Lucene search
JuniperCVE-2020-1613HistoryApr 08, 2020 - 8:15 p.m.
CVE-2020-1613
2020-04-0820:15:13
CWE-710
juniper
web.nvd.nist.gov
33
vulnerability
bgp flowspec
juniper networks
junos os
cve-2020-1613
nvd
security issue
bgp session termination
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
8.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
AI Score
7.4
Confidence
High
EPSS
0.001
Percentile
42.5%
A vulnerability in the BGP FlowSpec implementation may cause a Juniper Networks Junos OS device to terminate an established BGP session upon receiving a specific BGP FlowSpec advertisement. The BGP NOTIFICATION message that terminates an established BGP session is sent toward the peer device that originally sent the specific BGP FlowSpec advertisement. This specific BGP FlowSpec advertisement received from a BGP peer might get propagated from a Junos OS device running the fixed release to another device that is vulnerable causing BGP session termination downstream. This issue affects IPv4 and IPv6 BGP FlowSpec deployment. This issue affects Juniper Networks Junos OS: 12.3; 12.3X48 on SRX Series; 14.1X53 on EX and QFX Series; 15.1 versions prior to 15.1R7-S5; 15.1F versions prior to 15.1F6-S13; 15.1X49 versions prior to 15.1X49-D180 on SRX Series; 15.1X53 versions prior to 15.1X53-D238 on QFX5200/QFX5110; 15.1X53 versions prior to 15.1X53-D497 on NFX Series; 15.1X53 versions prior to 15.1X53-D592 on EX2300/EX3400; 16.1 versions prior to 16.1R7-S7; 17.1 versions prior to 17.1R2-S12, 17.1R3; 17.2 versions prior to 17.2R2-S7, 17.2R3; 17.2X75 versions prior to 17.2X75-D102, 17.2X75-D110, 17.2X75-D44; 17.3 versions prior to 17.3R2-S5, 17.3R3-S5; 17.4 versions prior to 17.4R1-S8, 17.4R2; 18.1 versions prior to 18.1R2-S4, 18.1R3; 18.2X75 versions prior to 18.2X75-D20.
Affected configurations
Node
juniperjunosMatch12.3-
ORjuniperjunosMatch15.1-
ORjuniperjunosMatch15.1f
ORjuniperjunosMatch15.1f1
ORjuniperjunosMatch15.1f2
ORjuniperjunosMatch15.1f2-s1
ORjuniperjunosMatch15.1f2-s2
ORjuniperjunosMatch15.1f2-s3
ORjuniperjunosMatch15.1f2-s4
ORjuniperjunosMatch15.1f3
ORjuniperjunosMatch15.1f4
ORjuniperjunosMatch15.1f5
ORjuniperjunosMatch15.1f5-s7
ORjuniperjunosMatch15.1f6
ORjuniperjunosMatch15.1f6-s1
ORjuniperjunosMatch15.1f6-s12
ORjuniperjunosMatch15.1f6-s2
ORjuniperjunosMatch15.1f6-s3
ORjuniperjunosMatch15.1f6-s4
ORjuniperjunosMatch15.1f6-s7
ORjuniperjunosMatch15.1f7
ORjuniperjunosMatch15.1r1
ORjuniperjunosMatch15.1r2
ORjuniperjunosMatch15.1r3
ORjuniperjunosMatch15.1r4
ORjuniperjunosMatch15.1r4-s7
ORjuniperjunosMatch15.1r4-s8
ORjuniperjunosMatch15.1r4-s9
ORjuniperjunosMatch15.1r5
ORjuniperjunosMatch15.1r5-s1
ORjuniperjunosMatch15.1r5-s5
ORjuniperjunosMatch15.1r5-s6
ORjuniperjunosMatch15.1r6
ORjuniperjunosMatch15.1r6-s1
ORjuniperjunosMatch15.1r6-s2
ORjuniperjunosMatch15.1r6-s6
ORjuniperjunosMatch15.1r7
ORjuniperjunosMatch15.1r7-s1
ORjuniperjunosMatch15.1r7-s2
ORjuniperjunosMatch15.1r7-s3
ORjuniperjunosMatch15.1r7-s4
ORjuniperjunosMatch16.1-
ORjuniperjunosMatch16.1r1
