CVE Vulnerabilities

CVE-2020-1600

Loop with Unreachable Exit Condition ('Infinite Loop')

Published: Jan 15, 2020 | Modified: Sep 14, 2021
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
6.8 MEDIUM
AV:N/AC:L/Au:S/C:N/I:N/A:C
RedHat/V2
RedHat/V3
Ubuntu

In a Point-to-Multipoint (P2MP) Label Switched Path (LSP) scenario, an uncontrolled resource consumption vulnerability in the Routing Protocol Daemon (RPD) in Juniper Networks Junos OS allows a specific SNMP request to trigger an infinite loop causing a high CPU usage Denial of Service (DoS) condition. This issue affects both SNMP over IPv4 and IPv6. This issue affects: Juniper Networks Junos OS: 12.3X48 versions prior to 12.3X48-D90; 15.1 versions prior to 15.1R7-S6; 15.1X49 versions prior to 15.1X49-D200; 15.1X53 versions prior to 15.1X53-D238, 15.1X53-D592; 16.1 versions prior to 16.1R7-S5; 16.2 versions prior to 16.2R2-S11; 17.1 versions prior to 17.1R3-S1; 17.2 versions prior to 17.2R3-S2; 17.3 versions prior to 17.3R3-S7; 17.4 versions prior to 17.4R2-S4, 17.4R3; 18.1 versions prior to 18.1R3-S5; 18.2 versions prior to 18.2R3; 18.2X75 versions prior to 18.2X75-D50; 18.3 versions prior to 18.3R2; 18.4 versions prior to 18.4R2; 19.1 versions prior to 19.1R2.

