CVE-2020-1670: Junos OS: EX4300 Series: High CPU load due to receipt of specific IPv4 packets

Published Oct 16, 2020

Updated

On Juniper Networks EX4300 Series, receipt of a stream of specific IPv4 packets can cause Routing Engine (RE) high CPU load, which could lead to network protocol operation issue and traffic interruption. This specific packets can originate only from within the broadcast domain where the device is connected. This issue occurs when the packets enter to the IRB interface. Only IPv4 packets can trigger this issue. IPv6 packets cannot trigger this issue. This issue affects Juniper Networks Junos OS on EX4300 series: 17.3 versions prior to 17.3R3-S9; 17.4 versions prior to 17.4R2-S11, 17.4R3-S2; 18.1 versions prior to 18.1R3-S10; 18.2 versions prior to 18.2R3-S4; 18.3 versions prior to 18.3R2-S4, 18.3R3-S2; 18.4 versions prior to 18.4R2-S4, 18.4R3-S2; 19.1 versions prior to 19.1R2-S2, 19.1R3-S1; 19.2 versions prior to 19.2R1-S5, 19.2R2-S1, 19.2R3; 19.3 versions prior to 19.3R2-S4, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2; 20.1 versions prior to 20.1R1-S3, 20.1R2.

Affected Software

121 affected components

Juniper JUNOS=17.3

Juniper JUNOS=17.3-r1-s1

Juniper JUNOS=17.3-r2

Juniper JUNOS=17.3-r2-s1

Juniper JUNOS=17.3-r2-s2

Juniper JUNOS=17.3-r2-s3

Juniper JUNOS=17.3-r2-s4

Juniper JUNOS=17.3-r2-s5

Juniper JUNOS=17.3-r3

Juniper JUNOS=17.3-r3-s1

Juniper JUNOS=17.3-r3-s2

Juniper JUNOS=17.3-r3-s3

Juniper JUNOS=17.3-r3-s4

Juniper JUNOS=17.3-r3-s7

Juniper JUNOS=17.3-r3-s8

Juniper JUNOS=17.4

Juniper JUNOS=17.4-r1

Juniper JUNOS=17.4-r1-s1

Juniper JUNOS=17.4-r1-s2

Juniper JUNOS=17.4-r1-s4

Juniper JUNOS=17.4-r1-s5

Juniper JUNOS=17.4-r1-s6

Juniper JUNOS=17.4-r1-s7

Juniper JUNOS=17.4-r2

Juniper JUNOS=17.4-r2-s1

Juniper JUNOS=17.4-r2-s10

Juniper JUNOS=17.4-r2-s2

Juniper JUNOS=17.4-r2-s3

Juniper JUNOS=17.4-r2-s4

Juniper JUNOS=17.4-r2-s5

Juniper JUNOS=17.4-r2-s6

Juniper JUNOS=17.4-r2-s7

Juniper JUNOS=17.4-r2-s8

Juniper JUNOS=17.4-r2-s9

Juniper JUNOS=18.1

Juniper JUNOS=18.1-r1

Juniper JUNOS=18.1-r2

Juniper JUNOS=18.1-r2-s1

Juniper JUNOS=18.1-r2-s2

Juniper JUNOS=18.1-r2-s4

Juniper JUNOS=18.1-r3

Juniper JUNOS=18.1-r3-s1

Juniper JUNOS=18.1-r3-s2

Juniper JUNOS=18.1-r3-s3

Juniper JUNOS=18.1-r3-s4

Juniper JUNOS=18.1-r3-s6

Juniper JUNOS=18.1-r3-s7

Juniper JUNOS=18.1-r3-s8

Juniper JUNOS=18.1-r3-s9

Juniper JUNOS=18.2

Juniper JUNOS=18.2-r1

Juniper JUNOS=18.2-r1-s3

Juniper JUNOS=18.2-r1-s4

Juniper JUNOS=18.2-r1-s5

Juniper JUNOS=18.2-r2

Juniper JUNOS=18.2-r2-s1

Juniper JUNOS=18.2-r2-s2

Juniper JUNOS=18.2-r2-s3

Juniper JUNOS=18.2-r2-s4

Juniper JUNOS=18.2-r2-s5

Juniper JUNOS=18.2-r2-s6

Juniper JUNOS=18.2-r3

Juniper JUNOS=18.2-r3-s1

