CVE-2020-1650

Junos OS: MX Series: Denial of Service vulnerability in MS-PIC component on MS-MIC or MS-MPC

State: Published
Severity: 7.5 High
Published: Jul 17, 2020
Updated: Sep 16, 2024
Reserved: Nov 4, 2019

Description

On Juniper Networks Junos MX Series with service card configured, receipt of a stream of specific packets may crash the MS-PIC component on MS-MIC or MS-MPC. By continuously sending these specific packets, an attacker can repeatedly bring down MS-PIC on MS-MIC/MS-MPC causing a prolonged Denial of Service. This issue affects MX Series devices using MS-PIC, MS-MIC or MS-MPC service cards with any service configured. This issue affects Juniper Networks Junos OS on MX Series: 17.2R2-S7; 17.3R3-S4, 17.3R3-S5; 17.4R2-S4 and the subsequent SRs (17.4R2-S5, 17.4R2-S6, etc.); 17.4R3; 18.1R3-S3, 18.1R3-S4, 18.1R3-S5, 18.1R3-S6, 18.1R3-S7, 18.1R3-S8; 18.2R3, 18.2R3-S1, 18.2R3-S2; 18.3R2 and the SRs based on 18.3R2; 18.4R2 and the SRs based on 18.4R2; 19.1R1 and the SRs based on 19.1R1; 19.2R1 and the SRs based on 19.2R1; 19.3R1 and the SRs based on 19.3R1.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	juniper

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Junos OSJuniper Networks	17.2R2-S7Affected 17.3R3-S4, 17.3R3-S5Affected 17.4R3Affected 18.1R3-S3, 18.1R3-S4, 18.1R3-S5, 18.1R3-S6, 18.1R3-S7, 18.1R3-S8Affected 18.2R3, 18.2R3-S1, 18.2R3-S2Affected 17.4R2-S4 to before 17.4Affected 18.3R2 to before 18.3Affectedfrom 18.3R3Not affected 18.4R2 to before 18.4Affectedfrom 18.4R3Not affected 19.1R1 to before 19.1Affectedfrom 19.1R3Not affected 19.2R1 to before 19.2Affectedfrom 19.2R2Not affected 19.3R1 to before 19.3Affectedfrom 19.3R3Not affected

Product

Versions

Junos OSJuniper Networks

17.2R2-S7Affected
17.3R3-S4, 17.3R3-S5Affected
17.4R3Affected
18.1R3-S3, 18.1R3-S4, 18.1R3-S5, 18.1R3-S6, 18.1R3-S7, 18.1R3-S8Affected
18.2R3, 18.2R3-S1, 18.2R3-S2Affected
17.4R2-S4 to before 17.4*Affected
18.3R2 to before 18.3*Affectedfrom 18.3R3Not affected
18.4R2 to before 18.4*Affectedfrom 18.4R3Not affected
19.1R1 to before 19.1*Affectedfrom 19.1R3Not affected
19.2R1 to before 19.2*Affectedfrom 19.2R2Not affected
19.3R1 to before 19.3*Affectedfrom 19.3R3Not affected

References

https://kb.juniper.net/JSA11037

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.