CVE-2020-1639: Junos OS: A crafted Ethernet OAM packet received by Junos may cause the Ethernet OAM connectivity fault management process (CFM) to core.
When an attacker sends a specific crafted Ethernet Operation, Administration, and Maintenance (Ethernet OAM) packet to a target device, it may improperly handle the incoming malformed data and fail to sanitize this incoming data resulting in an overflow condition. This overflow condition in Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) condition by coring the CFM daemon. Continued receipt of these packets may cause an extended Denial of Service condition. This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S15; 12.3X48 versions prior to 12.3X48-D95 on SRX Series; 14.1X50 versions prior to 14.1X50-D145; 14.1X53 versions prior to 14.1X53-D47; 15.1 versions prior to 15.1R2; 15.1X49 versions prior to 15.1X49-D170 on SRX Series; 15.1X53 versions prior to 15.1X53-D67.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Junos OSto a version that resolves this vulnerability.Fixed in 12.3R12-S15 - Upgrade
Upgrade
Junos OSto a version that resolves this vulnerability.Fixed in 12.3X48-D95 - Upgrade
Upgrade
Junos OSto a version that resolves this vulnerability.Fixed in 14.1X50-D145 - Upgrade
Upgrade
Junos OSto a version that resolves this vulnerability.Fixed in 14.1X53-D47 - Upgrade
Upgrade
Junos OSto a version that resolves this vulnerability.Fixed in 15.1R2 - Upgrade
Upgrade
Junos OSto a version that resolves this vulnerability.Fixed in 15.1X49-D170 - Upgrade
Upgrade
Junos OSto a version that resolves this vulnerability.Fixed in 16.1R1
Event History
Frequently Asked Questions
What is the severity of CVE-2020-1639?
The severity of CVE-2020-1639 is classified as high due to the potential for an attacker to exploit the vulnerability to cause an overflow condition.
How do I fix CVE-2020-1639?
To fix CVE-2020-1639, update the affected Juniper JUNOS versions to the latest patched versions provided by Juniper Networks.
Which versions of Juniper JUNOS are affected by CVE-2020-1639?
CVE-2020-1639 affects specific versions of Juniper JUNOS including 12.3, 14.1, and 15.1 along with various sub-releases.
What is the impact of CVE-2020-1639?
The impact of CVE-2020-1639 includes potential remote code execution or denial of service due to unhandled malformed Ethernet OAM packets.
Is there a workaround for CVE-2020-1639 until a patch is applied?
Currently, no official workaround is suggested for CVE-2020-1639, thus applying the recommended patch is essential for security.