CVE-2020-1626

Junos OS Evolved: Denial of Service vulnerability in processing high rate of specific packets

High · published April 8, 2020

CVSS v3.1
7.5
EPSS
1%
Percentile
71.6
In the wild
Unconfirmed
What it is

A vulnerability in Juniper Networks Junos OS Evolved may allow an attacker to cause a Denial of Service (DoS) by sending a high rate of specific packets to the device, resulting in a pfemand process crash. The pfemand process is responsible for packet forwarding on the device. By continuously sending the packet flood, an attacker can repeatedly crash the pfemand process causing a sustained Denial of Service. This issue can only be triggered by traffic sent to the device. Transit traffic does not cause this issue. This issue affects all version of Junos OS Evolved prior to 19.1R1-EVO.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01363 · 71.6th percentile
Published
2020-04-08T19:25Z
EPSS history
Timeline
  • 08 APR 19:25Z
    Junos OS Evolved: Denial of Service vulnerability in processing high rate of specific packets
    cvelistv5