PT-2020-5899 · Juniper Networks · Junos

Published

2020-07-08

·

Updated

2020-07-24

·

CVE-2020-1640

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: Junos OS versions 16.1R7-S6 through 16.1R7-S8 Junos OS versions 17.3R2-S5 through 17.3R3-S8 Junos OS versions 17.4R2-S7 through 17.4R2-S11, 17.4R3 through 17.4R3-S2 Junos OS versions 18.1R3-S7 through 18.1R3-S10 Junos OS versions 18.2R2-S6 through 18.2R2-S7, 18.2R3-S2 through 18.2R3-S5 Junos OS versions 18.2X75-D12 through 18.2X75-D60 Junos OS versions 18.3R1-S6 through 18.3R2-S4, 18.3R3 through 18.3R3-S2 Junos OS versions 18.4R1-S5 through 18.4R1-S7, 18.4R2-S4 through 18.4R2-S5, 18.4R3 through 18.4R3-S3 Junos OS versions 19.1R1-S3 through 19.1R1-S5, 19.1R2 through 19.1R2-S2, 19.1R3 through 19.1R3-S2 Junos OS versions 19.2R1-S2 through 19.2R1-S5, 19.2R2 through 19.2R2, 19.2R3 Junos OS versions prior to 19.3R2-S3, 19.3R3 Junos OS versions prior to 19.4R1-S2, 19.4R2, 19.4R3 Junos OS versions prior to 20.1R1-S1, 20.1R2
Description: The issue is related to the implementation of the BGP protocol in Junos OS, which is associated with insufficient input validation. This can allow a remote attacker to cause a denial of service condition by crashing the RPD process. The attacker can repeatedly send specially formatted genuine BGP packets to achieve a sustained denial of service. This issue affects both IPv4 and IPv6 traffic and can be initiated through eBGP and iBGP.
Recommendations: For Junos OS versions 16.1R7-S6 through 16.1R7-S8, update to version 16.1R7-S8 or later. For Junos OS versions 17.3R2-S5 through 17.3R3-S8, update to version 17.3R3-S8 or later. For Junos OS versions 17.4R2-S7 through 17.4R2-S11, 17.4R3 through 17.4R3-S2, update to version 17.4R2-S11 or 17.4R3-S2 or later. For Junos OS versions 18.1R3-S7 through 18.1R3-S10, update to version 18.1R3-S10 or later. For Junos OS versions 18.2R2-S6 through 18.2R2-S7, 18.2R3-S2 through 18.2R3-S5, update to version 18.2R2-S7 or 18.2R3-S5 or later. For Junos OS versions 18.2X75-D12 through 18.2X75-D60, update to version 18.2X75-D60 or later. For Junos OS versions 18.3R1-S6 through 18.3R2-S4, 18.3R3 through 18.3R3-S2, update to version 18.3R2-S4 or 18.3R3-S2 or later. For Junos OS versions 18.4R1-S5 through 18.4R1-S7, 18.4R2-S4 through 18.4R2-S5, 18.4R3 through 18.4R3-S3, update to version 18.4R1-S7 or 18.4R2-S5 or 18.4R3-S3 or later. For Junos OS versions 19.1R1-S3 through 19.1R1-S5, 19.1R2 through 19.1R2-S2, 19.1R3 through 19.1R3-S2, update to version 19.1R1-S5 or 19.1R2-S2 or 19.1R3-S2 or later. For Junos OS versions 19.2R1-S2 through 19.2R1-S5, 19.2R2 through 19.2R2, 19.2R3, update to version 19.2R1-S5 or 19.2R2 or 19.2R3 or later. For Junos OS versions prior to 19.3R2-S3, 19.3R3, update to version 19.3R2-S3 or 19.3R3 or later. For Junos OS versions prior to 19.4R1-S2, 19.4R2, 19.4R3, update to version 19.4R1-S2 or 19.4R2 or 19.4R3 or later. For Junos OS versions prior to 20.1R1-S1, 20.1R2, update to version 20.1R1-S1 or 20.1R2 or later.

Fix

DoS

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-1173CWE-20

Related Identifiers

BDU:2021-01993
CVE-2020-1640

Affected Products

Junos