CVE-2020-1644

Junos OS and Junos OS Evolved: RPD crash due to specific BGP UPDATE packets

State
Published
Severity
7.5 High
Published
Jul 17, 2020
Updated
Sep 16, 2024
Reserved
Nov 4, 2019

Read the record on cve.org

Description

On Juniper Networks Junos OS and Junos OS Evolved devices, the receipt of a specific BGP UPDATE packet causes an internal counter to be incremented incorrectly, which over time can lead to the routing protocols process (RPD) crash and restart. This issue affects both IBGP and EBGP multihop deployment in IPv4 or IPv6 network. This issue affects: Juniper Networks Junos OS: 17.2X75 versions prior to 17.2X75-D105.19; 17.3 versions prior to 17.3R3-S8; 17.4 versions prior to 17.4R2-S10, 17.4R3-S2; 18.1 versions prior to 18.1R3-S10; 18.2 versions prior to 18.2R2-S7, 18.2R3-S4; 18.2X75 versions prior to 18.2X75-D13, 18.2X75-D411.1, 18.2X75-D420.18, 18.2X75-D52.3, 18.2X75-D60; 18.3 versions prior to 18.3R2-S4, 18.3R3-S2; 18.4 versions prior to 18.4R1-S7, 18.4R2-S4, 18.4R3-S2; 19.1 versions prior to 19.1R1-S5, 19.1R2-S1, 19.1R3; 19.2 versions prior to 19.2R1-S5, 19.2R2; 19.3 versions prior to 19.3R2-S2, 19.3R3; 19.4 versions prior to 19.4R1-S2, 19.4R2. Juniper Networks Junos OS Evolved: any releases prior to 20.1R2-EVO. This issue does not affect Juniper Networks Junos OS releases prior to 17.3R1.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hjuniper

Weaknesses

  • CWE-703 Improper Check or Handling of Exceptional Conditions

Affected Products

ProductVersions
Junos OSJuniper Networks
  • 17.3R1 and earlierNot affected
  • 17.2X75 to before 17.2X75-D105.19Affected
  • 17.3 to before 17.3R3-S8Affected
  • 17.4 to before 17.4R2-S10, 17.4R3-S2Affected
  • 18.1 to before 18.1R3-S10Affected
  • 18.2 to before 18.2R2-S7, 18.2R3-S4Affected
  • 18.2X75 to before 18.2X75-D13, 18.2X75-D411.1, 18.2X75-D420.18, 18.2X75-D52.3, 18.2X75-D60Affected
  • 18.3 to before 18.3R2-S4, 18.3R3-S2Affected
  • 18.4 to before 18.4R1-S7, 18.4R2-S4, 18.4R3-S2Affected
  • 19.1 to before 19.1R1-S5, 19.1R2-S1, 19.1R3Affected
  • 19.2 to before 19.2R1-S5, 19.2R2Affected
  • 19.3 to before 19.3R2-S2, 19.3R3Affected
  • 19.4 to before 19.4R1-S2, 19.4R2Affected
Junos OS EvolvedJuniper Networks
  • 19.2-EVOAffected
  • 19.3-EVOAffected
  • 19.4-EVOAffected
  • 20.1-EVO to before 20.1R2-EVOAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.