8.6

CVE-2020-1632: juniper networks junos os

CVSS: 8.6v3.1HighModified
Published 15-04-2020Last modified 17-09-2024
Open JSON

Vulnerability summary

CVE-2020-1632 is a high (CVSS 8.6) vulnerability in juniper networks junos os. EPSS estimates a 1.06% chance of exploitation in the next 30 days, higher than 64.2% of scored vulnerabilities.

Overall risk
35/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.6/10
010
High · v3.1 (CVE.org)
EPSS score
1.06%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 15-04-2020
    PublishedVulnerability first disclosed.
  2. 17-09-2024
    Last modifiedVulnerability information updated.

Description

In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evolved devices to advertise an invalid BGP UPDATE message to other peers, causing the other peers to terminate the established BGP session, creating a Denial of Service (DoS) condition. For example, Router A sends a specific BGP UPDATE to Router B, causing Router B to send an invalid BGP UPDATE message to Router C, resulting in termination of the BGP session between Router B and Router C. This issue might occur when there is at least a single BGP session established on the device that does not support 4 Byte AS extension (RFC 4893). Repeated receipt of the same BGP UPDATE can result in an extended DoS condition. This issue affects Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S6; 16.2 versions prior to 16.2R2-S11; 17.1 versions prior to 17.1R2-S11, 17.1R3-S2; 17.2 versions prior to 17.2R1-S9, 17.2R2-S8, 17.2R3-S3; 17.2X75 versions prior to 17.2X75-D105, 17.2X75-D110, 17.2X75-D44; 17.3 versions prior to 17.3R2-S5, 17.3R3-S7; 17.4 versions prior to 17.4R2-S8, 17.4R3; 18.1 versions prior to 18.1R3-S8; 18.2 versions prior to 18.2R2-S6, 18.2R3-S2; 18.2X75 versions prior to 18.2X75-D12, 18.2X75-D33, 18.2X75-D411, 18.2X75-D420, 18.2X75-D51, 18.2X75-D60; 18.3 versions prior to 18.3R1-S6, 18.3R2-S3, 18.3R3; 18.4 versions prior to 18.4R1-S5, 18.4R3; 18.4 version 18.4R2 and later versions; 19.1 versions prior to 19.1R1-S3, 19.1R2; 19.2 versions prior to 19.2R1-S2, 19.2R2. This issue does not affect Juniper Networks Junos OS prior to 16.1R1. This issue affects Juniper Networks Junos OS Evolved prior to 19.2R2-EVO.

CVSS metrics

3 scores · 2 sources · 2 versions

EPSS trend

Probability

1.06%

Chance of exploitation in the next 30 days

Percentile

64%

Versus all other CVEs

30-day change

0.00 pp

From 1.06% on 21-09-2026

21-09-202621-10-2026
EPSS score
1.06%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Juniper2 products
  • junos16.1 | 16.1:r1 | 16.1:r2 | 16.1:r3 | 16.1:r3-s10 | 16.1:r3-s11 | 16.1:r4 | 16.1:r4-s12 | 16.1:r4-s2 | 16.1:r4-s3 | 16.1:r4-s4 | 16.1:r4-s6 | 16.1:r5 | 16.1:r5-s4 | 16.1:r6-s1 | 16.1:r6-s6 | 16.1:r7 | 16.1:r7-s2 | 16.1:r7-s3 | 16.1:r7-s4 | 16.1:r7-s5 | 16.2:r1 | 16.2:r2 | 16.2:r2-s1 | 16.2:r2-s10 | 16.2:r2-s2 | 16.2:r2-s5 | 16.2:r2-s6 | 17.1 | 17.1:r1 | 17.1:r2 | 17.1:r2-s1 | 17.1:r2-s10 | 17.1:r2-s2 | 17.1:r2-s3 | 17.1:r2-s4 | 17.1:r2-s5 | 17.1:r2-s6 | 17.1:r2-s7 | 17.1:r2-s8 | 17.1:r2-s9 | 17.1:r3-s1 | 17.2 | 17.2:r1 | 17.2:r1-s1 | 17.2:r1-s2 | 17.2:r1-s3 | 17.2:r1-s4 | 17.2:r1-s5 | 17.2:r1-s7 | 17.2:r1-s8 | 17.2:r2 | 17.2:r2-s6 | 17.2:r2-s7 | 17.2:r3-s1 | 17.2:r3-s2 | 17.2x75 | 17.2x75:d102 | 17.2x75:d50 | 17.2x75:d70 | 17.2x75:d92 | 17.3 | 17.3:r1-s1 | 17.3:r2 | 17.3:r2-s1 | 17.3:r2-s2 | 17.3:r2-s3 | 17.3:r2-s4 | 17.4 | 17.4:r1 | 17.4:r1-s1 | 17.4:r1-s2 | 17.4:r1-s4 | 17.4:r1-s5 | 17.4:r1-s6 | 17.4:r1-s7 | 17.4:r2 | 17.4:r2-s1 | 17.4:r2-s2 | 17.4:r2-s3 | 17.4:r2-s4 | 17.4:r2-s5 | 17.4:r2-s6 | 17.4:r2-s7 | 18.1 | 18.1:r2 | 18.1:r2-s1 | 18.1:r2-s2 | 18.1:r2-s4 | 18.1:r3 | 18.1:r3-s1 | 18.1:r3-s2 | 18.1:r3-s3 | 18.1:r3-s4 | 18.1:r3-s6 | 18.1:r3-s7 | 18.1x75 | 18.3 | 18.3:r1 | 18.3:r1-s1 | 18.3:r1-s2 | 18.3:r1-s3 | 18.3:r1-s5 | 18.3:r2 | 18.3:r2-s1 | 18.3:r2-s2 | 18.4:r1 | 18.4:r1-s1 | 18.4:r1-s2 | 18.4:r2 | 18.4:r2-s1 | 18.4:r2-s2 | 18.4:r2-s3 | 19.1 | 19.1:r1 | 19.1:r1-s1 | 19.1:r1-s2 | 19.2 | 19.2:r1 | 19.2:r1-s1
  • junos_os_evolved19.2:r1
Juniper networks2 products
  • junos os≥ 16.1, < 16.1R7-S6 | ≥ 16.2, < 16.2R2-S11 | ≥ 17.1, < 17.1R2-S11, 17.1R3-S2 | ≥ 17.2, < 17.2R1-S9, 17.2R2-S8, 17.2R3-S3 | ≥ 17.2X75, < 17.2X75-D105, 17.2X75-D110, 17.2X75-D44 | ≥ 17.3, < 17.3R2-S5, 17.3R3-S7 | ≥ 17.4, < 17.4R2-S8, 17.4R3 | ≥ 18.1, < 18.1R3-S8 | ≥ 18.2, < 18.2R2-S6, 18.2R3-S2 | ≥ 18.2X75, < 18.2X75-D12, 18.2X75-D33, 18.2X75-D411, 18.2X75-D420, 18.2X75-D51, 18.2X75-D60 | ≥ 18.3, < 18.3R1-S6, 18.3R2-S3, 18.3R3 | ≥ 18.4, < 18.4R1-S5, 18.4R3 | ≥ 19.1, < 19.1R1-S3, 19.1R2 | ≥ 19.2, < 19.2R1-S2, 19.2R2
  • junos os evolved≥ unspecified, < 19.2R2-EVO

2 vendors · 4 products

References

1 links