cbcvebase.
CVE-2020-1629
published 2020-04-08

CVE-2020-1629: A race condition vulnerability on Juniper Network Junos OS devices may cause the routing protocol daemon (RPD) process to crash and restart while processing a…

PriorityP429medium5.9CVSS 3.1
AVNACHPRNUINSUCNINAH
EPSS
0.67%
48.1th percentile
A race condition vulnerability on Juniper Network Junos OS devices may cause the routing protocol daemon (RPD) process to crash and restart while processing a BGP NOTIFICATION message. This issue affects Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S6; 16.2 versions prior to 16.2R2-S11; 17.1 versions prior to 17.1R2-S11, 17.1R3-S1; 17.2 versions prior to 17.2R1-S9, 17.2R3-S3; 17.2 version 17.2R2 and later versions; 17.2X75 versions prior to 17.2X75-D105, 17.2X75-D110; 17.3 versions prior to 17.3R2-S5, 17.3R3-S6; 17.4 versions prior to 17.4R2-S7, 17.4R3; 18.1 versions prior to 18.1R3-S8; 18.2 versions prior to 18.2R3-S3; 18.2X75 versions prior to 18.2X75-D410, 18.2X75-D420, 18.2X75-D50, 18.2X75-D60; 18.3 versions prior to 18.3R1-S5, 18.3R2-S2, 18.3R3; 18.4 versions prior to 18.4R2-S2, 18.4R3; 19.1 versions prior to 19.1R1-S2, 19.1R2; 19.2 versions prior to 19.2R1-S4, 19.2R2. This issue does not affect Juniper Networks Junos OS prior to version 16.1R1.

Affected

29 ranges· showing 25
VendorProductVersion rangeFixed in
juniperjunos——
juniperjunos——
juniperjunos——
juniperjunos——
juniperjunos——
juniperjunos——
juniperjunos——
juniperjunos——
juniperjunos——
juniperjunos——
juniperjunos——
juniperjunos——
juniperjunos——
juniperjunos——
juniperjunos_os——
juniper_networksjunos_os>= 16.1 < 16.1R7-S616.1R7-S6
juniper_networksjunos_os>= 16.2 < 16.2R2-S1116.2R2-S11
juniper_networksjunos_os>= 17.1 < 17.1R2-S11, 17.1R3-S117.1R2-S11, 17.1R3-S1
juniper_networksjunos_os>= 17.2 < 17.2R1-S9, 17.2R3-S317.2R1-S9, 17.2R3-S3
juniper_networksjunos_os>= 17.2X75 < 17.2X75-D105, 17.2X75-D11017.2X75-D105, 17.2X75-D110
juniper_networksjunos_os>= 17.3 < 17.3R2-S5, 17.3R3-S617.3R2-S5, 17.3R3-S6
juniper_networksjunos_os>= 17.4 < 17.4R2-S7, 17.4R317.4R2-S7, 17.4R3
juniper_networksjunos_os>= 18.1 < 18.1R3-S818.1R3-S8
juniper_networksjunos_os>= 18.2 < 18.2R3-S318.2R3-S3
juniper_networksjunos_os>= 18.2X75 < 18.2X75-D410, 18.2X75-D420, 18.2X75-D50, 18.2X75-D6018.2X75-D410, 18.2X75-D420, 18.2X75-D50, 18.2X75-D60

CVSS provenance

nvdv3.15.9MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.