For Junos OS versions prior to 18.3R2-S4, 18.3R3-S3, update to 18.3R2-S4, 18.3R3-S3 or later. For Junos OS versions prior to 18.4R2-S5, 18.4R3-S4, update to 18.4R2-S5, 18.4R3-S4 or later. For Junos OS versions prior to 19.1R3-S2, update to 19.1R3-S2 or later. For Junos OS versions prior to 19.2R1-S5, 19.2R3, update to 19.2R1-S5, 19.2R3 or later. For Junos OS versions prior to 19.3R2-S4, 19.3R3, update to 19.3R2-S4, 19.3R3 or later. For Junos OS versions prior to 19.4R1-S3, 19.4R2-S1, 19.4R3, update to 19.4R1-S3, 19.4R2-S1, 19.4R3 or later. For Junos OS versions prior to 20.1R1-S3, 20.1R2, update to 20.1R1-S3, 20.1R2 or later.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2021-00979

CVE-2020-1689

Affected Products

Ex4300-Mp Series

Ex4600 Series

Junos

Qfx5K Series

References · 6

• https://kb.juniper.net/JSA11086 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-00979 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-1689 · Security Note
• https://osv.dev/vulnerability/CVE-2020-1689 · Vendor Advisory
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11086&cat=SIRT_1&actp=LIST · Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11086&cat=SIRT_1&actp=LIST · Note