ORjuniperjunosMatch16.1r2
ORjuniperjunosMatch16.1r3
ORjuniperjunosMatch16.1r3-s10
ORjuniperjunosMatch16.1r3-s11
ORjuniperjunosMatch16.1r4
ORjuniperjunosMatch16.1r4-s12
ORjuniperjunosMatch16.1r4-s2
ORjuniperjunosMatch16.1r4-s3
ORjuniperjunosMatch16.1r4-s4
ORjuniperjunosMatch16.1r4-s6
ORjuniperjunosMatch16.1r5
ORjuniperjunosMatch16.1r5-s4
ORjuniperjunosMatch16.1r6-s1
ORjuniperjunosMatch16.1r6-s6
ORjuniperjunosMatch16.1r7
ORjuniperjunosMatch16.1r7-s2
ORjuniperjunosMatch16.1r7-s3
ORjuniperjunosMatch16.1r7-s4
ORjuniperjunosMatch16.1r7-s5
ORjuniperjunosMatch17.1-
ORjuniperjunosMatch17.1r1
ORjuniperjunosMatch17.1r2
ORjuniperjunosMatch17.1r2-s1
ORjuniperjunosMatch17.1r2-s10
ORjuniperjunosMatch17.1r2-s11
ORjuniperjunosMatch17.1r2-s2
ORjuniperjunosMatch17.1r2-s3
ORjuniperjunosMatch17.1r2-s4
ORjuniperjunosMatch17.1r2-s5
ORjuniperjunosMatch17.1r2-s6
ORjuniperjunosMatch17.1r2-s7
ORjuniperjunosMatch17.1r2-s8
ORjuniperjunosMatch17.1r2-s9
ORjuniperjunosMatch17.1r3
ORjuniperjunosMatch17.2-
ORjuniperjunosMatch17.2r1
ORjuniperjunosMatch17.2r1-s1
ORjuniperjunosMatch17.2r1-s2
ORjuniperjunosMatch17.2r1-s3
ORjuniperjunosMatch17.2r1-s4
ORjuniperjunosMatch17.2r1-s5
ORjuniperjunosMatch17.2r1-s7
ORjuniperjunosMatch17.2r1-s8
ORjuniperjunosMatch17.2r2
ORjuniperjunosMatch17.2r2-s10
ORjuniperjunosMatch17.2r2-s11
ORjuniperjunosMatch17.2r2-s6
ORjuniperjunosMatch17.2r2-s7
ORjuniperjunosMatch17.2r2-s9
ORjuniperjunosMatch17.2x75-
ORjuniperjunosMatch17.2x75d50
ORjuniperjunosMatch17.2x75d70
ORjuniperjunosMatch17.2x75d92
ORjuniperjunosMatch17.3-
ORjuniperjunosMatch17.3r1-s1
ORjuniperjunosMatch17.3r2
ORjuniperjunosMatch17.3r2-s1
ORjuniperjunosMatch17.3r2-s2
ORjuniperjunosMatch17.3r2-s3
ORjuniperjunosMatch17.3r2-s4
ORjuniperjunosMatch17.3r3-
ORjuniperjunosMatch17.3r3-s1
ORjuniperjunosMatch17.3r3-s2
ORjuniperjunosMatch17.3r3-s3
ORjuniperjunosMatch17.3r3-s4
ORjuniperjunosMatch17.4-
ORjuniperjunosMatch17.4r1
ORjuniperjunosMatch17.4r1-s1
ORjuniperjunosMatch17.4r1-s2
ORjuniperjunosMatch17.4r1-s4
ORjuniperjunosMatch17.4r1-s5
ORjuniperjunosMatch17.4r1-s6
ORjuniperjunosMatch17.4r1-s7
ORjuniperjunosMatch18.1-
ORjuniperjunosMatch18.1r2
ORjuniperjunosMatch18.1r2-s1
ORjuniperjunosMatch18.1r2-s2
ORjuniperjunosMatch18.2x75-
ORjuniperjunosMatch18.2x75-d10
Node
junipersrx100Match-
ORjunipersrx110Match-
ORjunipersrx1400Match-
ORjunipersrx1500Match-
ORjunipersrx210Match-
ORjunipersrx220Match-
ORjunipersrx240Match-
ORjunipersrx300Match-
ORjunipersrx320Match-
ORjunipersrx340Match-
ORjunipersrx3400Match-
ORjunipersrx345Match-
ORjunipersrx3600Match-
ORjunipersrx4100Match-
ORjunipersrx4200Match-
ORjunipersrx4600Match-
ORjunipersrx5400Match-
ORjunipersrx550Match-
ORjunipersrx5600Match-
ORjunipersrx5800Match-
ORjunipersrx650Match-
juniperjunosMatch12.3x48d10
ORjuniperjunosMatch15.1x49-
ORjuniperjunosMatch15.1x49d10
ORjuniperjunosMatch15.1x49d100
ORjuniperjunosMatch15.1x49d110
ORjuniperjunosMatch15.1x49d120
ORjuniperjunosMatch15.1x49d130
ORjuniperjunosMatch15.1x49d140
ORjuniperjunosMatch15.1x49d15
ORjuniperjunosMatch15.1x49d150