Weakness

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Affected Software

Name Vendor Start Version End Version
Junos Juniper 12.3x48-d10 (including) 12.3x48-d10 (including)
Junos Juniper 12.3x48-d15 (including) 12.3x48-d15 (including)
Junos Juniper 12.3x48-d20 (including) 12.3x48-d20 (including)
Junos Juniper 12.3x48-d25 (including) 12.3x48-d25 (including)
Junos Juniper 12.3x48-d30 (including) 12.3x48-d30 (including)
Junos Juniper 12.3x48-d35 (including) 12.3x48-d35 (including)
Junos Juniper 12.3x48-d40 (including) 12.3x48-d40 (including)
Junos Juniper 12.3x48-d45 (including) 12.3x48-d45 (including)
Junos Juniper 12.3x48-d50 (including) 12.3x48-d50 (including)
Junos Juniper 12.3x48-d55 (including) 12.3x48-d55 (including)
Junos Juniper 12.3x48-d60 (including) 12.3x48-d60 (including)
Junos Juniper 12.3x48-d65 (including) 12.3x48-d65 (including)
Junos Juniper 12.3x48-d70 (including) 12.3x48-d70 (including)
Junos Juniper 12.3x48-d75 (including) 12.3x48-d75 (including)
Junos Juniper 12.3x48-d80 (including) 12.3x48-d80 (including)
Junos Juniper 12.3x48-d85 (including) 12.3x48-d85 (including)
Junos Juniper 15.1-r7 (including) 15.1-r7 (including)
Junos Juniper 15.1-r7-s1 (including) 15.1-r7-s1 (including)
Junos Juniper 15.1-r7-s2 (including) 15.1-r7-s2 (including)
Junos Juniper 15.1-r7-s3 (including) 15.1-r7-s3 (including)
Junos Juniper 15.1-r7-s4 (including) 15.1-r7-s4 (including)
Junos Juniper 15.1-r7-s5 (including) 15.1-r7-s5 (including)
Junos Juniper 15.1x49-d10 (including) 15.1x49-d10 (including)
Junos Juniper 15.1x49-d150 (including) 15.1x49-d150 (including)
Junos Juniper 15.1x49-d20 (including) 15.1x49-d20 (including)
Junos Juniper 15.1x49-d30 (including) 15.1x49-d30 (including)
Junos Juniper 15.1x49-d35 (including) 15.1x49-d35 (including)
Junos Juniper 15.1x49-d40 (including) 15.1x49-d40 (including)
Junos Juniper 15.1x49-d45 (including) 15.1x49-d45 (including)
Junos Juniper 15.1x49-d50 (including) 15.1x49-d50 (including)
Junos Juniper 15.1x49-d55 (including) 15.1x49-d55 (including)
Junos Juniper 15.1x49-d60 (including) 15.1x49-d60 (including)
Junos Juniper 15.1x49-d65 (including) 15.1x49-d65 (including)
Junos Juniper 15.1x49-d70 (including) 15.1x49-d70 (including)
Junos Juniper 15.1x49-d75 (including) 15.1x49-d75 (including)
Junos Juniper 15.1x49-d80 (including) 15.1x49-d80 (including)
Junos Juniper 15.1x53-d20 (including) 15.1x53-d20 (including)
Junos Juniper 15.1x53-d21 (including) 15.1x53-d21 (including)
Junos Juniper 15.1x53-d210 (including) 15.1x53-d210 (including)
Junos Juniper 15.1x53-d25 (including) 15.1x53-d25 (including)
Junos Juniper 15.1x53-d30 (including) 15.1x53-d30 (including)
Junos Juniper 15.1x53-d31 (including) 15.1x53-d31 (including)
Junos Juniper 15.1x53-d32 (including) 15.1x53-d32 (including)
Junos Juniper 15.1x53-d33 (including) 15.1x53-d33 (including)
Junos Juniper 15.1x53-d34 (including) 15.1x53-d34 (including)
Junos Juniper 15.1x53-d40 (including) 15.1x53-d40 (including)
Junos Juniper 15.1x53-d45 (including) 15.1x53-d45 (including)
Junos Juniper 15.1x53-d470 (including) 15.1x53-d470 (including)
Junos Juniper 15.1x53-d495 (including) 15.1x53-d495 (including)
Junos Juniper 15.1x53-d56 (including) 15.1x53-d56 (including)
Junos Juniper 15.1x53-d60 (including) 15.1x53-d60 (including)
Junos Juniper 15.1x53-d61 (including) 15.1x53-d61 (including)
Junos Juniper 15.1x53-d62 (including) 15.1x53-d62 (including)
Junos Juniper 15.1x53-d63 (including) 15.1x53-d63 (including)
Junos Juniper 15.1x53-d65 (including) 15.1x53-d65 (including)
Junos Juniper 15.1x53-d70 (including) 15.1x53-d70 (including)
Junos Juniper 16.1 (including) 16.1 (including)
Junos Juniper 16.1-r1 (including) 16.1-r1 (including)
