CVE-2020-1613: Junos OS: BGP session termination upon receipt of specific BGP FlowSpec advertisement.

Published Apr 8, 2020
·
Updated

A vulnerability in the BGP FlowSpec implementation may cause a Juniper Networks Junos OS device to terminate an established BGP session upon receiving a specific BGP FlowSpec advertisement. The BGP NOTIFICATION message that terminates an established BGP session is sent toward the peer device that originally sent the specific BGP FlowSpec advertisement. This specific BGP FlowSpec advertisement received from a BGP peer might get propagated from a Junos OS device running the fixed release to another device that is vulnerable causing BGP session termination downstream. This issue affects IPv4 and IPv6 BGP FlowSpec deployment. This issue affects Juniper Networks Junos OS: 12.3; 12.3X48 on SRX Series; 14.1X53 on EX and QFX Series; 15.1 versions prior to 15.1R7-S5; 15.1F versions prior to 15.1F6-S13; 15.1X49 versions prior to 15.1X49-D180 on SRX Series; 15.1X53 versions prior to 15.1X53-D238 on QFX5200/QFX5110; 15.1X53 versions prior to 15.1X53-D497 on NFX Series; 15.1X53 versions prior to 15.1X53-D592 on EX2300/EX3400; 16.1 versions prior to 16.1R7-S7; 17.1 versions prior to 17.1R2-S12, 17.1R3; 17.2 versions prior to 17.2R2-S7, 17.2R3; 17.2X75 versions prior to 17.2X75-D102, 17.2X75-D110, 17.2X75-D44; 17.3 versions prior to 17.3R2-S5, 17.3R3-S5; 17.4 versions prior to 17.4R1-S8, 17.4R2; 18.1 versions prior to 18.1R2-S4, 18.1R3; 18.2X75 versions prior to 18.2X75-D20.

