CVE-2020-1660 — Race Condition in Networks Junos OS
Severity
9.9CRITICALNVD
CNA8.3
EPSS
0.3%
top 47.80%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 16
Latest updateMay 24
Description
When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets processed by the Multiservices PIC Management Daemon (mspmand) process, responsible for managing "URL Filtering service", may crash, causing the Services PIC to restart. While the Services PIC is restarting, all PIC services including DNS filtering service (DNS sink holing) will be bypassed until the Services PIC completes its boot process. Thi…
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:HExploitability: 3.9 | Impact: 5.3
Affected Packages2 packages
🔴Vulnerability Details
2GHSA▶
GHSA-xcrv-h2x7-7qcc: When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of pack↗2022-05-24
CVEList▶
Junos OS: MX Series: Receipt of specific packets can cause services card to restart when DNS filtering is configured.↗2020-10-16
📋Vendor Advisories
1Juniper▶
CVE-2020-1660: When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of pack↗2020-10-16