Riskcovery

CVE-2020-1680

Junos OS: MX Series: MS-MPC/MIC might crash when processing malformed IPv6 packet in NAT64 configuration.

State
Published
Severity
5.3 Medium
Published
Oct 16, 2020
Updated
Sep 17, 2024
Reserved
Nov 4, 2019

Read the record on cve.org

Description

On Juniper Networks MX Series with MS-MIC or MS-MPC card configured with NAT64 configuration, receipt of a malformed IPv6 packet may crash the MS-PIC component on MS-MIC or MS-MPC. This issue occurs when a multiservice card is translating the malformed IPv6 packet to IPv4 packet. An unauthenticated attacker can continuously send crafted IPv6 packets through the device causing repetitive MS-PIC process crashes, resulting in an extended Denial of Service condition. This issue affects Juniper Networks Junos OS on MX Series: 15.1 versions prior to 15.1R7-S7; 15.1X53 versions prior to 15.1X53-D593; 16.1 versions prior to 16.1R7-S8; 17.2 versions prior to 17.2R3-S4; 17.3 versions prior to 17.3R3-S6; 17.4 versions prior to 17.4R2-S11, 17.4R3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.2X75 versions prior to 18.2X75-D41, 18.2X75-D430, 18.2X75-D53, 18.2X75-D65; 18.3 versions prior to 18.3R2-S4, 18.3R3; 18.4 versions prior to 18.4R2-S5, 18.4R3; 19.1 versions prior to 19.1R2; 19.2 versions prior to 19.2R1-S5, 19.2R2; 19.3 versions prior to 19.3R2.

Scores

CVSSScoreVectorSource
3.15.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Ljuniper

Weaknesses

  • CWE-131 Incorrect Calculation of Buffer Size

Affected Products

ProductVersions
Junos OSJuniper Networks
  • 15.1 to before 15.1R7-S7Affected
  • 15.1X53 to before 15.1X53-D593Affected
  • 16.1 to before 16.1R7-S8Affected
  • 17.2 to before 17.2R3-S4Affected
  • 17.3 to before 17.3R3-S6Affected
  • 17.4 to before 17.4R2-S11, 17.4R3Affected
  • 18.1 to before 18.1R3-S11Affected
  • 18.2 to before 18.2R3-S6Affected
  • 18.2X75 to before 18.2X75-D41, 18.2X75-D430, 18.2X75-D53, 18.2X75-D65Affected
  • 18.3 to before 18.3R2-S4, 18.3R3Affected
  • 18.4 to before 18.4R2-S5, 18.4R3Affected
  • 19.1 to before 19.1R2Affected
  • 19.2 to before 19.2R1-S5, 19.2R2Affected
  • 19.3 to before 19.3R2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.