Affected Software

469 affected components
Juniper Junos=12.3
Juniper Junos=15.1
Juniper Junos=15.1-f
Juniper Junos=15.1-f1
Juniper Junos=15.1-f2
Juniper Junos=15.1-f2-s1
Juniper Junos=15.1-f2-s2
Juniper Junos=15.1-f2-s3
Juniper Junos=15.1-f2-s4
Juniper Junos=15.1-f3
Juniper Junos=15.1-f4
Juniper Junos=15.1-f5
Juniper Junos=15.1-f5-s7
Juniper Junos=15.1-f6
Juniper Junos=15.1-f6-s1
Juniper Junos=15.1-f6-s12
Juniper Junos=15.1-f6-s2
Juniper Junos=15.1-f6-s3
Juniper Junos=15.1-f6-s4
Juniper Junos=15.1-f6-s7
Juniper Junos=15.1-f7
Juniper Junos=15.1-r1
Juniper Junos=15.1-r2
Juniper Junos=15.1-r3
Juniper Junos=15.1-r4
Juniper Junos=15.1-r4-s7
Juniper Junos=15.1-r4-s8
Juniper Junos=15.1-r4-s9
Juniper Junos=15.1-r5
Juniper Junos=15.1-r5-s1
Juniper Junos=15.1-r5-s5
Juniper Junos=15.1-r5-s6
Juniper Junos=15.1-r6
Juniper Junos=15.1-r6-s1
Juniper Junos=15.1-r6-s2
Juniper Junos=15.1-r6-s6
Juniper Junos=15.1-r7
Juniper Junos=15.1-r7-s1
Juniper Junos=15.1-r7-s2
Juniper Junos=15.1-r7-s3
Juniper Junos=15.1-r7-s4
Juniper Junos=16.1
Juniper Junos=16.1-r1
Juniper Junos=16.1-r2
Juniper Junos=16.1-r3
Juniper Junos=16.1-r3-s10
Juniper Junos=16.1-r3-s11
Juniper Junos=16.1-r4
Juniper Junos=16.1-r4-s12
Juniper Junos=16.1-r4-s2
Juniper Junos=16.1-r4-s3
Juniper Junos=16.1-r4-s4
Juniper Junos=16.1-r4-s6
Juniper Junos=16.1-r5
Juniper Junos=16.1-r5-s4
Juniper Junos=16.1-r6-s1
Juniper Junos=16.1-r6-s6
Juniper Junos=16.1-r7
Juniper Junos=16.1-r7-s2
Juniper Junos=16.1-r7-s3
Juniper Junos=16.1-r7-s4
Juniper Junos=16.1-r7-s5
Juniper Junos=17.1
Juniper Junos=17.1-r1
Juniper Junos=17.1-r2
Juniper Junos=17.1-r2-s1
Juniper Junos=17.1-r2-s10
Juniper Junos=17.1-r2-s11
Juniper Junos=17.1-r2-s2
Juniper Junos=17.1-r2-s3
Juniper Junos=17.1-r2-s4
Juniper Junos=17.1-r2-s5
Juniper Junos=17.1-r2-s6
Juniper Junos=17.1-r2-s7
Juniper Junos=17.1-r2-s8
Juniper Junos=17.1-r2-s9
Juniper Junos=17.1-r3
Juniper Junos=17.2
Juniper Junos=17.2-r1
Juniper Junos=17.2-r1-s1
Juniper Junos=17.2-r1-s2
Juniper Junos=17.2-r1-s3
Juniper Junos=17.2-r1-s4
Juniper Junos=17.2-r1-s5
Juniper Junos=17.2-r1-s7
Juniper Junos=17.2-r1-s8
Juniper Junos=17.2-r2
Juniper Junos=17.2-r2-s10
Juniper Junos=17.2-r2-s11
Juniper Junos=17.2-r2-s6
Juniper Junos=17.2-r2-s7
Juniper Junos=17.2-r2-s9
Juniper Junos=17.2x75
Juniper Junos=17.2x75-d50
Juniper Junos=17.2x75-d70
Juniper Junos=17.2x75-d92
Juniper Junos=17.3
Juniper Junos=17.3-r1-s1
Juniper Junos=17.3-r2
Juniper Junos=17.3-r2-s1
Juniper Junos=17.3-r2-s2
Juniper Junos=17.3-r2-s3
Juniper Junos=17.3-r2-s4
Juniper Junos=17.3-r3
Juniper Junos=17.3-r3-s1
Juniper Junos=17.3-r3-s2
Juniper Junos=17.3-r3-s3
Juniper Junos=17.3-r3-s4
Juniper Junos=17.4
Juniper Junos=17.4-r1
Juniper Junos=17.4-r1-s1
Juniper Junos=17.4-r1-s2
Juniper Junos=17.4-r1-s4
Juniper Junos=17.4-r1-s5
Juniper Junos=17.4-r1-s6
Juniper Junos=17.4-r1-s7
Juniper Junos=18.1
Juniper Junos=18.1-r2
Juniper Junos=18.1-r2-s1
Juniper Junos=18.1-r2-s2
Juniper Junos=18.2x75
Juniper Junos=18.2x75-d10
Juniper Junos=12.3x48-d10
Juniper Junos=15.1x49
Juniper Junos=15.1x49-d10
Juniper Junos=15.1x49-d100
Juniper Junos=15.1x49-d110
Juniper Junos=15.1x49-d120
Juniper Junos=15.1x49-d130
Juniper Junos=15.1x49-d140
Juniper Junos=15.1x49-d15
Juniper Junos=15.1x49-d150
Juniper Junos=15.1x49-d160
Juniper Junos=15.1x49-d170
Juniper Junos=15.1x49-d20
Juniper Junos=15.1x49-d25
Juniper Junos=15.1x49-d30
Juniper Junos=15.1x49-d35
Juniper Junos=15.1x49-d40
Juniper Junos=15.1x49-d45
Juniper Junos=15.1x49-d50
Juniper Junos=15.1x49-d55
Juniper Junos=15.1x49-d60
Juniper Junos=15.1x49-d65
Juniper Junos=15.1x49-d70
Juniper Junos=15.1x49-d75
Juniper Junos=15.1x49-d80
Juniper Junos=15.1x49-d90
Juniper SRX100
Juniper SRX110
Juniper SRX1400
Juniper SRX1500
Juniper SRX210
Juniper SRX220
Juniper SRX240
Juniper SRX300
Juniper SRX320
