What is the severity of CVE-2020-1684?

CVE-2020-1684 is rated as a medium-severity vulnerability due to the potential for high CPU load and traffic interruption on affected devices.

How do I fix CVE-2020-1684?

To fix CVE-2020-1684, it is recommended to disable the application identification feature or apply the latest software updates from Juniper Networks.

Which devices are affected by CVE-2020-1684?

CVE-2020-1684 affects the Juniper Networks SRX Series devices configured with application identification inspection enabled.

What are the potential impacts of CVE-2020-1684?

The main impact of CVE-2020-1684 includes increased CPU utilization that could lead to service disruption and traffic interruptions.

Is CVE-2020-1684 applicable to all versions of Junos?

No, CVE-2020-1684 specifically affects Junos versions including 12.3x48, 15.1x49, 17.4, 18.1, 18.2, and 19.1.

Vulnerability/
CVE-2020-1684

high

7.5

CWE

400

14/10/2020

4/8/2024

CVE-2020-1684: Junos OS: SRX Series: High CPU load due to processing for HTTP traffic when Application Identification is enabled.

First published: Wed Oct 14 2020(Updated: )

On Juniper Networks SRX Series configured with application identification inspection enabled, receipt of specific HTTP traffic can cause high CPU load utilization, which could lead to traffic interruption. Application identification is enabled by default and is automatically turned on when Intrusion Detection and Prevention (IDP), AppFW, AppQoS, or AppTrack is configured. Thus, this issue might occur when IDP, AppFW, AppQoS, or AppTrack is configured. This issue affects Juniper Networks Junos OS on SRX Series: 12.3X48 versions prior to 12.3X48-D105; 15.1X49 versions prior to 15.1X49-D221, 15.1X49-D230; 17.4 versions prior to 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S3; 18.3 versions prior to 18.3R2-S4, 18.3R3-S2; 18.4 versions prior to 18.4R2-S5, 18.4R3-S1; 19.1 versions prior to 19.1R2-S2, 19.1R3; 19.2 versions prior to 19.2R1-S5, 19.2R2; 19.3 versions prior to 19.3R3; 19.4 versions prior to 19.4R2.

