CVE-2020-1664: Junos OS: Buffer overflow vulnerability in device control daemon
A stack buffer overflow vulnerability in the device control daemon (DCD) on Juniper Networks Junos OS allows a low privilege local user to create a Denial of Service (DoS) against the daemon or execute arbitrary code in the system with root privilege. This issue affects Juniper Networks Junos OS: 17.3 versions prior to 17.3R3-S9; 17.4 versions prior to 17.4R2-S12, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.2X75 versions prior to 18.2X75-D53, 18.2X75-D65; 18.3 versions prior to 18.3R2-S4, 18.3R3-S4; 18.4 versions prior to 18.4R2-S5, 18.4R3-S5; 19.1 versions prior to 19.1R3-S3; 19.2 versions prior to 19.2R1-S5, 19.2R3; 19.3 versions prior to 19.3R2-S4, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R1-S1, 20.2R2. Versions of Junos OS prior to 17.3 are unaffected by this vulnerability.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2020-1664?
CVE-2020-1664 is classified as a critical severity vulnerability due to its potential for remote exploitation and system compromise.
How do I fix CVE-2020-1664?
To mitigate CVE-2020-1664, users should upgrade to the fixed versions of Junos OS as recommended in the vendor's advisory.
Who is affected by CVE-2020-1664?
CVE-2020-1664 affects multiple versions of Junos OS, specifically those in the 17.3, 17.4, and 18.x series.
What type of attack is possible with CVE-2020-1664?
CVE-2020-1664 can be exploited by an attacker to execute arbitrary code with root privileges or cause a Denial of Service.
Is there a workaround for CVE-2020-1664?
No official workaround for CVE-2020-1664 is available; upgrading to a non-vulnerable version is the only recommended action.