CVEvulnerability

CVE-2020-1644

7.5 HIGH Published 2020-07-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-07-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-20, CWE-703

Description

On Juniper Networks Junos OS and Junos OS Evolved devices, the receipt of a specific BGP UPDATE packet causes an internal counter to be incremented incorrectly, which over time can lead to the routing protocols process (RPD) crash and restart. This issue affects both IBGP and EBGP multihop deployment in IPv4 or IPv6 network. This issue affects: Juniper Networks Junos OS: 17.2X75 versions prior to 17.2X75-D105.19; 17.3 versions prior to 17.3R3-S8; 17.4 versions prior to 17.4R2-S10, 17.4R3-S2; 18.1 versions prior to 18.1R3-S10; 18.2 versions prior to 18.2R2-S7, 18.2R3-S4; 18.2X75 versions prior to 18.2X75-D13, 18.2X75-D411.1, 18.2X75-D420.18, 18.2X75-D52.3, 18.2X75-D60; 18.3 versions prior to 18.3R2-S4, 18.3R3-S2; 18.4 versions prior to 18.4R1-S7, 18.4R2-S4, 18.4R3-S2; 19.1 versions prior to 19.1R1-S5, 19.1R2-S1, 19.1R3; 19.2 versions prior to 19.2R1-S5, 19.2R2; 19.3 versions prior to 19.3R2-S2, 19.3R3; 19.4 versions prior to 19.4R1-S2, 19.4R2. Juniper Networks Junos OS Evolved: any releases prior to 20.1R2-EVO. This issue does not affect Juniper Networks Junos OS releases prior to 17.3R1.

Affected configurations

• juniper junos 17.2x75 • juniper junos 17.3 • juniper junos 17.4 • juniper junos 18.1 • juniper junos 18.2 • juniper junos 18.2x75 • juniper junos 18.3 • juniper junos 18.4 • juniper junos 19.1 • juniper junos 19.2 • juniper junos 19.3 • juniper junos 19.4 • juniper junos os evolved 18.3 • juniper junos os evolved 19.1 • juniper junos os evolved 19.2 • juniper junos os evolved 19.3 • juniper junos os evolved 20.1

Related

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-703 Improper Check or Handling of Exceptional Conditions weakness

References