CVE-2020-1664 - Junos OS: Buffer overflow vulnerability in device control daemon

Back Back to CVE browser

HIGH

Junos OS: Buffer overflow vulnerability in device control daemon

Published Oct 16, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.43%

Description

A stack buffer overflow vulnerability in the device control daemon (DCD) on Juniper Networks Junos OS allows a low privilege local user to create a Denial of Service (DoS) against the daemon or execute arbitrary code in the system with root privilege. This issue affects Juniper Networks Junos OS: 17.3 versions prior to 17.3R3-S9; 17.4 versions prior to 17.4R2-S12, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.2X75 versions prior to 18.2X75-D53, 18.2X75-D65; 18.3 versions prior to 18.3R2-S4, 18.3R3-S4; 18.4 versions prior to 18.4R2-S5, 18.4R3-S5; 19.1 versions prior to 19.1R3-S3; 19.2 versions prior to 19.2R1-S5, 19.2R3; 19.3 versions prior to 19.3R2-S4, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R1-S1, 20.2R2. Versions of Junos OS prior to 17.3 are unaffected by this vulnerability.

Affected products

Vendor Juniper Networks Product Junos OS Default
n/a
- Version
  17.3
  Status
  affected
  Constraints
  <17.3R3-S9
- Version
  17.4
  Status
  affected
  Constraints
  <17.4R2-S12, 17.4R3-S3
- Version
  18.1
  Status
  affected
  Constraints
  <18.1R3-S11
- Version
  18.2
  Status
  affected
  Constraints
  <18.2R3-S6
- Version
  18.2X75
  Status
  affected
  Constraints
  <18.2X75-D53, 18.2X75-D65
- Version
  18.3
  Status
  affected
  Constraints
  <18.3R2-S4, 18.3R3-S4
- Version
  18.4
  Status
  affected
  Constraints
  <18.4R2-S5, 18.4R3-S5
- Version
  19.1
  Status
  affected
  Constraints
  <19.1R3-S3
- Version
  19.2
  Status
  affected
  Constraints
  <19.2R1-S5, 19.2R3
- Version
  19.3
  Status
  affected
  Constraints
  <19.3R2-S4, 19.3R3
- Version
  19.4
  Status
  affected
  Constraints
  <19.4R1-S3, 19.4R2-S2, 19.4R3
- Version
  20.1
  Status
  affected
  Constraints
  <20.1R1-S4, 20.1R2
- Version
  20.2
  Status
  affected
  Constraints
  <20.2R1-S1, 20.2R2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Juniper Networks

Junos OS

n/a

Version	Status	Constraints
17.3	affected	<17.3R3-S9
17.4	affected	<17.4R2-S12, 17.4R3-S3
18.1	affected	<18.1R3-S11
18.2	affected	<18.2R3-S6
18.2X75	affected	<18.2X75-D53, 18.2X75-D65
18.3	affected	<18.3R2-S4, 18.3R3-S4
18.4	affected	<18.4R2-S5, 18.4R3-S5
19.1	affected	<19.1R3-S3
19.2	affected	<19.2R1-S5, 19.2R3
19.3	affected	<19.3R2-S4, 19.3R3
19.4	affected	<19.4R1-S3, 19.4R2-S2, 19.4R3
20.1	affected	<20.1R1-S4, 20.1R2
20.2	affected	<20.2R1-S1, 20.2R2

Remediation

Vendor solution

The following software releases have been updated to resolve this specific issue: Junos OS 17.3R3-S9, 17.4R2-S12, 17.4R3-S3, 18.1R3-S11, 18.2R3-S6, 18.2X75-D53, 18.2X75-D65, 18.3R2-S4, 18.3R3-S4, 18.4R2-S5, 18.4R3-S5, 19.1R3-S3, 19.2R1-S5, 19.2R3, 19.3R2-S4, 19.3R3, 19.4R1-S3, 19.4R2-S2, 19.4R3, 20.1R1-S4, 20.1R2, 20.2R1-S1, 20.2R2, 20.3R1, and all subsequent releases.

Weaknesses (2)

CWE-121

CWE-787

Out-of-bounds Write