Juniper JUNOS=18.2-r3-s2

Juniper JUNOS=18.2-r3-s3

Juniper JUNOS=18.3

Juniper JUNOS=18.3-r1

Juniper JUNOS=18.3-r1-s1

Juniper JUNOS=18.3-r1-s2

Juniper JUNOS=18.3-r1-s3

Juniper JUNOS=18.3-r1-s5

Juniper JUNOS=18.3-r1-s6

Juniper JUNOS=18.3-r2

Juniper JUNOS=18.3-r2-s1

Juniper JUNOS=18.3-r2-s2

Juniper JUNOS=18.3-r2-s3

Juniper JUNOS=18.3-r3

Juniper JUNOS=18.3-r3-s1

Juniper JUNOS=18.4

Juniper JUNOS=18.4-r1

Juniper JUNOS=18.4-r1-s1

Juniper JUNOS=18.4-r1-s2

Juniper JUNOS=18.4-r1-s5

Juniper JUNOS=18.4-r1-s6

Juniper JUNOS=18.4-r2

Juniper JUNOS=18.4-r2-s1

Juniper JUNOS=18.4-r2-s2

Juniper JUNOS=18.4-r2-s3

Juniper JUNOS=18.4-r3

Juniper JUNOS=18.4-r3-s1

Juniper JUNOS=19.1

Juniper JUNOS=19.1-r1

Juniper JUNOS=19.1-r1-s1

Juniper JUNOS=19.1-r1-s2

Juniper JUNOS=19.1-r1-s3

Juniper JUNOS=19.1-r1-s4

Juniper JUNOS=19.1-r2

Juniper JUNOS=19.1-r2-s1

Juniper JUNOS=19.1-r3

Juniper JUNOS=19.2

Juniper JUNOS=19.2-r1

Juniper JUNOS=19.2-r1-s1

Juniper JUNOS=19.2-r1-s2

Juniper JUNOS=19.2-r1-s3

Juniper JUNOS=19.2-r1-s4

Juniper JUNOS=19.2-r2

Juniper JUNOS=19.3

Juniper JUNOS=19.3-r1

Juniper JUNOS=19.3-r1-s1

Juniper JUNOS=19.3-r2

Juniper JUNOS=19.3-r2-s1

Juniper JUNOS=19.3-r2-s2

Juniper JUNOS=19.3-r2-s3

Juniper JUNOS=19.4-r1

Juniper JUNOS=19.4-r1-s1

Juniper JUNOS=19.4-r1-s2

Juniper JUNOS=20.1-r1

Juniper JUNOS=20.1-r1-s1

Juniper JUNOS=20.1-r1-s2

Juniper EX4300

Remediation

Information

The following software releases have been updated to resolve this specific issue: 17.3R3-S9, 17.4R2-S11, 17.4R3-S2, 18.1R3-S10, 18.2R3-S4, 18.3R2-S4, 18.3R3-S2, 18.4R2-S4, 18.4R3-S2, 19.1R2-S2, 19.1R3-S1, 19.2R1-S5, 19.2R2-S1, 19.2R3, 19.3R2-S4, 19.3R3, 19.4R1-S3, 19.4R2, 20.1R1-S3, 20.1R2, 20.2R1 and all subsequent releases.

Event History

Oct 16, 2020

CVE Published

via MITRE·08:31 PM

Data Sourced

via MITRE·08:31 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-1670?

CVE-2020-1670 has a medium severity rating due to the potential for high CPU load on the Routing Engine and subsequent network interruption.

How do I fix CVE-2020-1670?

To fix CVE-2020-1670, upgrade the affected Juniper JUNOS versions to the latest recommended releases provided by Juniper.

What systems are affected by CVE-2020-1670?

CVE-2020-1670 affects the Juniper Networks EX4300 Series running specific versions of the Junos operating system.

What are the symptoms of CVE-2020-1670 exploitation?

Exploitation of CVE-2020-1670 may lead to high CPU usage on the Routing Engine, causing network protocol operation issues and traffic interruptions.

Can CVE-2020-1670 be exploited remotely?

No, CVE-2020-1670 requires specific IPv4 packets to originate from within the same broadcast domain to trigger the vulnerability.