6.8

CVE-2020-1600

Junos OS: A specific SNMP command can trigger a high CPU usage Denial of Service in the RPD daemon.

In a Point-to-Multipoint (P2MP) Label Switched Path (LSP) scenario, an uncontrolled resource consumption vulnerability in the Routing Protocol Daemon (RPD) in Juniper Networks Junos OS allows a specific SNMP request to trigger an infinite loop causing a high CPU usage Denial of Service (DoS) condition. This issue affects both SNMP over IPv4 and IPv6. This issue affects: Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D90; 15.1 versions prior to 15.1R7-S6; 15.1X49 versions prior to 15.1X49-D200; 15.1X53 versions prior to 15.1X53-D238, 15.1X53-D592; 16.1 versions prior to 16.1R7-S5; 16.2 versions prior to 16.2R2-S11; 17.1 versions prior to 17.1R3-S1; 17.2 versions prior to 17.2R3-S2; 17.3 versions prior to 17.3R3-S7; 17.4 versions prior to 17.4R2-S4, 17.4R3; 18.1 versions prior to 18.1R3-S5; 18.2 versions prior to 18.2R3; 18.2X75 versions prior to 18.2X75-D50; 18.3 versions prior to 18.3R2; 18.4 versions prior to 18.4R2; 19.1 versions prior to 19.1R2.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Juniper ≫ Junos Version 12.3x48 Update d10
Juniper ≫ Junos Version 12.3x48 Update d15
Juniper ≫ Junos Version 12.3x48 Update d20
Juniper ≫ Junos Version 12.3x48 Update d25
Juniper ≫ Junos Version 12.3x48 Update d30
Juniper ≫ Junos Version 12.3x48 Update d35
Juniper ≫ Junos Version 12.3x48 Update d40
Juniper ≫ Junos Version 12.3x48 Update d45
Juniper ≫ Junos Version 12.3x48 Update d50
Juniper ≫ Junos Version 12.3x48 Update d55
Juniper ≫ Junos Version 12.3x48 Update d60
Juniper ≫ Junos Version 12.3x48 Update d65
Juniper ≫ Junos Version 12.3x48 Update d70
Juniper ≫ Junos Version 12.3x48 Update d75
Juniper ≫ Junos Version 12.3x48 Update d80
Juniper ≫ Junos Version 12.3x48 Update d85
Juniper ≫ Junos Version 15.1 Update r7
Juniper ≫ Junos Version 15.1 Update r7-s1
Juniper ≫ Junos Version 15.1 Update r7-s2
Juniper ≫ Junos Version 15.1 Update r7-s3
Juniper ≫ Junos Version 15.1 Update r7-s4
Juniper ≫ Junos Version 15.1 Update r7-s5
Juniper ≫ Junos Version 15.1x49 Update d10
Juniper ≫ Junos Version 15.1x49 Update d150
Juniper ≫ Junos Version 15.1x49 Update d20
Juniper ≫ Junos Version 15.1x49 Update d30
Juniper ≫ Junos Version 15.1x49 Update d35
Juniper ≫ Junos Version 15.1x49 Update d40
Juniper ≫ Junos Version 15.1x49 Update d45
Juniper ≫ Junos Version 15.1x49 Update d50
Juniper ≫ Junos Version 15.1x49 Update d55
Juniper ≫ Junos Version 15.1x49 Update d60
Juniper ≫ Junos Version 15.1x49 Update d65
Juniper ≫ Junos Version 15.1x49 Update d70
Juniper ≫ Junos Version 15.1x49 Update d75
Juniper ≫ Junos Version 15.1x49 Update d80
Juniper ≫ Junos Version 15.1x53 Update d20
Juniper ≫ Junos Version 15.1x53 Update d21
Juniper ≫ Junos Version 15.1x53 Update d210
Juniper ≫ Junos Version 15.1x53 Update d25
Juniper ≫ Junos Version 15.1x53 Update d30
Juniper ≫ Junos Version 15.1x53 Update d31
Juniper ≫ Junos Version 15.1x53 Update d32
Juniper ≫ Junos Version 15.1x53 Update d33
Juniper ≫ Junos Version 15.1x53 Update d34
Juniper ≫ Junos Version 15.1x53 Update d40
Juniper ≫ Junos Version 15.1x53 Update d45
Juniper ≫ Junos Version 15.1x53 Update d470
Juniper ≫ Junos Version 15.1x53 Update d495
Juniper ≫ Junos Version 15.1x53 Update d56
Juniper ≫ Junos Version 15.1x53 Update d60
Juniper ≫ Junos Version 15.1x53 Update d61
Juniper ≫ Junos Version 15.1x53 Update d62
Juniper ≫ Junos Version 15.1x53 Update d63
Juniper ≫ Junos Version 15.1x53 Update d65
Juniper ≫ Junos Version 15.1x53 Update d70
Juniper ≫ Junos Version 16.1 Update -
Juniper ≫ Junos Version 16.1 Update r1
Juniper ≫ Junos Version 16.1 Update r2
Juniper ≫ Junos Version 16.1 Update r3
Juniper ≫ Junos Version 16.1 Update r3-s10
Juniper ≫ Junos Version 16.1 Update r4
Juniper ≫ Junos Version 16.1 Update r5
Juniper ≫ Junos Version 16.1 Update r5-s4
Juniper ≫ Junos Version 16.1 Update r6
Juniper ≫ Junos Version 16.1 Update r6-s1
Juniper ≫ Junos Version 16.1 Update r7
Juniper ≫ Junos Version 16.1 Update r7-s2
