CVE-2020-1600 — Junos OS: A specific SNMP command can trigger a high CPU usage Denial of Service in the RPD daemon.

Back Back to CVE browser

MEDIUM

Junos OS: A specific SNMP command can trigger a high CPU usage Denial of Service in the RPD daemon.

Published Jan 15, 2020

6.5

MEDIUM

CVSS 3.1

EPSS 1.20%

Description

In a Point-to-Multipoint (P2MP) Label Switched Path (LSP) scenario, an uncontrolled resource consumption vulnerability in the Routing Protocol Daemon (RPD) in Juniper Networks Junos OS allows a specific SNMP request to trigger an infinite loop causing a high CPU usage Denial of Service (DoS) condition. This issue affects both SNMP over IPv4 and IPv6. This issue affects: Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D90; 15.1 versions prior to 15.1R7-S6; 15.1X49 versions prior to 15.1X49-D200; 15.1X53 versions prior to 15.1X53-D238, 15.1X53-D592; 16.1 versions prior to 16.1R7-S5; 16.2 versions prior to 16.2R2-S11; 17.1 versions prior to 17.1R3-S1; 17.2 versions prior to 17.2R3-S2; 17.3 versions prior to 17.3R3-S7; 17.4 versions prior to 17.4R2-S4, 17.4R3; 18.1 versions prior to 18.1R3-S5; 18.2 versions prior to 18.2R3; 18.2X75 versions prior to 18.2X75-D50; 18.3 versions prior to 18.3R2; 18.4 versions prior to 18.4R2; 19.1 versions prior to 19.1R2.

Affected products

Vendor Juniper Networks Product Junos OS Default
n/a
- Version
  12.3X48
  Status
  affected
  Constraints
  <12.3X48-D90
- Version
  15.1
  Status
  affected
  Constraints
  <15.1R7-S6
- Version
  15.1X49
  Status
  affected
  Constraints
  <15.1X49-D200
- Version
  15.1X53
  Status
  affected
  Constraints
  <15.1X53-D238, 15.1X53-D592
- Version
  16.1
  Status
  affected
  Constraints
  <16.1R7-S5
- Version
  16.2
  Status
  affected
  Constraints
  <16.2R2-S11
- Version
  17.1
  Status
  affected
  Constraints
  <17.1R2-S11, 17.1R3-S1
- Version
  17.2
  Status
  affected
  Constraints
  <17.2R3-S2
- Version
  17.3
  Status
  affected
  Constraints
  <17.3R3-S7
- Version
  17.4
  Status
  affected
  Constraints
  <17.4R2-S4, 17.4R3
- Version
  18.1
  Status
  affected
  Constraints
  <18.1R3-S5
- Version
  18.2
  Status
  affected
  Constraints
  <18.2R3
- Version
  18.2X75
  Status
  affected
  Constraints
  <18.2X75-D50
- Version
  18.3
  Status
  affected
  Constraints
  <18.3R2
- Version
  18.4
  Status
  affected
  Constraints
  <18.4R2
- Version
  19.1
  Status
  affected
  Constraints
  <19.1R2
- Version
  19.2
  Status
  affected
  Constraints
  <19.2R1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Juniper Networks

Junos OS

n/a

Version	Status	Constraints
12.3X48	affected	<12.3X48-D90
15.1	affected	<15.1R7-S6
15.1X49	affected	<15.1X49-D200
15.1X53	affected	<15.1X53-D238, 15.1X53-D592
16.1	affected	<16.1R7-S5
16.2	affected	<16.2R2-S11
17.1	affected	<17.1R2-S11, 17.1R3-S1
17.2	affected	<17.2R3-S2
17.3	affected	<17.3R3-S7
17.4	affected	<17.4R2-S4, 17.4R3
18.1	affected	<18.1R3-S5
18.2	affected	<18.2R3
18.2X75	affected	<18.2X75-D50
18.3	affected	<18.3R2
18.4	affected	<18.4R2
19.1	affected	<19.1R2
19.2	affected	<19.2R1

Remediation

Vendor solution

The following software releases have been updated to resolve this specific issue: 12.3X48-D90, 15.1X49-D200, 15.1R7-S6, 15.1X53-D238, 15.1X53-D592, 16.1R7-S5, 16.2R2-S11, 17.1R3-S1, 17.2R3-S2, 17.3R3-S7, 17.4R2-S4, 17.4R3, 18.1R3-S5, 18.2R3, 18.2X75-D50, 18.3R2, 18.4R2, 19.1R2, 19.2R1, and all subsequent releases.

Metrics

1.20% 0.01196

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.

EPSS probability 0.01196

Score over time

2021–2026

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Percentile over time

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Table of values (12 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 3, 2026	1.20% (0.01196)	67.03th	v5 (v2026.06.15)
Sep 20, 2026	1.20% (0.01196)	66.70th	v5 (v2026.06.15)
Jul 20, 2024	0.08% (0.00081)	35.33th	v3 (v2023.03.01)
Jun 21, 2024	0.08% (0.00081)	35.08th	v3 (v2023.03.01)
Mar 7, 2023	0.08% (0.00081)	33.07th	v3 (v2023.03.01)
Mar 6, 2023	0.89% (0.00885)	27.89th	v2 (v2022.01.01)
Apr 1, 2022	0.89% (0.00885)	24.24th	v2 (v2022.01.01)
Feb 4, 2022	4.50% (0.04499)	74.08th	v2 (v2022.01.01)
Feb 3, 2022	3.40% (0.03396)	67.40th	v1
Jan 6, 2022	3.40% (0.03396)	67.08th	v1
Jan 5, 2022	0.78% (0.00777)	52.24th	v5 (v2026.06.15)
Apr 14, 2021	0.78% (0.00777)	0.00th	v1

Weaknesses (2)

CWE-400

Uncontrolled Resource Consumption

CWE-835

References (2)

https://kb.juniper.net/JSA10979
x_refsource_CONFIRMVendor Advisory
https://prsearch.juniper.net/InfoCenter/index?page=prcontent&id=PR1402185
x_refsource_MISCPermissions Required

Link	Providers	Tags
https://kb.juniper.net/JSA10979		x_refsource_CONFIRMVendor Advisory
https://prsearch.juniper.net/InfoCenter/index?page=prcontent&id=PR1402185		x_refsource_MISCPermissions Required