Credit: sirt@juniper.net

Affected Software	Affected Version	How to fix
Junos OS Evolved	=12.3x48
Junos OS Evolved	=12.3x48-d10
Junos OS Evolved	=12.3x48-d100
Junos OS Evolved	=12.3x48-d15
Junos OS Evolved	=12.3x48-d20
Junos OS Evolved	=12.3x48-d25
Junos OS Evolved	=12.3x48-d30
Junos OS Evolved	=12.3x48-d35
Junos OS Evolved	=12.3x48-d40
Junos OS Evolved	=12.3x48-d45
Junos OS Evolved	=12.3x48-d50
Junos OS Evolved	=12.3x48-d51
Junos OS Evolved	=12.3x48-d55
Junos OS Evolved	=12.3x48-d60
Junos OS Evolved	=12.3x48-d65
Junos OS Evolved	=12.3x48-d70
Junos OS Evolved	=12.3x48-d75
Junos OS Evolved	=12.3x48-d80
Junos OS Evolved	=12.3x48-d90
Junos OS Evolved	=12.3x48-d95
Junos OS Evolved	=15.1x49
Junos OS Evolved	=15.1x49-d10
Junos OS Evolved	=15.1x49-d100
Junos OS Evolved	=15.1x49-d110
Junos OS Evolved	=15.1x49-d120
Junos OS Evolved	=15.1x49-d130
Junos OS Evolved	=15.1x49-d140
Junos OS Evolved	=15.1x49-d15
Junos OS Evolved	=15.1x49-d150
Junos OS Evolved	=15.1x49-d160
Junos OS Evolved	=15.1x49-d170
Junos OS Evolved	=15.1x49-d180
Junos OS Evolved	=15.1x49-d190
Junos OS Evolved	=15.1x49-d20
Junos OS Evolved	=15.1x49-d200
Junos OS Evolved	=15.1x49-d210
Junos OS Evolved	=15.1x49-d25
Junos OS Evolved	=15.1x49-d30
Junos OS Evolved	=15.1x49-d35
Junos OS Evolved	=15.1x49-d40
Junos OS Evolved	=15.1x49-d45
Junos OS Evolved	=15.1x49-d50
Junos OS Evolved	=15.1x49-d55
Junos OS Evolved	=15.1x49-d60
Junos OS Evolved	=15.1x49-d65
Junos OS Evolved	=15.1x49-d70
Junos OS Evolved	=15.1x49-d75
Junos OS Evolved	=15.1x49-d80
Junos OS Evolved	=15.1x49-d90
Junos OS Evolved	=17.4
Junos OS Evolved	=17.4-r1
Junos OS Evolved	=17.4-r1-s1
Junos OS Evolved	=17.4-r1-s2
Junos OS Evolved	=17.4-r1-s4
Junos OS Evolved	=17.4-r1-s5
Junos OS Evolved	=17.4-r1-s6
Junos OS Evolved	=17.4-r1-s7
Junos OS Evolved	=17.4-r2
Junos OS Evolved	=17.4-r2-s1
Junos OS Evolved	=17.4-r2-s10
Junos OS Evolved	=17.4-r2-s2
Junos OS Evolved	=17.4-r2-s3
Junos OS Evolved	=17.4-r2-s4
Junos OS Evolved	=17.4-r2-s5
Junos OS Evolved	=17.4-r2-s6
Junos OS Evolved	=17.4-r2-s7
Junos OS Evolved	=17.4-r2-s8
Junos OS Evolved	=17.4-r2-s9
Junos OS Evolved	=17.4-r3
Junos OS Evolved	=17.4-r3-s1
Junos OS Evolved	=17.4-r3-s2
Junos OS Evolved	=18.1
Junos OS Evolved	=18.1-r1
Junos OS Evolved	=18.1-r2
Junos OS Evolved	=18.1-r2-s1
Junos OS Evolved	=18.1-r2-s2
Junos OS Evolved	=18.1-r2-s4
Junos OS Evolved	=18.1-r3
Junos OS Evolved	=18.1-r3-s1
Junos OS Evolved	=18.1-r3-s10
Junos OS Evolved	=18.1-r3-s2
Junos OS Evolved	=18.1-r3-s3
Junos OS Evolved	=18.1-r3-s4
Junos OS Evolved	=18.1-r3-s6
Junos OS Evolved	=18.1-r3-s7
Junos OS Evolved	=18.1-r3-s8
Junos OS Evolved	=18.1-r3-s9
Junos OS Evolved	=18.2
Junos OS Evolved	=18.2-r1
Junos OS Evolved	=18.2-r1
Junos OS Evolved	=18.2-r1-s3
Junos OS Evolved	=18.2-r1-s4
Junos OS Evolved	=18.2-r1-s5
Junos OS Evolved	=18.2-r2
Junos OS Evolved	=18.2-r2-s1
Junos OS Evolved	=18.2-r2-s2
Junos OS Evolved	=18.2-r2-s3
Junos OS Evolved	=18.2-r2-s4
Junos OS Evolved	=18.2-r2-s5
Junos OS Evolved	=18.2-r2-s6
Junos OS Evolved	=18.2-r3
Junos OS Evolved	=18.2-r3-s1
Junos OS Evolved	=18.2-r3-s2
Junos OS Evolved	=18.3
Junos OS Evolved	=18.3-r1
Junos OS Evolved	=18.3-r1-s1
Junos OS Evolved	=18.3-r1-s2
Junos OS Evolved	=18.3-r1-s3
Junos OS Evolved	=18.3-r1-s5
Junos OS Evolved	=18.3-r1-s6
Junos OS Evolved	=18.3-r2
Junos OS Evolved	=18.3-r2-s1
Junos OS Evolved	=18.3-r2-s2
Junos OS Evolved	=18.3-r2-s3
Junos OS Evolved	=18.3-r3
Junos OS Evolved	=18.3-r3-s1
Junos OS Evolved	=18.4
Junos OS Evolved	=18.4-r1
Junos OS Evolved	=18.4-r1-s1
Junos OS Evolved	=18.4-r1-s2
Junos OS Evolved	=18.4-r1-s5
Junos OS Evolved	=18.4-r1-s6
Junos OS Evolved	=18.4-r2
Junos OS Evolved	=18.4-r2-s1
Junos OS Evolved	=18.4-r2-s2
Junos OS Evolved	=18.4-r2-s3
Junos OS Evolved	=18.4-r2-s4
Junos OS Evolved	=18.4-r3
Junos OS Evolved	=19.1
Junos OS Evolved	=19.1-r1
Junos OS Evolved	=19.1-r1-s1
Junos OS Evolved	=19.1-r1-s2
Junos OS Evolved	=19.1-r1-s3
Junos OS Evolved	=19.1-r1-s4
Junos OS Evolved	=19.1-r2
Junos OS Evolved	=19.1-r2-s1
Junos OS Evolved	=19.2
Junos OS Evolved	=19.2-r1
Junos OS Evolved	=19.2-r1-s1
Junos OS Evolved	=19.2-r1-s2
Junos OS Evolved	=19.2-r1-s3
Junos OS Evolved	=19.2-r1-s4
Junos OS Evolved	=19.3
Junos OS Evolved	=19.3-r1
Junos OS Evolved	=19.3-r1-s1
Junos OS Evolved	=19.3-r2
Junos OS Evolved	=19.3-r2-s1
Junos OS Evolved	=19.3-r2-s2
Junos OS Evolved	=19.4-r1
Junos OS Evolved	=19.4-r1-s1
Junos OS Evolved	=19.4-r1-s2