Juniper SRX340
Juniper SRX3400
Juniper SRX345
Juniper SRX3600
Juniper SRX4100
Juniper SRX4200
Juniper SRX4600
Juniper SRX5400
Juniper SRX550
Juniper SRX5600
Juniper SRX5800
Juniper SRX650
Juniper Junos=14.1x53
Juniper EX2300
Juniper EX2300-C
Juniper EX3400
Juniper EX4300
Juniper EX4600
Juniper EX4650
Juniper EX9200
Juniper Ex9250
Juniper QFX10002
Juniper QFX10008
Juniper QFX10016
Juniper Qfx3000-g
Juniper Qfx3000-m
Juniper Qfx3008-i
Juniper Qfx3100
Juniper QFX3500
Juniper QFX3600
Juniper Qfx3600-i
Juniper QFX5100
Juniper QFX5110
Juniper QFX5200
Juniper QFX5210
Juniper Junos=15.1x53
Juniper Junos=15.1x53-d10
Juniper Junos=15.1x53-d20
Juniper Junos=15.1x53-d21
Juniper Junos=15.1x53-d210
Juniper Junos=15.1x53-d230
Juniper Junos=15.1x53-d231
Juniper Junos=15.1x53-d232
Juniper Junos=15.1x53-d233
Juniper Junos=15.1x53-d234
Juniper Junos=15.1x53-d235
Juniper Junos=15.1x53-d236
Juniper Junos=15.1x53-d237
Juniper Junos=15.1x53-d25
Juniper Junos=15.1x53-d30
Juniper Junos=15.1x53-d31
Juniper Junos=15.1x53-d32
Juniper Junos=15.1x53-d33
Juniper Junos=15.1x53-d34
Juniper Junos=15.1x53-d40
Juniper Junos=15.1x53-d45
Juniper Junos=15.1x53-d47
Juniper Junos=15.1x53-d48
Juniper Junos=15.1x53-d50
Juniper Junos=15.1x53-d51
Juniper Junos=15.1x53-d52
Juniper Junos=15.1x53-d55
Juniper Junos=15.1x53-d56
Juniper Junos=15.1x53-d57
Juniper Junos=15.1x53-d58
Juniper Junos=15.1x53-d59
Juniper Junos=15.1x53-d60
Juniper Junos=15.1x53-d61
Juniper Junos=15.1x53-d62
Juniper Junos=15.1x53-d63
Juniper Junos=15.1x53-d64
Juniper Junos=15.1x53-d65
Juniper Junos=15.1x53-d66
Juniper Junos=15.1x53-d67
Juniper Junos=15.1x53-d68
Juniper Junos=15.1x53-d69
Juniper Junos=15.1x53-d70
Juniper Junos=15.1x53-d470
Juniper Junos=15.1x53-d495
Juniper Junos=15.1x53-d50
Juniper Junos=15.1x53-d51
Juniper Junos=15.1x53-d52
Juniper Junos=15.1x53-d55
Juniper Junos=15.1x53-d57
Juniper Junos=15.1x53-d58
Juniper Junos=15.1x53-d59
Juniper NFX150
Juniper NFX250
Juniper Junos=15.1x53-d590
Juniper Junos=15.1x53-d591
All of the following
Any of the following
Juniper Junos=12.3x48-d10
Juniper Junos=15.1x49
Juniper Junos=15.1x49-d10
Juniper Junos=15.1x49-d100
Juniper Junos=15.1x49-d110
Juniper Junos=15.1x49-d120
Juniper Junos=15.1x49-d130
Juniper Junos=15.1x49-d140
Juniper Junos=15.1x49-d15
Juniper Junos=15.1x49-d150
Juniper Junos=15.1x49-d160
Juniper Junos=15.1x49-d170
Juniper Junos=15.1x49-d20
Juniper Junos=15.1x49-d25
Juniper Junos=15.1x49-d30
Juniper Junos=15.1x49-d35
Juniper Junos=15.1x49-d40
Juniper Junos=15.1x49-d45
Juniper Junos=15.1x49-d50
Juniper Junos=15.1x49-d55
Juniper Junos=15.1x49-d60
Juniper Junos=15.1x49-d65
Juniper Junos=15.1x49-d70
Juniper Junos=15.1x49-d75
Juniper Junos=15.1x49-d80
Juniper Junos=15.1x49-d90
Any of the following
Juniper SRX100
Juniper SRX110
Juniper SRX1400
Juniper SRX1500
Juniper SRX210
Juniper SRX220
Juniper SRX240
Juniper SRX300
Juniper SRX320
Juniper SRX340
Juniper SRX3400
Juniper SRX345
Juniper SRX3600
Juniper SRX4100
Juniper SRX4200
Juniper SRX4600
Juniper SRX5400
Juniper SRX550
Juniper SRX5600
Juniper SRX5800
Juniper SRX650
All of the following
Juniper Junos=14.1x53
Any of the following
Juniper EX2300
Juniper EX2300-C
Juniper EX3400
Juniper EX4300
Juniper EX4600
Juniper EX4650
Juniper EX9200
Juniper Ex9250
Juniper QFX10002
Juniper QFX10008
Juniper QFX10016
Juniper Qfx3000-g
Juniper Qfx3000-m
Juniper Qfx3008-i
Juniper Qfx3100
Juniper QFX3500
Juniper QFX3600
Juniper Qfx3600-i
Juniper QFX5100
Juniper QFX5110
Juniper QFX5200
Juniper QFX5210
All of the following
Any of the following
Juniper Junos=15.1x53
Juniper Junos=15.1x53-d10
Juniper Junos=15.1x53-d20
Juniper Junos=15.1x53-d21
Juniper Junos=15.1x53-d210
Juniper Junos=15.1x53-d230
Juniper Junos=15.1x53-d231
Juniper Junos=15.1x53-d232
Juniper Junos=15.1x53-d233
Juniper Junos=15.1x53-d234
