3.3
CVSSv2

CVE-2020-1670

Published: 16/10/2020 Updated: 01/01/2022
CVSS v2 Base Score: 3.3 | Impact Score: 2.9 | Exploitability Score: 6.5
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 294
Vector: AV:A/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

On Juniper Networks EX4300 Series, receipt of a stream of specific IPv4 packets can cause Routing Engine (RE) high CPU load, which could lead to network protocol operation issue and traffic interruption. This specific packets can originate only from within the broadcast domain where the device is connected. This issue occurs when the packets enter to the IRB interface. Only IPv4 packets can trigger this issue. IPv6 packets cannot trigger this issue. This issue affects Juniper Networks Junos OS on EX4300 series: 17.3 versions before 17.3R3-S9; 17.4 versions before 17.4R2-S11, 17.4R3-S2; 18.1 versions before 18.1R3-S10; 18.2 versions before 18.2R3-S4; 18.3 versions before 18.3R2-S4, 18.3R3-S2; 18.4 versions before 18.4R2-S4, 18.4R3-S2; 19.1 versions before 19.1R2-S2, 19.1R3-S1; 19.2 versions before 19.2R1-S5, 19.2R2-S1, 19.2R3; 19.3 versions before 19.3R2-S4, 19.3R3; 19.4 versions before 19.4R1-S3, 19.4R2; 20.1 versions before 20.1R1-S3, 20.1R2.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

juniper junos 17.3

juniper junos 17.4

juniper junos 18.1

juniper junos 18.2

juniper junos 18.3

juniper junos 18.4

juniper junos 19.1

juniper junos 19.2

juniper junos 19.3

juniper junos 19.4

juniper junos 20.1