Remedy

The following software releases have been updated to resolve this specific issue: Junos OS 12.3X48-D105, 15.1X49-D221, 15.1X49-D230, 17.4R3-S3, 18.1R3-S11, 18.2R3-S3, 18.3R2-S4, 18.3R3-S2, 18.4R2-S5, 18.4R3-S1, 19.1R2-S2, 19.1R3, 19.2R1-S5, 19.2R2, 19.3R3, 19.4R2, 20.1R1,and all subsequent releases.

Never miss a vulnerability like this again

Reference Links

https://kb.juniper.net/JSA11081

Frequently Asked Questions

What is the severity of CVE-2020-1684?
CVE-2020-1684 is rated as a medium-severity vulnerability due to the potential for high CPU load and traffic interruption on affected devices.
How do I fix CVE-2020-1684?
To fix CVE-2020-1684, it is recommended to disable the application identification feature or apply the latest software updates from Juniper Networks.
Which devices are affected by CVE-2020-1684?
CVE-2020-1684 affects the Juniper Networks SRX Series devices configured with application identification inspection enabled.
What are the potential impacts of CVE-2020-1684?
The main impact of CVE-2020-1684 includes increased CPU utilization that could lead to service disruption and traffic interruptions.
Is CVE-2020-1684 applicable to all versions of Junos?
No, CVE-2020-1684 specifically affects Junos versions including 12.3x48, 15.1x49, 17.4, 18.1, 18.2, and 19.1.

