MEDIUM🇬🇧 English

CVE-2020-1665

CVSS 5.3v3.1pub. 2020-10-16upd. 2024-11-21

On Juniper Networks MX Series and EX9200 Series, in a certain condition the IPv6 Distributed Denial of Service (DDoS) protection might not take affect when it reaches the threshold condition. The DDoS protection allows the device to continue to function while it is under DDoS attack, protecting both the Routing Engine (RE) and the Flexible PIC Concentrator (FPC) during the DDoS attack. When this issue occurs, the RE and/or the FPC can become overwhelmed, which could disrupt network protocol operations and/or interrupt traffic. This issue does not affect IPv4 DDoS protection. This issue affects MX Series and EX9200 Series with Trio-based PFEs (Packet Forwarding Engines). Please refer to https://kb.juniper.net/KB25385 for the list of Trio-based PFEs. This issue affects Juniper Networks Junos OS on MX series and EX9200 Series: 17.2 versions prior to 17.2R3-S4; 17.2X75 versions prior to 17.2X75-D102, 17.2X75-D110; 17.3 versions prior to 17.3R3-S8; 17.4 versions prior to 17.4R2-S11, 17.4R3-S2; 18.2 versions prior to 18.2R2-S7, 18.2R3, 18.2R3-S3; 18.2X75 versions prior to 18.2X75-D30; 18.3 versions prior to 18.3R2-S4, 18.3R3-S2.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
  • Juniper Ex9200

    HW
    Juniper
    wszystkie wersje
  • Juniper Junos

    OS
    Juniper
    17.217.2x7517.317.418.218.2x7518.3
  • Juniper Mx10

    HW
    Juniper
    wszystkie wersje
  • Juniper Mx10000

    HW
    Juniper
    wszystkie wersje
  • Juniper Mx10003

    HW
    Juniper
    wszystkie wersje
  • Juniper Mx104

    HW
    Juniper
    wszystkie wersje
  • Juniper Mx150

    HW
    Juniper
    wszystkie wersje
  • Juniper Mx2008

    HW
    Juniper
    wszystkie wersje
  • Juniper Mx2010

    HW
    Juniper
    wszystkie wersje
  • Juniper Mx2020

    HW
    Juniper
    wszystkie wersje
  • Juniper Mx204

    HW
    Juniper
    wszystkie wersje
  • Juniper Mx240

    HW
    Juniper
    wszystkie wersje
  • Juniper Mx40

    HW
    Juniper
    wszystkie wersje
  • Juniper Mx480

    HW
    Juniper
    wszystkie wersje
  • Juniper Mx5

    HW
    Juniper
    wszystkie wersje
  • Juniper Mx80

    HW
    Juniper
    wszystkie wersje
  • Juniper Mx960

    HW
    Juniper
    wszystkie wersje
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
DoS
CWE
Referencje

Powiązane podatności

CVE-2023-36845CRITICAL9.8⚠ KEVten sam produkt

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SR...

CVE-2024-21591CRITICAL9.8PL ✓ten sam produkt

Out-of-bounds Write w J-Web Juniper Junos OS — RCE z uprawnieniami root

CVE-2021-0248CRITICAL10.0ten sam produkt

This issue is not applicable to NFX NextGen Software. On NFX Series devices the use of Hard-coded Credentials ...

CVE-2021-0254CRITICAL9.8ten sam produkt

A buffer size validation vulnerability in the overlayd service of Juniper Networks Junos OS may allow an unaut...

CVE-2021-0211CRITICAL10.0ten sam produkt

An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Rout...