Juniper Junos=15.1x53-d235
Juniper Junos=15.1x53-d236
Juniper Junos=15.1x53-d237
Juniper Junos=15.1x53-d25
Juniper Junos=15.1x53-d30
Juniper Junos=15.1x53-d31
Juniper Junos=15.1x53-d32
Juniper Junos=15.1x53-d33
Juniper Junos=15.1x53-d34
Juniper Junos=15.1x53-d40
Juniper Junos=15.1x53-d45
Juniper Junos=15.1x53-d47
Juniper Junos=15.1x53-d48
Juniper Junos=15.1x53-d50
Juniper Junos=15.1x53-d51
Juniper Junos=15.1x53-d52
Juniper Junos=15.1x53-d55
Juniper Junos=15.1x53-d56
Juniper Junos=15.1x53-d57
Juniper Junos=15.1x53-d58
Juniper Junos=15.1x53-d59
Juniper Junos=15.1x53-d60
Juniper Junos=15.1x53-d61
Juniper Junos=15.1x53-d62
Juniper Junos=15.1x53-d63
Juniper Junos=15.1x53-d64
Juniper Junos=15.1x53-d65
Juniper Junos=15.1x53-d66
Juniper Junos=15.1x53-d67
Juniper Junos=15.1x53-d68
Juniper Junos=15.1x53-d69
Juniper Junos=15.1x53-d70
Any of the following
Juniper QFX5110
Juniper QFX5200
All of the following
Any of the following
Juniper Junos=15.1x53
Juniper Junos=15.1x53-d10
Juniper Junos=15.1x53-d20
Juniper Junos=15.1x53-d21
Juniper Junos=15.1x53-d210
Juniper Junos=15.1x53-d230
Juniper Junos=15.1x53-d231
Juniper Junos=15.1x53-d232
Juniper Junos=15.1x53-d233
Juniper Junos=15.1x53-d234
Juniper Junos=15.1x53-d235
Juniper Junos=15.1x53-d236
Juniper Junos=15.1x53-d237
Juniper Junos=15.1x53-d25
Juniper Junos=15.1x53-d30
Juniper Junos=15.1x53-d31
Juniper Junos=15.1x53-d32
Juniper Junos=15.1x53-d33
Juniper Junos=15.1x53-d34
Juniper Junos=15.1x53-d40
Juniper Junos=15.1x53-d45
Juniper Junos=15.1x53-d47
Juniper Junos=15.1x53-d470
Juniper Junos=15.1x53-d48
Juniper Junos=15.1x53-d495
Juniper Junos=15.1x53-d50
Juniper Junos=15.1x53-d51
Juniper Junos=15.1x53-d52
Juniper Junos=15.1x53-d55
Juniper Junos=15.1x53-d56
Juniper Junos=15.1x53-d57
Juniper Junos=15.1x53-d58
Juniper Junos=15.1x53-d59
Juniper Junos=15.1x53-d60
Juniper Junos=15.1x53-d61
Juniper Junos=15.1x53-d62
Juniper Junos=15.1x53-d63
Juniper Junos=15.1x53-d64
Juniper Junos=15.1x53-d65
Juniper Junos=15.1x53-d66
Juniper Junos=15.1x53-d67
Juniper Junos=15.1x53-d68
Juniper Junos=15.1x53-d69
Juniper Junos=15.1x53-d70
Juniper Junos=15.1x53-d50
Juniper Junos=15.1x53-d51
Juniper Junos=15.1x53-d52
Juniper Junos=15.1x53-d55
Juniper Junos=15.1x53-d57
Juniper Junos=15.1x53-d58
Juniper Junos=15.1x53-d59
Any of the following
Juniper NFX150
Juniper NFX250
All of the following
Any of the following
Juniper Junos=15.1x53
Juniper Junos=15.1x53-d10
Juniper Junos=15.1x53-d20
Juniper Junos=15.1x53-d21
Juniper Junos=15.1x53-d210
Juniper Junos=15.1x53-d230
Juniper Junos=15.1x53-d231
Juniper Junos=15.1x53-d232
Juniper Junos=15.1x53-d233
Juniper Junos=15.1x53-d234
Juniper Junos=15.1x53-d235
Juniper Junos=15.1x53-d236
Juniper Junos=15.1x53-d237
Juniper Junos=15.1x53-d25
Juniper Junos=15.1x53-d30
Juniper Junos=15.1x53-d31
Juniper Junos=15.1x53-d32
Juniper Junos=15.1x53-d33
Juniper Junos=15.1x53-d34
Juniper Junos=15.1x53-d40
Juniper Junos=15.1x53-d45
Juniper Junos=15.1x53-d47
Juniper Junos=15.1x53-d470
Juniper Junos=15.1x53-d48
Juniper Junos=15.1x53-d495
Juniper Junos=15.1x53-d50
Juniper Junos=15.1x53-d51
Juniper Junos=15.1x53-d52
Juniper Junos=15.1x53-d55
Juniper Junos=15.1x53-d56
Juniper Junos=15.1x53-d57
Juniper Junos=15.1x53-d58
Juniper Junos=15.1x53-d59
Juniper Junos=15.1x53-d590
Juniper Junos=15.1x53-d591
Juniper Junos=15.1x53-d60
Juniper Junos=15.1x53-d61
Juniper Junos=15.1x53-d62
Juniper Junos=15.1x53-d63
Juniper Junos=15.1x53-d64
Juniper Junos=15.1x53-d65
Juniper Junos=15.1x53-d66
Juniper Junos=15.1x53-d67
Juniper Junos=15.1x53-d68
Juniper Junos=15.1x53-d69
Juniper Junos=15.1x53-d70
Juniper Junos=15.1x53-d50
Juniper Junos=15.1x53-d51
Juniper Junos=15.1x53-d52
Juniper Junos=15.1x53-d55
Juniper Junos=15.1x53-d57
Juniper Junos=15.1x53-d58
Juniper Junos=15.1x53-d59
Any of the following
Juniper EX2300
Juniper EX3400

