← CVE Intelligence

CVE-2020-1644

Junos OS and Junos OS Evolved: RPD crash due to specific BGP UPDATE packets PUBLISHED

Description (CNA)

On Juniper Networks Junos OS and Junos OS Evolved devices, the receipt of a specific BGP UPDATE packet causes an internal counter to be incremented incorrectly, which over time can lead to the routing protocols process (RPD) crash and restart. This issue affects both IBGP and EBGP multihop deployment in IPv4 or IPv6 network. This issue affects: Juniper Networks Junos OS: 17.2X75 versions prior to 17.2X75-D105.19; 17.3 versions prior to 17.3R3-S8; 17.4 versions prior to 17.4R2-S10, 17.4R3-S2; 18.1 versions prior to 18.1R3-S10; 18.2 versions prior to 18.2R2-S7, 18.2R3-S4; 18.2X75 versions prior to 18.2X75-D13, 18.2X75-D411.1, 18.2X75-D420.18, 18.2X75-D52.3, 18.2X75-D60; 18.3 versions prior to 18.3R2-S4, 18.3R3-S2; 18.4 versions prior to 18.4R1-S7, 18.4R2-S4, 18.4R3-S2; 19.1 versions prior to 19.1R1-S5, 19.1R2-S1, 19.1R3; 19.2 versions prior to 19.2R1-S5, 19.2R2; 19.3 versions prior to 19.3R2-S2, 19.3R3; 19.4 versions prior to 19.4R1-S2, 19.4R2. Juniper Networks Junos OS Evolved: any releases prior to 20.1R2-EVO. This issue does not affect Juniper Networks Junos OS releases prior to 17.3R1.

Affected (CNA)

Vendor / productVersions
Juniper Networks / Junos OSunaffected unspecified through 17.3R1; affected 17.2X75 before 17.2X75-D105.19; affected 17.3 before 17.3R3-S8; affected 17.4 before 17.4R2-S10, 17.4R3-S2; affected 18.1 before 18.1R3-S10; affected 18.2 before 18.2R2-S7, 18.2R3-S4; affected 18.2X75 before 18.2X75-D13, 18.2X75-D411.1, 18.2X75-D420.18, 18.2X75-D52.3, 18.2X75-D60; affected 18.3 before 18.3R2-S4, 18.3R3-S2; affected 18.4 before 18.4R1-S7, 18.4R2-S4, 18.4R3-S2; affected 19.1 before 19.1R1-S5, 19.1R2-S1, 19.1R3; affected 19.2 before 19.2R1-S5, 19.2R2; affected 19.3 before 19.3R2-S2, 19.3R3; affected 19.4 before 19.4R1-S2, 19.4R2
Juniper Networks / Junos OS Evolvedaffected 19.2-EVO; affected 19.3-EVO; affected 19.4-EVO; affected 20.1-EVO before 20.1R2-EVO

CWE

CWE-703

References

ADP enrichment

CVE

No English description supplied.