← Back

CVE-2020-1661

nvd nist
Published: Oct 16, 2020Modified: Nov 21, 2024

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Exploitability: 3.9 / Impact: 1.4
Source: sirt@juniper.net (Secondary)

Description

On Juniper Networks Junos OS devices configured as a DHCP forwarder, the Juniper Networks Dynamic Host Configuration Protocol Daemon (jdhcp) process might crash when receiving a malformed DHCP packet. This issue only affects devices configured as DHCP forwarder with forward-only option, that forward specified DHCP client packets, without creating a new subscriber session. The jdhcpd daemon automatically restarts without intervention, but continuous receipt of the malformed DHCP packet will repeatedly crash jdhcpd, leading to an extended Denial of Service (DoS) condition. This issue can be triggered only by DHCPv4, it cannot be triggered by DHCPv6. This issue affects Juniper Networks Junos OS: 12.3 versions prior to 12.3R12-S16; 12.3X48 versions prior to 12.3X48-D105 on SRX Series; 14.1X53 versions prior to 14.1X53-D60 on EX and QFX Series; 15.1 versions prior to 15.1R7-S7; 15.1X49 versions prior to 15.1X49-D221, 15.1X49-D230 on SRX Series; 15.1X53 versions prior to 15.1X53-D593 on EX2300/EX3400; 16.1 versions prior to 16.1R7-S5.

Affected (204)

