CVE-2020-1684

Junos OS: SRX Series: High CPU load due to processing for HTTP traffic when Application Identification is enabled.

State: Published
Severity: 7.5 High
Published: Oct 16, 2020
Updated: Sep 17, 2024
Reserved: Nov 4, 2019

Description

On Juniper Networks SRX Series configured with application identification inspection enabled, receipt of specific HTTP traffic can cause high CPU load utilization, which could lead to traffic interruption. Application identification is enabled by default and is automatically turned on when Intrusion Detection and Prevention (IDP), AppFW, AppQoS, or AppTrack is configured. Thus, this issue might occur when IDP, AppFW, AppQoS, or AppTrack is configured. This issue affects Juniper Networks Junos OS on SRX Series: 12.3X48 versions prior to 12.3X48-D105; 15.1X49 versions prior to 15.1X49-D221, 15.1X49-D230; 17.4 versions prior to 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S3; 18.3 versions prior to 18.3R2-S4, 18.3R3-S2; 18.4 versions prior to 18.4R2-S5, 18.4R3-S1; 19.1 versions prior to 19.1R2-S2, 19.1R3; 19.2 versions prior to 19.2R1-S5, 19.2R2; 19.3 versions prior to 19.3R3; 19.4 versions prior to 19.4R2.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	juniper

Weaknesses

CWE-400 Uncontrolled Resource Consumption

Affected Products

Product	Versions
Junos OSJuniper Networks	12.3X48 to before 12.3X48-D105Affected 15.1X49 to before 15.1X49-D221, 15.1X49-D230Affected 17.4 to before 17.4R3-S3Affected 18.1 to before 18.1R3-S11Affected 18.2 to before 18.2R3-S3Affected 18.3 to before 18.3R2-S4, 18.3R3-S2Affected 18.4 to before 18.4R2-S5, 18.4R3-S1Affected 19.1 to before 19.1R2-S2, 19.1R3Affected 19.2 to before 19.2R1-S5, 19.2R2Affected 19.3 to before 19.3R3Affected 19.4 to before 19.4R2Affected

Product

Versions

Junos OSJuniper Networks

12.3X48 to before 12.3X48-D105Affected
15.1X49 to before 15.1X49-D221, 15.1X49-D230Affected
17.4 to before 17.4R3-S3Affected
18.1 to before 18.1R3-S11Affected
18.2 to before 18.2R3-S3Affected
18.3 to before 18.3R2-S4, 18.3R3-S2Affected
18.4 to before 18.4R2-S5, 18.4R3-S1Affected
19.1 to before 19.1R2-S2, 19.1R3Affected
19.2 to before 19.2R1-S5, 19.2R2Affected
19.3 to before 19.3R3Affected
19.4 to before 19.4R2Affected

References

https://kb.juniper.net/JSA11081

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.