agent/type
collector/mitre-cve
source/MITRE
agent/title
agent/weakness
agent/severity
agent/references
agent/remedy
agent/last-modified-date
agent/author
agent/description
agent/first-publish-date
agent/event
agent/source
agent/tags
agent/softwarecombine
collector/nvd-index
agent/software-canonical-lookup-request
vendor/juniper
canonical/junos os evolved
version/junos os evolved/12.3x48
version/junos os evolved/12.3x48-d10
version/junos os evolved/12.3x48-d100
version/junos os evolved/12.3x48-d15
version/junos os evolved/12.3x48-d20
version/junos os evolved/12.3x48-d25
version/junos os evolved/12.3x48-d30
version/junos os evolved/12.3x48-d35
version/junos os evolved/12.3x48-d40
version/junos os evolved/12.3x48-d45
version/junos os evolved/12.3x48-d50
version/junos os evolved/12.3x48-d51
version/junos os evolved/12.3x48-d55
version/junos os evolved/12.3x48-d60
version/junos os evolved/12.3x48-d65
version/junos os evolved/12.3x48-d70
version/junos os evolved/12.3x48-d75
version/junos os evolved/12.3x48-d80
version/junos os evolved/12.3x48-d90
version/junos os evolved/12.3x48-d95
version/junos os evolved/15.1x49
version/junos os evolved/15.1x49-d10
version/junos os evolved/15.1x49-d100
version/junos os evolved/15.1x49-d110
version/junos os evolved/15.1x49-d120
version/junos os evolved/15.1x49-d130
version/junos os evolved/15.1x49-d140
version/junos os evolved/15.1x49-d15
version/junos os evolved/15.1x49-d150
version/junos os evolved/15.1x49-d160
version/junos os evolved/15.1x49-d170
version/junos os evolved/15.1x49-d180
version/junos os evolved/15.1x49-d190
version/junos os evolved/15.1x49-d20
version/junos os evolved/15.1x49-d200
version/junos os evolved/15.1x49-d210
version/junos os evolved/15.1x49-d25
version/junos os evolved/15.1x49-d30
version/junos os evolved/15.1x49-d35
version/junos os evolved/15.1x49-d40
version/junos os evolved/15.1x49-d45
version/junos os evolved/15.1x49-d50
version/junos os evolved/15.1x49-d55
version/junos os evolved/15.1x49-d60
version/junos os evolved/15.1x49-d65
version/junos os evolved/15.1x49-d70
version/junos os evolved/15.1x49-d75
version/junos os evolved/15.1x49-d80
version/junos os evolved/15.1x49-d90
version/junos os evolved/17.4
version/junos os evolved/17.4-r1
version/junos os evolved/17.4-r1-s1
version/junos os evolved/17.4-r1-s2
version/junos os evolved/17.4-r1-s4
version/junos os evolved/17.4-r1-s5
version/junos os evolved/17.4-r1-s6
version/junos os evolved/17.4-r1-s7
version/junos os evolved/17.4-r2
version/junos os evolved/17.4-r2-s1
version/junos os evolved/17.4-r2-s10
version/junos os evolved/17.4-r2-s2
version/junos os evolved/17.4-r2-s3
version/junos os evolved/17.4-r2-s4
version/junos os evolved/17.4-r2-s5
version/junos os evolved/17.4-r2-s6
version/junos os evolved/17.4-r2-s7
version/junos os evolved/17.4-r2-s8
version/junos os evolved/17.4-r2-s9
version/junos os evolved/17.4-r3
version/junos os evolved/17.4-r3-s1
version/junos os evolved/17.4-r3-s2
version/junos os evolved/18.1
version/junos os evolved/18.1-r1
version/junos os evolved/18.1-r2
version/junos os evolved/18.1-r2-s1
version/junos os evolved/18.1-r2-s2
version/junos os evolved/18.1-r2-s4
version/junos os evolved/18.1-r3
version/junos os evolved/18.1-r3-s1
version/junos os evolved/18.1-r3-s10
version/junos os evolved/18.1-r3-s2
version/junos os evolved/18.1-r3-s3
version/junos os evolved/18.1-r3-s4
version/junos os evolved/18.1-r3-s6
version/junos os evolved/18.1-r3-s7
version/junos os evolved/18.1-r3-s8
version/junos os evolved/18.1-r3-s9
version/junos os evolved/18.2
version/junos os evolved/18.2-r1
version/junos os evolved/18.2-r1-s3
version/junos os evolved/18.2-r1-s4
version/junos os evolved/18.2-r1-s5
version/junos os evolved/18.2-r2
version/junos os evolved/18.2-r2-s1
version/junos os evolved/18.2-r2-s2
version/junos os evolved/18.2-r2-s3
version/junos os evolved/18.2-r2-s4
version/junos os evolved/18.2-r2-s5
version/junos os evolved/18.2-r2-s6
version/junos os evolved/18.2-r3
version/junos os evolved/18.2-r3-s1
version/junos os evolved/18.2-r3-s2
version/junos os evolved/18.3
version/junos os evolved/18.3-r1
version/junos os evolved/18.3-r1-s1
version/junos os evolved/18.3-r1-s2
version/junos os evolved/18.3-r1-s3
version/junos os evolved/18.3-r1-s5
version/junos os evolved/18.3-r1-s6
version/junos os evolved/18.3-r2
version/junos os evolved/18.3-r2-s1
version/junos os evolved/18.3-r2-s2
version/junos os evolved/18.3-r2-s3
version/junos os evolved/18.3-r3
version/junos os evolved/18.3-r3-s1
version/junos os evolved/18.4
version/junos os evolved/18.4-r1
version/junos os evolved/18.4-r1-s1
version/junos os evolved/18.4-r1-s2
version/junos os evolved/18.4-r1-s5
version/junos os evolved/18.4-r1-s6
version/junos os evolved/18.4-r2
version/junos os evolved/18.4-r2-s1
version/junos os evolved/18.4-r2-s2
version/junos os evolved/18.4-r2-s3
version/junos os evolved/18.4-r2-s4
version/junos os evolved/18.4-r3
version/junos os evolved/19.1
version/junos os evolved/19.1-r1
version/junos os evolved/19.1-r1-s1
version/junos os evolved/19.1-r1-s2
version/junos os evolved/19.1-r1-s3
version/junos os evolved/19.1-r1-s4
version/junos os evolved/19.1-r2
version/junos os evolved/19.1-r2-s1
version/junos os evolved/19.2
version/junos os evolved/19.2-r1
version/junos os evolved/19.2-r1-s1
version/junos os evolved/19.2-r1-s2
version/junos os evolved/19.2-r1-s3
version/junos os evolved/19.2-r1-s4
version/junos os evolved/19.3
version/junos os evolved/19.3-r1
version/junos os evolved/19.3-r1-s1
version/junos os evolved/19.3-r2
version/junos os evolved/19.3-r2-s1
version/junos os evolved/19.3-r2-s2
version/junos os evolved/19.4-r1
version/junos os evolved/19.4-r1-s1
version/junos os evolved/19.4-r1-s2