ORjuniperjunosMatch15.1x49d160
ORjuniperjunosMatch15.1x49d170
ORjuniperjunosMatch15.1x49d20
ORjuniperjunosMatch15.1x49d25
ORjuniperjunosMatch15.1x49d30
ORjuniperjunosMatch15.1x49d35
ORjuniperjunosMatch15.1x49d40
ORjuniperjunosMatch15.1x49d45
ORjuniperjunosMatch15.1x49d50
ORjuniperjunosMatch15.1x49d55
ORjuniperjunosMatch15.1x49d60
ORjuniperjunosMatch15.1x49d65
ORjuniperjunosMatch15.1x49d70
ORjuniperjunosMatch15.1x49d75
ORjuniperjunosMatch15.1x49d80
ORjuniperjunosMatch15.1x49d90
Node
juniperex2300Match-
ORjuniperex2300-cMatch-
ORjuniperex3400Match-
ORjuniperex4300Match-
ORjuniperex4600Match-
ORjuniperex4650Match-
ORjuniperex9200Match-
ORjuniperex9250Match-
ORjuniperqfx10002Match-
ORjuniperqfx10008Match-
ORjuniperqfx10016Match-
ORjuniperqfx3000-gMatch-
ORjuniperqfx3000-mMatch-
ORjuniperqfx3008-iMatch-
ORjuniperqfx3100Match-
ORjuniperqfx3500Match-
ORjuniperqfx3600Match-
ORjuniperqfx3600-iMatch-
ORjuniperqfx5100Match-
ORjuniperqfx5110Match-
ORjuniperqfx5200Match-
ORjuniperqfx5210Match-
juniperjunosMatch14.1x53-
Node
juniperqfx5110Match-
ORjuniperqfx5200Match-
juniperjunosMatch15.1x53-
ORjuniperjunosMatch15.1x53d10
ORjuniperjunosMatch15.1x53d20
ORjuniperjunosMatch15.1x53d21
ORjuniperjunosMatch15.1x53d210
ORjuniperjunosMatch15.1x53d230
ORjuniperjunosMatch15.1x53d231
ORjuniperjunosMatch15.1x53d232
ORjuniperjunosMatch15.1x53d233
ORjuniperjunosMatch15.1x53d234
ORjuniperjunosMatch15.1x53d235
ORjuniperjunosMatch15.1x53d236
ORjuniperjunosMatch15.1x53d237
ORjuniperjunosMatch15.1x53d25
ORjuniperjunosMatch15.1x53d30
ORjuniperjunosMatch15.1x53d31
ORjuniperjunosMatch15.1x53d32
ORjuniperjunosMatch15.1x53d33
ORjuniperjunosMatch15.1x53d34
ORjuniperjunosMatch15.1x53d40
ORjuniperjunosMatch15.1x53d45
ORjuniperjunosMatch15.1x53d47
ORjuniperjunosMatch15.1x53d48
ORjuniperjunosMatch15.1x53d50
ORjuniperjunosMatch15.1x53d51
ORjuniperjunosMatch15.1x53d52
ORjuniperjunosMatch15.1x53d55
ORjuniperjunosMatch15.1x53d56
ORjuniperjunosMatch15.1x53d57
ORjuniperjunosMatch15.1x53d58
ORjuniperjunosMatch15.1x53d59
ORjuniperjunosMatch15.1x53d60
ORjuniperjunosMatch15.1x53d61
ORjuniperjunosMatch15.1x53d62
ORjuniperjunosMatch15.1x53d63
ORjuniperjunosMatch15.1x53d64
ORjuniperjunosMatch15.1x53d65
ORjuniperjunosMatch15.1x53d66
ORjuniperjunosMatch15.1x53d67
ORjuniperjunosMatch15.1x53d68
ORjuniperjunosMatch15.1x53d69
ORjuniperjunosMatch15.1x53d70
Node
junipernfx150Match-
ORjunipernfx250Match-
juniperjunosMatch15.1x53-
ORjuniperjunosMatch15.1x53d10
ORjuniperjunosMatch15.1x53d20
ORjuniperjunosMatch15.1x53d21
ORjuniperjunosMatch15.1x53d210
ORjuniperjunosMatch15.1x53d230
ORjuniperjunosMatch15.1x53d231
ORjuniperjunosMatch15.1x53d232
ORjuniperjunosMatch15.1x53d233
ORjuniperjunosMatch15.1x53d234
ORjuniperjunosMatch15.1x53d235
ORjuniperjunosMatch15.1x53d236
ORjuniperjunosMatch15.1x53d237
ORjuniperjunosMatch15.1x53d25
ORjuniperjunosMatch15.1x53d30
ORjuniperjunosMatch15.1x53d31
ORjuniperjunosMatch15.1x53d32
ORjuniperjunosMatch15.1x53d33
ORjuniperjunosMatch15.1x53d34
ORjuniperjunosMatch15.1x53d40
ORjuniperjunosMatch15.1x53d45
