CVE-2020-1654: On Juniper Networks SRX Series with ICAP (Internet Content Adaptation Protocol) redirect service enabled, processing a malformed HTTP message can lead to a…

critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

On Juniper Networks SRX Series with ICAP (Internet Content Adaptation Protocol) redirect service enabled, processing a malformed HTTP message can lead to a Denial of Service (DoS) or Remote Code Execution (RCE) Continued processing of this malformed HTTP message may result in an extended Denial of Service (DoS) condition. The offending HTTP message that causes this issue may originate both from the HTTP server or the HTTP client. This issue affects Juniper Networks Junos OS on SRX Series: 18.1 versions prior to 18.1R3-S9 ; 18.2 versions prior to 18.2R2-S7, 18.2R3-S3; 18.3 versions prior to 18.3R1-S7, 18.3R2-S4, 18.3R3-S1; 18.4 versions prior to 18.4R1-S7, 18.4R2-S4, 18.4R3; 19.1 versions prior to 19.1R1-S5, 19.1R2; 19.2 versions prior to 19.2R1-S2, 19.2R2; 19.3 versions prior to 19.3R2. This issue does not affect Juniper Networks Junos OS prior to 18.1R1.

Affected

15 ranges

Vendor	Product	Version range	Fixed in
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos_os	—	—
juniper	srx_series	—	—
juniper_networks	junos_os	>= 18.2 < 18.2R2-S7, 18.2R3-S3	18.2R2-S7, 18.2R3-S3
juniper_networks	junos_os	>= 18.3 < 18.3R1-S7, 18.3R2-S4, 18.3R3-S1	18.3R1-S7, 18.3R2-S4, 18.3R3-S1
juniper_networks	junos_os	>= 18.4 < 18.4R1-S7, 18.4R2-S4, 18.4R3	18.4R1-S7, 18.4R2-S4, 18.4R3
juniper_networks	junos_os	>= 19.1 < 19.1R1-S5, 19.1R2	19.1R1-S5, 19.1R2
juniper_networks	junos_os	>= 19.2 < 19.2R1-S2, 19.2R2	19.2R1-S2, 19.2R2
juniper_networks	junos_os	>= 19.3 < 19.3R2	19.3R2