Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2020-1664

Junos OS: Buffer overflow vulnerability in device control daemon

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
juniper

Description

A stack buffer overflow vulnerability in the device control daemon (DCD) on Juniper Networks Junos OS allows a low privilege local user to create a Denial of Service (DoS) against the daemon or execute arbitrary code in the system with root privilege. This issue affects Juniper Networks Junos OS: 17.3 versions prior to 17.3R3-S9; 17.4 versions prior to 17.4R2-S12, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.2X75 versions prior to 18.2X75-D53, 18.2X75-D65; 18.3 versions prior to 18.3R2-S4, 18.3R3-S4; 18.4 versions prior to 18.4R2-S5, 18.4R3-S5; 19.1 versions prior to 19.1R3-S3; 19.2 versions prior to 19.2R1-S5, 19.2R3; 19.3 versions prior to 19.3R2-S4, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R1-S1, 20.2R2. Versions of Junos OS prior to 17.3 are unaffected by this vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Juniper Networks Junos OS

  • 17.3 to < 17.3R3-S9affected
  • 17.4 to < 17.4R2-S12, 17.4R3-S3affected
  • 18.1 to < 18.1R3-S11affected
  • 18.2 to < 18.2R3-S6affected
  • 18.2X75 to < 18.2X75-D53, 18.2X75-D65affected
  • 18.3 to < 18.3R2-S4, 18.3R3-S4affected
  • 18.4 to < 18.4R2-S5, 18.4R3-S5affected
  • 19.1 to < 19.1R3-S3affected
  • 19.2 to < 19.2R1-S5, 19.2R3affected
  • 19.3 to < 19.3R2-S4, 19.3R3affected
  • 19.4 to < 19.4R1-S3, 19.4R2-S2, 19.4R3affected
  • 20.1 to < 20.1R1-S4, 20.1R2affected
  • 20.2 to < 20.2R1-S1, 20.2R2affected

References