ORjuniperjunosMatch15.1x53d47
ORjuniperjunosMatch15.1x53d470
ORjuniperjunosMatch15.1x53d48
ORjuniperjunosMatch15.1x53d495
ORjuniperjunosMatch15.1x53d50
ORjuniperjunosMatch15.1x53d51
ORjuniperjunosMatch15.1x53d52
ORjuniperjunosMatch15.1x53d55
ORjuniperjunosMatch15.1x53d56
ORjuniperjunosMatch15.1x53d57
ORjuniperjunosMatch15.1x53d58
ORjuniperjunosMatch15.1x53d59
ORjuniperjunosMatch15.1x53d60
ORjuniperjunosMatch15.1x53d61
ORjuniperjunosMatch15.1x53d62
ORjuniperjunosMatch15.1x53d63
ORjuniperjunosMatch15.1x53d64
ORjuniperjunosMatch15.1x53d65
ORjuniperjunosMatch15.1x53d66
ORjuniperjunosMatch15.1x53d67
ORjuniperjunosMatch15.1x53d68
ORjuniperjunosMatch15.1x53d69
ORjuniperjunosMatch15.1x53d70
ORjuniperjunosMatch15.1x53-d50
ORjuniperjunosMatch15.1x53-d51
ORjuniperjunosMatch15.1x53-d52
ORjuniperjunosMatch15.1x53-d55
ORjuniperjunosMatch15.1x53-d57
ORjuniperjunosMatch15.1x53-d58
ORjuniperjunosMatch15.1x53-d59
Node
juniperex2300Match-
ORjuniperex3400Match-
juniperjunosMatch15.1x53-
ORjuniperjunosMatch15.1x53d10
ORjuniperjunosMatch15.1x53d20
ORjuniperjunosMatch15.1x53d21
ORjuniperjunosMatch15.1x53d210
ORjuniperjunosMatch15.1x53d230
ORjuniperjunosMatch15.1x53d231
ORjuniperjunosMatch15.1x53d232
ORjuniperjunosMatch15.1x53d233
ORjuniperjunosMatch15.1x53d234
ORjuniperjunosMatch15.1x53d235
ORjuniperjunosMatch15.1x53d236
ORjuniperjunosMatch15.1x53d237
ORjuniperjunosMatch15.1x53d25
ORjuniperjunosMatch15.1x53d30
ORjuniperjunosMatch15.1x53d31
ORjuniperjunosMatch15.1x53d32
ORjuniperjunosMatch15.1x53d33
ORjuniperjunosMatch15.1x53d34
ORjuniperjunosMatch15.1x53d40
ORjuniperjunosMatch15.1x53d45
ORjuniperjunosMatch15.1x53d47
ORjuniperjunosMatch15.1x53d470
ORjuniperjunosMatch15.1x53d48
ORjuniperjunosMatch15.1x53d495
ORjuniperjunosMatch15.1x53d50
ORjuniperjunosMatch15.1x53d51
ORjuniperjunosMatch15.1x53d52
ORjuniperjunosMatch15.1x53d55
ORjuniperjunosMatch15.1x53d56
ORjuniperjunosMatch15.1x53d57
ORjuniperjunosMatch15.1x53d58
ORjuniperjunosMatch15.1x53d59
ORjuniperjunosMatch15.1x53d590
ORjuniperjunosMatch15.1x53d591
ORjuniperjunosMatch15.1x53d60
ORjuniperjunosMatch15.1x53d61
ORjuniperjunosMatch15.1x53d62
ORjuniperjunosMatch15.1x53d63
ORjuniperjunosMatch15.1x53d64
ORjuniperjunosMatch15.1x53d65
ORjuniperjunosMatch15.1x53d66
ORjuniperjunosMatch15.1x53d67
ORjuniperjunosMatch15.1x53d68
ORjuniperjunosMatch15.1x53d69
ORjuniperjunosMatch15.1x53d70
ORjuniperjunosMatch15.1x53-d50
ORjuniperjunosMatch15.1x53-d51
ORjuniperjunosMatch15.1x53-d52
ORjuniperjunosMatch15.1x53-d55
ORjuniperjunosMatch15.1x53-d57
ORjuniperjunosMatch15.1x53-d58
ORjuniperjunosMatch15.1x53-d59
| Vendor | Product | Version | CPE |
|---|---|---|---|
| juniper | junos | 12.3 | cpe:2.3:o:juniper:junos:12.3:-:*:*:*:*:*:* |
| juniper | junos | 15.1 | cpe:2.3:o:juniper:junos:15.1:-:*:*:*:*:*:* |
| juniper | junos | 15.1 | cpe:2.3:o:juniper:junos:15.1:f:*:*:*:*:*:* |
| juniper | junos | 15.1 | cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:* |
| juniper | junos | 15.1 | cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:* |
