On Juniper Networks MX Series with MS-MIC or MS-MPC card configured with NAT64 configuration, receipt of a malformed IPv6 packet may crash the MS-PIC component on MS-MIC or MS-MPC. This issue occurs when a multiservice card is translating the malformed IPv6 packet to IPv4 packet. An unauthenticated attacker can continuously send crafted IPv6 packets through the device causing repetitive MS-PIC process crashes, resulting in an extended Denial of Service condition. This issue affects Juniper Networks Junos OS on MX Series: 15.1 versions prior to 15.1R7-S7; 15.1X53 versions prior to 15.1X53-D593; 16.1 versions prior to 16.1R7-S8; 17.2 versions prior to 17.2R3-S4; 17.3 versions prior to 17.3R3-S6; 17.4 versions prior to 17.4R2-S11, 17.4R3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.2X75 versions prior to 18.2X75-D41, 18.2X75-D430, 18.2X75-D53, 18.2X75-D65; 18.3 versions prior to 18.3R2-S4, 18.3R3; 18.4 versions prior to 18.4R2-S5, 18.4R3; 19.1 versions prior to 19.1R2; 19.2 versions prior to 19.2R1-S5, 19.2R2; 19.3 versions prior to 19.3R2.
References
Link | Resource |
---|---|
https://kb.juniper.net/JSA11077 | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2020-10-16 14:15
Updated : 2021-02-05 08:49
NVD link : CVE-2020-1680
Mitre link : CVE-2020-1680
JSON object : View
CWE
CWE-131
Incorrect Calculation of Buffer Size
Products Affected
juniper
- mx10
- mx480
- mx5
- mx80
- mx10000
- junos
- mx2008
- mx960
- mx204
- mx10003
- mx2010
- mx150
- mx240
- mx2020
- mx40
- mx104