CVE-2020-1651

EPSS 0.45%
Veröffentlicht 17.07.2020 19:15:13
Zuletzt bearbeitet 21.11.2024 05:11:05
Quelle sirt@juniper.net
CVE-Watchlists
Login
Unerledigt
Login

Junos OS: MX Series: PFE on the line card may crash due to memory leak.

On Juniper Networks MX series, receipt of a stream of specific Layer 2 frames may cause a memory leak resulting in the packet forwarding engine (PFE) on the line card to crash and restart, causing traffic interruption. By continuously sending this stream of specific layer 2 frame, an attacker connected to the same broadcast domain can repeatedly crash the PFE, causing a prolonged Denial of Service (DoS). This issue affects Juniper Networks Junos OS on MX Series: 17.2 versions prior to 17.2R3-S4; 17.2X75 versions prior to 17.2X75-D105.19; 17.3 versions prior to 17.3R3-S7; 17.4 versions prior to 17.4R1-S3, 17.4R2; 18.1 versions prior to 18.1R2. This issue does not affect Juniper Networks Junos OS releases prior to 17.2R1.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 4

NVD 39 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Juniper ≫ Junos Version17.2 Update-

   Juniper ≫ Mx10 Version-
   Juniper ≫ Mx10000 Version-
   Juniper ≫ Mx10003 Version-
   Juniper ≫ Mx104 Version-
   Juniper ≫ Mx150 Version-
   Juniper ≫ Mx2008 Version-
   Juniper ≫ Mx2010 Version-
   Juniper ≫ Mx2020 Version-
   Juniper ≫ Mx204 Version-
   Juniper ≫ Mx240 Version-
   Juniper ≫ Mx40 Version-
   Juniper ≫ Mx480 Version-
   Juniper ≫ Mx5 Version-
   Juniper ≫ Mx80 Version-
   Juniper ≫ Mx960 Version-

Juniper ≫ Junos Version17.2 Updater1

Juniper ≫ Junos Version17.2 Updater1-s1

Juniper ≫ Junos Version17.2 Updater1-s2

Juniper ≫ Junos Version17.2 Updater1-s3

Juniper ≫ Junos Version17.2 Updater1-s4

Juniper ≫ Junos Version17.2 Updater1-s5

Juniper ≫ Junos Version17.2 Updater1-s7

Juniper ≫ Junos Version17.2 Updater1-s8

Juniper ≫ Junos Version17.2 Updater2

Juniper ≫ Junos Version17.2 Updater2-s11

Juniper ≫ Junos Version17.2 Updater2-s6

Juniper ≫ Junos Version17.2 Updater2-s7

Juniper ≫ Junos Version17.2 Updater3-s1

Juniper ≫ Junos Version17.2 Updater3-s2

Juniper ≫ Junos Version17.2 Updater3-s3

Juniper ≫ Junos Version17.2x75 Update-

Juniper ≫ Junos Version17.2x75 Updated102

Juniper ≫ Junos Version17.2x75 Updated50

Juniper ≫ Junos Version17.2x75 Updated70

Juniper ≫ Junos Version17.2x75 Updated92

Juniper ≫ Junos Version17.3 Update-

Juniper ≫ Junos Version17.3 Updater1-s1

Juniper ≫ Junos Version17.3 Updater2

Juniper ≫ Junos Version17.3 Updater2-s1

Juniper ≫ Junos Version17.3 Updater2-s2

Juniper ≫ Junos Version17.3 Updater2-s3

Juniper ≫ Junos Version17.3 Updater2-s4

Juniper ≫ Junos Version17.3 Updater3 Edition-

Juniper ≫ Junos Version17.3 Updater3-s1

Juniper ≫ Junos Version17.3 Updater3-s2

Juniper ≫ Junos Version17.3 Updater3-s3

Juniper ≫ Junos Version17.3 Updater3-s4

Juniper ≫ Junos Version17.4 Update-

Juniper ≫ Junos Version17.4 Updater1

Juniper ≫ Junos Version17.4 Updater1-s1

Juniper ≫ Junos Version17.4 Updater1-s2

Juniper ≫ Junos Version18.1 Update-

Juniper ≫ Junos Version18.1 Updater1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.45%	0.359

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.5	2.8	3.6	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	3.3	6.5	2.9	AV:A/AC:L/Au:N/C:N/I:N/A:P
sirt@juniper.net	6.5	2.8	3.6	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

https://kb.juniper.net/JSA11038

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-1651

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-1651

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-1651

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2020-1651