Riskcovery

CVE-2020-1654

Junos OS: SRX Series: processing a malformed HTTP message when ICAP redirect service is enabled may can lead to flowd process crash or remote code execution

State
Published
Severity
9.8 Critical
Published
Jul 17, 2020
Updated
Sep 16, 2024
Reserved
Nov 4, 2019

Read the record on cve.org

Description

On Juniper Networks SRX Series with ICAP (Internet Content Adaptation Protocol) redirect service enabled, processing a malformed HTTP message can lead to a Denial of Service (DoS) or Remote Code Execution (RCE) Continued processing of this malformed HTTP message may result in an extended Denial of Service (DoS) condition. The offending HTTP message that causes this issue may originate both from the HTTP server or the HTTP client. This issue affects Juniper Networks Junos OS on SRX Series: 18.1 versions prior to 18.1R3-S9 ; 18.2 versions prior to 18.2R2-S7, 18.2R3-S3; 18.3 versions prior to 18.3R1-S7, 18.3R2-S4, 18.3R3-S1; 18.4 versions prior to 18.4R1-S7, 18.4R2-S4, 18.4R3; 19.1 versions prior to 19.1R1-S5, 19.1R2; 19.2 versions prior to 19.2R1-S2, 19.2R2; 19.3 versions prior to 19.3R2. This issue does not affect Juniper Networks Junos OS prior to 18.1R1.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hjuniper

Weaknesses

Affected Products

ProductVersions
Junos OSJuniper Networks
  • 18.1 to before 18.1R1Not affectedfrom 18.1R3-S9Not affected
  • 18.2 to before 18.2R2-S7, 18.2R3-S3Affected
  • 18.3 to before 18.3R1-S7, 18.3R2-S4, 18.3R3-S1Affected
  • 18.4 to before 18.4R1-S7, 18.4R2-S4, 18.4R3Affected
  • 19.1 to before 19.1R1-S5, 19.1R2Affected
  • 19.2 to before 19.2R1-S2, 19.2R2Affected
  • 19.3 to before 19.3R2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.