Vulnerability · Published Apr 8, 2020 · Assigned by juniper

CVE-2020-1634Junos OS: High-End SRX Series: Multicast traffic might cause all FPCs to reset.

High 7.5

In plain English

A high-severity integer overflow in Junos OS from Juniper Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 70% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)1.3%top 29.8% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

On High-End SRX Series devices, in specific configurations and when specific networking events or operator actions occur, an SPC receiving genuine multicast traffic may core. Subsequently, all FPCs in a chassis may reset causing a Denial of Service. This issue affects both IPv4 and IPv6. This issue affects: Juniper Networks Junos OS 12.3X48 version 12.3X48-D80 and later versions prior to 12.3X48-D95 on High-End SRX Series. This issue does not affect Branch SRX Series devices.

Affected products (as reported)

Vendor	Product	Versions
Juniper Networks	Junos OS	12.3X48-D80 – before 12.3X48*

Weakness: CWE-190 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

https://kb.juniper.net/JSA11014 x_refsource_MISC