Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2020-1629

Junos OS: A race condition vulnerability may cause RPD daemon to crash when processing a BGP NOTIFICATION message.

Description

A race condition vulnerability on Juniper Network Junos OS devices may cause the routing protocol daemon (RPD) process to crash and restart while processing a BGP NOTIFICATION message. This issue affects Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S6; 16.2 versions prior to 16.2R2-S11; 17.1 versions prior to 17.1R2-S11, 17.1R3-S1; 17.2 versions prior to 17.2R1-S9, 17.2R3-S3; 17.2 version 17.2R2 and later versions; 17.2X75 versions prior to 17.2X75-D105, 17.2X75-D110; 17.3 versions prior to 17.3R2-S5, 17.3R3-S6; 17.4 versions prior to 17.4R2-S7, 17.4R3; 18.1 versions prior to 18.1R3-S8; 18.2 versions prior to 18.2R3-S3; 18.2X75 versions prior to 18.2X75-D410, 18.2X75-D420, 18.2X75-D50, 18.2X75-D60; 18.3 versions prior to 18.3R1-S5, 18.3R2-S2, 18.3R3; 18.4 versions prior to 18.4R2-S2, 18.4R3; 19.1 versions prior to 19.1R1-S2, 19.1R2; 19.2 versions prior to 19.2R1-S4, 19.2R2. This issue does not affect Juniper Networks Junos OS prior to version 16.1R1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Juniper Networks Junos OS

  • 16.1 to < 16.1R7-S6affected
  • 16.2 to < 16.2R2-S11affected
  • 17.1 to < 17.1R2-S11, 17.1R3-S1affected
  • 17.2 to < 17.2R1-S9, 17.2R3-S3affected
  • 17.2X75 to < 17.2X75-D105, 17.2X75-D110affected
  • 17.3 to < 17.3R2-S5, 17.3R3-S6affected
  • 17.4 to < 17.4R2-S7, 17.4R3affected
  • 18.1 to < 18.1R3-S8affected
  • 18.2 to < 18.2R3-S3affected
  • 18.2X75 to < 18.2X75-D410, 18.2X75-D420, 18.2X75-D50, 18.2X75-D60affected
  • 18.3 to < 18.3R1-S5, 18.3R2-S2, 18.3R3affected
  • 18.4 to < 18.4R2-S2, 18.4R3affected
  • 19.1 to < 19.1R1-S2, 19.1R2affected
  • 19.2 to < 19.2R1-S4, 19.2R2affected

References