Juniper ≫ Junos Version 16.1 Update r7-s3
Juniper ≫ Junos Version 16.1 Update r7-s4
Juniper ≫ Junos Version 16.2 Update -
Juniper ≫ Junos Version 16.2 Update r1
Juniper ≫ Junos Version 16.2 Update r2
Juniper ≫ Junos Version 16.2 Update r2-s1
Juniper ≫ Junos Version 16.2 Update r2-s10
Juniper ≫ Junos Version 16.2 Update r2-s2
Juniper ≫ Junos Version 16.2 Update r2-s5
Juniper ≫ Junos Version 16.2 Update r2-s6
Juniper ≫ Junos Version 16.2 Update r2-s7
Juniper ≫ Junos Version 16.2 Update r2-s8
Juniper ≫ Junos Version 16.2 Update r2-s9
Juniper ≫ Junos Version 17.1 Update -
Juniper ≫ Junos Version 17.1 Update r1
Juniper ≫ Junos Version 17.1 Update r2-s1
Juniper ≫ Junos Version 17.1 Update r2-s10
Juniper ≫ Junos Version 17.1 Update r2-s2
Juniper ≫ Junos Version 17.1 Update r2-s3
Juniper ≫ Junos Version 17.1 Update r2-s4
Juniper ≫ Junos Version 17.1 Update r2-s5
Juniper ≫ Junos Version 17.1 Update r2-s6
Juniper ≫ Junos Version 17.1 Update r2-s7
Juniper ≫ Junos Version 17.1 Update r2-s9
Juniper ≫ Junos Version 17.1 Update r3
Juniper ≫ Junos Version 17.2 Update -
Juniper ≫ Junos Version 17.2 Update r1-s2
Juniper ≫ Junos Version 17.2 Update r1-s4
Juniper ≫ Junos Version 17.2 Update r1-s7
Juniper ≫ Junos Version 17.2 Update r1-s8
Juniper ≫ Junos Version 17.2 Update r2-s6
Juniper ≫ Junos Version 17.2 Update r2-s7
Juniper ≫ Junos Version 17.2 Update r3-s1
Juniper ≫ Junos Version 17.3 Update -
Juniper ≫ Junos Version 17.3 Update r1-s1
Juniper ≫ Junos Version 17.3 Update r2
Juniper ≫ Junos Version 17.3 Update r2-s1
Juniper ≫ Junos Version 17.3 Update r2-s2
Juniper ≫ Junos Version 17.3 Update r3-s1
Juniper ≫ Junos Version 17.3 Update r3-s2
Juniper ≫ Junos Version 17.3 Update r3-s3
Juniper ≫ Junos Version 17.3 Update r3-s4
Juniper ≫ Junos Version 17.3 Update r3-s5
Juniper ≫ Junos Version 17.3 Update r3-s6
Juniper ≫ Junos Version 17.4 Update -
Juniper ≫ Junos Version 17.4 Update r1
Juniper ≫ Junos Version 17.4 Update r1-s1
Juniper ≫ Junos Version 17.4 Update r1-s2
Juniper ≫ Junos Version 17.4 Update r1-s4
Juniper ≫ Junos Version 17.4 Update r1-s6
Juniper ≫ Junos Version 17.4 Update r1-s7
Juniper ≫ Junos Version 17.4 Update r2
Juniper ≫ Junos Version 17.4 Update r2-s1
Juniper ≫ Junos Version 17.4 Update r2-s3
Juniper ≫ Junos Version 18.1 Update -
Juniper ≫ Junos Version 18.1 Update r2
Juniper ≫ Junos Version 18.1 Update r2-s1
Juniper ≫ Junos Version 18.1 Update r2-s2
Juniper ≫ Junos Version 18.1 Update r2-s4
Juniper ≫ Junos Version 18.1 Update r3
Juniper ≫ Junos Version 18.1 Update r3-s2
Juniper ≫ Junos Version 18.1 Update r3-s3
Juniper ≫ Junos Version 18.1 Update r3-s4
Juniper ≫ Junos Version 18.2 Update -
Juniper ≫ Junos Version 18.2 Update r1-s5
Juniper ≫ Junos Version 18.2 Update r2-s1
Juniper ≫ Junos Version 18.2 Update r2-s2
Juniper ≫ Junos Version 18.2 Update r2-s3
Juniper ≫ Junos Version 18.2 Update r2-s4
Juniper ≫ Junos Version 18.2 Update r2-s5
Juniper ≫ Junos Version 18.2 Update r2-s6
Juniper ≫ Junos Version 18.2x75 Update -
Juniper ≫ Junos Version 18.2x75 Update d20
Juniper ≫ Junos Version 18.2x75 Update d40
Juniper ≫ Junos Version 18.3 Update -
Juniper ≫ Junos Version 18.3 Update r1
Juniper ≫ Junos Version 18.3 Update r1-s1
Juniper ≫ Junos Version 18.3 Update r1-s2
Juniper ≫ Junos Version 18.3 Update r1-s3
Juniper ≫ Junos Version 18.3 Update r2
Juniper ≫ Junos Version 18.4 Update -
Juniper ≫ Junos Version 18.4 Update r1
Juniper ≫ Junos Version 18.4 Update r1-s1
Juniper ≫ Junos Version 18.4 Update r1-s2
Juniper ≫ Junos Version 18.4 Update r1-s3
Juniper ≫ Junos Version 18.4 Update r1-s4
Juniper ≫ Junos Version 18.4 Update r1-s5
Juniper ≫ Junos Version 19.1 Update r1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.2% 0.64
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NIST 6.8 8 6.9
AV:N/AC:L/Au:S/C:N/I:N/A:C
Juniper 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

https://kb.juniper.net/JSA10979
Vendor Advisory
https://prsearch.juniper.net/InfoCenter/index?page=prcontent&id=PR1402185
Permissions Required