Products: Juniper: Junos
1 product
Junos
Configuration A
88 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Version 12.3
Version 12.3 r10-s1
Version 12.3 r10-s2
Version 12.3 r10
Version 12.3 r11
Version 12.3 r12-s11
Version 12.3 r12-s12
Version 12.3 r12-s13
Version 12.3 r12-s14
Version 12.3 r12-s15
Version 12.3 r12-s1
Version 12.3 r12-s3
Version 12.3 r12-s4
Version 12.3 r12-s6
Version 12.3 r12-s8
Version 12.3 r12
Version 12.3 r1
Version 12.3 r2
Version 12.3 r3
Version 12.3 r4
Version 12.3 r5
Version 12.3 r6
Version 12.3 r7
Version 12.3 r8
Version 12.3 r9
Version 15.1
Version 15.1 a1
Version 15.1 f1
Version 15.1 f2-s1
Version 15.1 f2-s2
Version 15.1 f2-s3
Version 15.1 f2-s4
Version 15.1 f2
Version 15.1 f3
Version 15.1 f4
Version 15.1 f5-s7
Version 15.1 f5
Version 15.1 f6-s12
Version 15.1 f6-s1
Version 15.1 f6-s2
Version 15.1 f6-s3
Version 15.1 f6-s4
Version 15.1 f6-s7
Version 15.1 f6
Version 15.1 f7
Version 15.1 f
Version 15.1 r1
Version 15.1 r2
Version 15.1 r3
Version 15.1 r4-s7
Version 15.1 r4-s8
Version 15.1 r4-s9
Version 15.1 r4
Version 15.1 r5-s1
Version 15.1 r5-s5
Version 15.1 r5-s6
Version 15.1 r5
Version 15.1 r6-s1
Version 15.1 r6-s2
Version 15.1 r6-s6
Version 15.1 r6
Version 15.1 r7-s1
Version 15.1 r7-s2
Version 15.1 r7-s3
Version 15.1 r7-s4
Version 15.1 r7-s5
Version 15.1 r7-s6
Version 15.1 r7
Version 16.1
Version 16.1 r1
Version 16.1 r2
Version 16.1 r3-s10
Version 16.1 r3-s11
Version 16.1 r3
Version 16.1 r4-s12
Version 16.1 r4-s2
Version 16.1 r4-s3
Version 16.1 r4-s4
Version 16.1 r4-s6
Version 16.1 r4
Version 16.1 r5-s4
Version 16.1 r5
Version 16.1 r6-s1
Version 16.1 r6-s6
Version 16.1 r7-s2
Version 16.1 r7-s3
Version 16.1 r7-s4
Version 16.1 r7
Configuration B
49 vulnerable · 13 platform
Vulnerable SoftwareAffected Versions
Juniper
Version 12.3x48
Version 12.3x48 d100
Version 12.3x48 d10
Version 12.3x48 d15
Version 12.3x48 d20
Version 12.3x48 d25
Version 12.3x48 d30
Version 12.3x48 d35
Version 12.3x48 d40
Version 12.3x48 d45
Version 12.3x48 d50
Version 12.3x48 d51
Version 12.3x48 d55
Version 12.3x48 d60
Version 12.3x48 d65
Version 12.3x48 d70
Version 12.3x48 d75
Version 12.3x48 d80
Version 12.3x48 d90
Version 12.3x48 d95
Version 15.1x49
Version 15.1x49 d100
Version 15.1x49 d10
Version 15.1x49 d110
Version 15.1x49 d120
Version 15.1x49 d130
Version 15.1x49 d140
Version 15.1x49 d150
Version 15.1x49 d15
Version 15.1x49 d160
Version 15.1x49 d170
Version 15.1x49 d180
Version 15.1x49 d190
Version 15.1x49 d200
Version 15.1x49 d20
Version 15.1x49 d210
Version 15.1x49 d25
Version 15.1x49 d30
Version 15.1x49 d35
Version 15.1x49 d40
Version 15.1x49 d45
Version 15.1x49 d50
Version 15.1x49 d55
Version 15.1x49 d60
Version 15.1x49 d65
Version 15.1x49 d70
Version 15.1x49 d75
Version 15.1x49 d80
Version 15.1x49 d90
Running on/withPlatform Versions
Juniper
Srx1500
All versions
Juniper
Srx300
All versions
Juniper
Srx320
All versions
Juniper
Srx340
All versions
Juniper
Srx345
All versions
Juniper
Srx380
All versions
Juniper
Srx4100
All versions
Juniper
Srx4200
All versions
Juniper
Srx4600
All versions
Juniper
Srx5400
All versions
Juniper
Srx550
All versions
Juniper
Srx5600
All versions
Juniper
Srx5800
All versions
Configuration C
47 vulnerable
Vulnerable SoftwareAffected Versions
Juniper
Version 15.1x53
Version 15.1x53 d10
Version 15.1x53 d20
Version 15.1x53 d210
Version 15.1x53 d21
Version 15.1x53 d230
Version 15.1x53 d231
Version 15.1x53 d232
Version 15.1x53 d233
Version 15.1x53 d234
Version 15.1x53 d235
Version 15.1x53 d236
Version 15.1x53 d237
Version 15.1x53 d25
Version 15.1x53 d30
Version 15.1x53 d31
Version 15.1x53 d32
Version 15.1x53 d33
Version 15.1x53 d34
Version 15.1x53 d40
Version 15.1x53 d45
Version 15.1x53 d470
Version 15.1x53 d47
Version 15.1x53 d48
Version 15.1x53 d495
Version 15.1x53 d50
Version 15.1x53 d51
Version 15.1x53 d52
Version 15.1x53 d55
Version 15.1x53 d56
Version 15.1x53 d57
Version 15.1x53 d58
Version 15.1x53 d590
Version 15.1x53 d591
Version 15.1x53 d592
Version 15.1x53 d59
Version 15.1x53 d60
Version 15.1x53 d61
Version 15.1x53 d62
Version 15.1x53 d63
Version 15.1x53 d64
Version 15.1x53 d65
Version 15.1x53 d66
Version 15.1x53 d67
Version 15.1x53 d68
Version 15.1x53 d69
Version 15.1x53 d70
Configuration D
20 vulnerable · 18 platform
Vulnerable SoftwareAffected Versions
Juniper
Version 14.1x53
Version 14.1x53 d10
Version 14.1x53 d15
Version 14.1x53 d16
Version 14.1x53 d25
Version 14.1x53 d26
Version 14.1x53 d27
Version 14.1x53 d30
Version 14.1x53 d34
Version 14.1x53 d35
Version 14.1x53 d40
Version 14.1x53 d42
Version 14.1x53 d43
Version 14.1x53 d44
Version 14.1x53 d45
Version 14.1x53 d48
Version 14.1x53 d50
Version 14.1x53 d51
Version 14.1x53 d52
Version 14.1x53 d53
Running on/withPlatform Versions
Juniper
Ex2300
All versions
Juniper
Ex2300 C
All versions
Juniper
Ex3400
All versions
Juniper
Ex4300
All versions
Juniper
Ex4600
All versions
Juniper
Ex4650
All versions
Juniper
Ex9200
All versions
Juniper
Ex9250
All versions
Juniper
Qfx10002
All versions
Juniper
Qfx10008
All versions
Juniper
Qfx10016
All versions
Juniper
Qfx5100
All versions
Juniper
Qfx5110
All versions
Juniper
Qfx5120
All versions
Juniper
Qfx5130
All versions
Juniper
Qfx5200
All versions
Juniper
Qfx5210
All versions
Juniper
Qfx5220
All versions

References (2)

Source: sirt@juniper.net
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.