Junos OS: Upon receipt of certain types of malformed PCEP packets the pccd process may crash. (Juniper Networks Junos OS)
At a glance
- Source
- NVD
- EPSS
- EPSS 1.07 % · percentile 65 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- juniper
- NVD status
- Modified
Description
Certain types of malformed Path Computation Element Protocol (PCEP) packets when received and processed by a Juniper Networks Junos OS device serving as a Path Computation Client (PCC) in a PCEP environment using Juniper's path computational element protocol daemon (pccd) process allows an attacker to cause the pccd process to crash and generate a core file thereby causing a Denial of Service (DoS). Continued receipt of this family of malformed PCEP packets will cause an extended Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS: 15.1 versions prior to 15.1F6-S13, 15.1R7-S4; 15.1X49 versions prior to 15.1X49-D180 on SRX Series; 15.1X53 versions prior to 15.1X53-D238, 15.1X53-D496, 15.1X53-D592; 16.1 versions prior to 16.1R7-S4; 16.2 versions prior to 16.2R2-S9; 17.1 versions prior to 17.1R2-S11, 17.1R3; 17.2 versions prior to 17.2R1-S9; 17.2 version 17.2R2 and later prior to 17.2R3-S2; 17.3 versions prior to 17.3R3-S3; 17.4 versions prior to 17.4R2-S2, 17.4R3; 18.1 versions prior to 18.1R3-S2; 18.2 versions prior to 18.2R2-S6, 18.2R3; 18.2X75 versions prior to 18.2X75-D40; 18.3 versions prior to 18.3R2; 18.4 versions prior to 18.4R1-S2, 18.4R2. This issue does not affect releases of Junos OS prior to 15.1R1.
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L | juniper |
| CVSS 3.1 | MEDIUM 5.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L | NVD · sirt@juniper.net (Secondary) |
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | MEDIUM 5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2020-12471
- GCVE · GCVE-0-2020-1601
CERT-FR advisories
- CERTFR-2020-AVI-015 — Multiples vulnérabilités dans les produits Juniper · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:juniper:junos:15.1:f6-s12:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1:r4-s9:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1:r5:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1:r6:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1:r6-s6:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1:r7-s1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1:r7-s2:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1:r7-s3:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1x53:d20:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1x53:d21:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1x53:d210:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1x53:d25:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1x53:d30:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1x53:d31:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1x53:d32:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1x53:d33:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1x53:d34:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1x53:d40:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1x53:d45:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1x53:d470:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1x53:d495:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1x53:d56:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1x53:d60:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1x53:d61:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1x53:d62:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1x53:d63:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1x53:d65:*:*:*:*:*:*cpe:2.3:o:juniper:junos:15.1x53:d70:*:*:*:*:*:*cpe:2.3:o:juniper:junos:16.1:-:*:*:*:*:*:*cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*cpe:2.3:o:juniper:junos:16.1:r3-s10:*:*:*:*:*:*cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:*cpe:2.3:o:juniper:junos:16.1:r5-s4:*:*:*:*:*:*cpe:2.3:o:juniper:junos:16.1:r6-s1:*:*:*:*:*:*- +83 more
Affected products
| Product | Versions |
|---|---|
| Juniper Networks · Junos OS | affected 15.1 < 15.1F6-S13, 15.1R7-S4 ; affected 16.1 < 16.1R7-S4 ; affected 16.2 < 16.2R2-S9 ; affected 17.1 < 17.1R2-S11, 17.1R3 ; affected 17.2 < 17.2R1-S9, 17.2R3-S2 ; affected 17.3 < 17.3R3-S3 |
| Juniper Networks · Junos OS | affected 15.1X49 < 15.1X49-D180 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |