CVE-2020-1648

Junos OS and Junos OS Evolved: RPD crash when processing a specific BGP packet

State: Published
Severity: 7.5 High
Published: Jul 17, 2020
Updated: Sep 16, 2024
Reserved: Nov 4, 2019

Description

On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific BGP packet can lead to a routing process daemon (RPD) crash and restart. This issue can occur even before the BGP session with the peer is established. Repeated receipt of this specific BGP packet can result in an extended Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS: 18.2X75 versions starting from 18.2X75-D50.8, 18.2X75-D60 and later versions, prior to 18.2X75-D52.8, 18.2X75-D53, 18.2X75-D60.2, 18.2X75-D65.1, 18.2X75-D70; 19.4 versions 19.4R1 and 19.4R1-S1; 20.1 versions prior to 20.1R1-S2, 20.1R2. Juniper Networks Junos OS Evolved: 19.4-EVO versions prior to 19.4R2-S2-EVO; 20.1-EVO versions prior to 20.1R2-EVO. This issue does not affect: Juniper Networks Junos OS releases prior to 19.4R1. Juniper Networks Junos OS Evolved releases prior to 19.4R1-EVO.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	juniper

Weaknesses

CWE-159 Failure to Sanitize Special Element
CWE-690 Unchecked Return Value to NULL Pointer Dereference

Affected Products

Product	Versions
Junos OSJuniper Networks	18.2X75-D50.8 18.2X75-D60 to before 18.2X75*Affectedfrom 18.2X75-D52.8, 18.2X75-D53, 18.2X75-D60.2, 18.2X75-D65.1, 18.2X75-D70Not affected 19.4 to before 19.4R1Not affectedfrom 19.4R1Affectedfrom 19.4R1-S2, 19.4R2Not affected 20.1 to before 20.1R1-S2, 20.1R2Affected
Junos OS EvolvedJuniper Networks	19.4-EVO to before 19.4R1-EVONot affectedfrom 19.4R2-S2-EVONot affected 20.1-EVO to before 20.1R2-EVOAffected

References

https://kb.juniper.net/JSA11035

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.