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.

    Fixed in 15.1R7-S5
  2. Upgrade

    Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.

    Fixed in 15.1F6-S13
  3. Upgrade

    Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.

    Fixed in 15.1X49-D180
  4. Upgrade

    Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.

    Fixed in 15.1X53-D238
  5. Upgrade

    Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.

    Fixed in 15.1X53-D497
  6. Upgrade

    Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.

    Fixed in 15.1X53-D592
  7. Upgrade

    Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.

    Fixed in 16.1R7-S7
  8. Upgrade

    Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.

    Fixed in 17.1R3
  9. Upgrade

    Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.

    Fixed in 17.2R2-S7
  10. Upgrade

    Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.

    Fixed in 17.2R3
  11. Upgrade

    Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.

    Fixed in 17.2X75-D102
  12. Upgrade

    Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.

    Fixed in 17.2X75-D110
  13. Upgrade

    Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.

    Fixed in 17.3R3-S5
  14. Upgrade

    Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.

    Fixed in 17.4R1-S8
  15. Upgrade

    Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.

    Fixed in 17.4R2
  16. Upgrade

    Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.

    Fixed in 18.1R2-S4
  17. Upgrade

    Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.

    Fixed in 18.1R3
  18. Upgrade

    Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.

    Fixed in 18.2X75-D20
  19. Upgrade

    Upgrade Juniper Networks Junos OS to a version that resolves this vulnerability.

    Fixed in 18.2R1

Event History

Apr 8, 2020
CVE Published
via MITRE·07:25 PM
Data Sourced
via MITRE·07:25 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2020-1613?

CVE-2020-1613 has been rated as a high severity vulnerability.

2

How do I fix CVE-2020-1613?

To address CVE-2020-1613, apply the appropriate Junos OS updates available from Juniper Networks.

3

Which devices are affected by CVE-2020-1613?

CVE-2020-1613 affects several versions of Juniper's Junos OS, including 12.3, 15.1, and 16.1.

4

What could happen if CVE-2020-1613 is exploited?

If exploited, CVE-2020-1613 can cause a Juniper Networks device to terminate established BGP sessions, disrupting communication.

5

Is there a known workaround for CVE-2020-1613?

Currently, there is no specific workaround for CVE-2020-1613 other than updating to a fixed version of Junos OS.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203