| juniper | junos | 15.1 | cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:* |
| juniper | junos | 15.1 | cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:* |
| juniper | junos | 15.1 | cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:* |
| juniper | junos | 15.1 | cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:* |
| juniper | junos | 15.1 | cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:* |
CNA Affected
[
{
"product": "Junos OS",
"vendor": "Juniper Networks",
"versions": [
{
"status": "affected",
"version": "12.3"
},
{
"lessThan": "15.1R7-S5",
"status": "affected",
"version": "15.1",
"versionType": "custom"
},
{
"lessThan": "15.1F6-S13",
"status": "affected",
"version": "15.1F",
"versionType": "custom"
},
{
"lessThan": "16.1R7-S7",
"status": "affected",
"version": "16.1",
"versionType": "custom"
},
{
"lessThan": "17.1R2-S12, 17.1R3",
"status": "affected",
"version": "17.1",
"versionType": "custom"
},
{
"lessThan": "17.2R2-S7, 17.2R3",
"status": "affected",
"version": "17.2",
"versionType": "custom"
},
{
"lessThan": "17.2X75-D102, 17.2X75-D110, 17.2X75-D44",
"status": "affected",
"version": "17.2X75",
"versionType": "custom"
},
{
"lessThan": "17.3R2-S5, 17.3R3-S5",
"status": "affected",
"version": "17.3",
"versionType": "custom"
},
{
"lessThan": "17.4R1-S8, 17.4R2",
"status": "affected",
"version": "17.4",
"versionType": "custom"
},
{
"lessThan": "18.1R2-S4, 18.1R3",
"status": "affected",
"version": "18.1",
"versionType": "custom"
},
{
"lessThan": "18.2X75-D20",
"status": "affected",
"version": "18.2X75",
"versionType": "custom"
}
]
},
{
"platforms": [
"SRX Series"
],
"product": "Junos OS",
"vendor": "Juniper Networks",
"versions": [
{
"status": "affected",
"version": "12.3X48"
},
{
"lessThan": "15.1X49-D180",
"status": "affected",
"version": "15.1X49",
"versionType": "custom"
}
]
},
{
"platforms": [
"EX and QFX Series"
],
"product": "Junos OS",
"vendor": "Juniper Networks",
"versions": [
{
"status": "affected",
"version": "14.1X53"
}
]
},
{
"platforms": [
"QFX5200/QFX5110"
],
"product": "Junos OS",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "15.1X53-D238",
"status": "affected",
"version": "15.1X53",
"versionType": "custom"
}
]
},
{
"platforms": [
"NFX Series"
],
"product": "Junos OS",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "15.1X53-D497",
"status": "affected",
"version": "15.1X53",
"versionType": "custom"
}
]
},
{
"platforms": [
"EX2300/EX3400"
],
"product": "Junos OS",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "15.1X53-D592",
"status": "affected",
"version": "15.1X53",
"versionType": "custom"
}
]
}
]References
Related
prion
prion
Design/Logic Flaw
2020-04-08 20:15:00
nvd
nvd
CVE-2020-1613
2020-04-08 20:15:13
nessus
nessus
Junos OS: Established BGP Session Termination Vulnerability (JSA10996)
2020-04-30 00:00:00
cvelist
cvelist
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
8.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
AI Score
7.4
Confidence
High
EPSS
0.001
Percentile
42.5%
Related for CVE-2020-1613