CVE-2020-1608

Junos OS: MX Series: In BBE configurations, receipt of a specific MPLS or IPv6 packet causes a Denial of Service

State
Published
Severity
7.5 High
Published
Jan 15, 2020
Updated
Sep 17, 2024
Reserved
Nov 4, 2019

Read the record on cve.org

Description

Receipt of a specific MPLS or IPv6 packet on the core facing interface of an MX Series device configured for Broadband Edge (BBE) service may trigger a kernel crash (vmcore), causing the device to reboot. The issue is specific to the processing of packets destined to BBE clients connected to MX Series subscriber management platforms. This issue affects MX Series running Juniper Networks Junos OS: 17.2 versions starting from17.2R2-S6, 17.2R3 and later releases, prior to 17.2R3-S3; 17.3 versions starting from 17.3R2-S4, 17.3R3-S2 and later releases, prior to 17.3R2-S5, 17.3R3-S5; 17.4 versions starting from 17.4R2 and later releases, prior to 17.4R2-S7,17.4R3; 18.1 versions starting from 18.1R2-S3, 18.1R3 and later releases, prior to 18.1R3-S6; 18.2 versions starting from18.2R1-S1, 18.2R2 and later releases, prior to 18.2R3-S2; 18.2X75 versions prior to 18.2X75-D51, 18.2X75-D60; 18.3 versions prior to 18.3R3; 18.4 versions prior to 18.4R2; 19.1 versions prior to 19.1R1-S3, 19.1R2; 19.2 versions prior to 19.2R1-S2, 19.2R2. This issue does not affect Juniper Networks Junos OS versions prior to 17.2R2-S6.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hjuniper

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Junos OSJuniper Networks
  • before 17.2R1Not affected
  • 17.2R2-S6, 17.2R3 to before 17.2*Affectedfrom 17.2R3-S3Not affected
  • 17.3R2-S4, 17.3R3-S2 to before 17.3*Affectedfrom 17.3R2-S5, 17.3R3-S5Not affected
  • 17.4R2 to before 17.4*Affectedfrom 17.4R2-S7,17.4R3Not affected
  • 18.1R2-S3, 18.1R3 to before 18.1*Affectedfrom 18.1R3-S6Not affected
  • 18.2R1-S1, 18.2R2 to before 18.2*Affectedfrom 18.2R3-S2Not affected
  • 18.2X75 to before 18.2X75-D51, 18.2X75-D60Affected
  • 18.3 to before 18.3R3Affected
  • 18.4 to before 18.4R2Affected
  • 19.1 to before 19.1R1-S3, 19.1R2Affected
  • 19.2 to before 19.2R1-S2, 19.2R2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.