Junos Juniper 16.1-r2 (including) 16.1-r2 (including)
Junos Juniper 16.1-r3 (including) 16.1-r3 (including)
Junos Juniper 16.1-r3-s10 (including) 16.1-r3-s10 (including)
Junos Juniper 16.1-r4 (including) 16.1-r4 (including)
Junos Juniper 16.1-r5 (including) 16.1-r5 (including)
Junos Juniper 16.1-r5-s4 (including) 16.1-r5-s4 (including)
Junos Juniper 16.1-r6 (including) 16.1-r6 (including)
Junos Juniper 16.1-r6-s1 (including) 16.1-r6-s1 (including)
Junos Juniper 16.1-r7 (including) 16.1-r7 (including)
Junos Juniper 16.1-r7-s2 (including) 16.1-r7-s2 (including)
Junos Juniper 16.1-r7-s3 (including) 16.1-r7-s3 (including)
Junos Juniper 16.1-r7-s4 (including) 16.1-r7-s4 (including)
Junos Juniper 16.2 (including) 16.2 (including)
Junos Juniper 16.2-r1 (including) 16.2-r1 (including)
Junos Juniper 16.2-r2 (including) 16.2-r2 (including)
Junos Juniper 16.2-r2-s1 (including) 16.2-r2-s1 (including)
Junos Juniper 16.2-r2-s10 (including) 16.2-r2-s10 (including)
Junos Juniper 16.2-r2-s2 (including) 16.2-r2-s2 (including)
Junos Juniper 16.2-r2-s5 (including) 16.2-r2-s5 (including)
Junos Juniper 16.2-r2-s6 (including) 16.2-r2-s6 (including)
Junos Juniper 16.2-r2-s7 (including) 16.2-r2-s7 (including)
Junos Juniper 16.2-r2-s8 (including) 16.2-r2-s8 (including)
Junos Juniper 16.2-r2-s9 (including) 16.2-r2-s9 (including)
Junos Juniper 17.1 (including) 17.1 (including)
Junos Juniper 17.1-r1 (including) 17.1-r1 (including)
Junos Juniper 17.1-r2-s1 (including) 17.1-r2-s1 (including)
Junos Juniper 17.1-r2-s10 (including) 17.1-r2-s10 (including)
Junos Juniper 17.1-r2-s2 (including) 17.1-r2-s2 (including)
Junos Juniper 17.1-r2-s3 (including) 17.1-r2-s3 (including)
Junos Juniper 17.1-r2-s4 (including) 17.1-r2-s4 (including)
Junos Juniper 17.1-r2-s5 (including) 17.1-r2-s5 (including)
Junos Juniper 17.1-r2-s6 (including) 17.1-r2-s6 (including)
Junos Juniper 17.1-r2-s7 (including) 17.1-r2-s7 (including)
Junos Juniper 17.1-r2-s9 (including) 17.1-r2-s9 (including)
Junos Juniper 17.1-r3 (including) 17.1-r3 (including)
Junos Juniper 17.2 (including) 17.2 (including)
Junos Juniper 17.2-r1-s2 (including) 17.2-r1-s2 (including)
Junos Juniper 17.2-r1-s4 (including) 17.2-r1-s4 (including)
Junos Juniper 17.2-r1-s7 (including) 17.2-r1-s7 (including)
Junos Juniper 17.2-r1-s8 (including) 17.2-r1-s8 (including)
Junos Juniper 17.2-r2-s6 (including) 17.2-r2-s6 (including)
Junos Juniper 17.2-r2-s7 (including) 17.2-r2-s7 (including)
Junos Juniper 17.2-r3-s1 (including) 17.2-r3-s1 (including)
Junos Juniper 17.3 (including) 17.3 (including)
Junos Juniper 17.3-r1-s1 (including) 17.3-r1-s1 (including)
Junos Juniper 17.3-r2 (including) 17.3-r2 (including)
Junos Juniper 17.3-r2-s1 (including) 17.3-r2-s1 (including)
Junos Juniper 17.3-r2-s2 (including) 17.3-r2-s2 (including)
Junos Juniper 17.3-r3-s1 (including) 17.3-r3-s1 (including)
Junos Juniper 17.3-r3-s2 (including) 17.3-r3-s2 (including)
Junos Juniper 17.3-r3-s3 (including) 17.3-r3-s3 (including)
Junos Juniper 17.3-r3-s4 (including) 17.3-r3-s4 (including)
Junos Juniper 17.3-r3-s5 (including) 17.3-r3-s5 (including)
Junos Juniper 17.3-r3-s6 (including) 17.3-r3-s6 (including)
Junos Juniper 17.4 (including) 17.4 (including)
Junos Juniper 17.4-r1 (including) 17.4-r1 (including)
Junos Juniper 17.4-r1-s1 (including) 17.4-r1-s1 (including)
Junos Juniper 17.4-r1-s2 (including) 17.4-r1-s2 (including)
Junos Juniper 17.4-r1-s4 (including) 17.4-r1-s4 (including)
Junos Juniper 17.4-r1-s6 (including) 17.4-r1-s6 (including)
Junos Juniper 17.4-r1-s7 (including) 17.4-r1-s7 (including)
Junos Juniper 17.4-r2 (including) 17.4-r2 (including)
Junos Juniper 17.4-r2-s1 (including) 17.4-r2-s1 (including)
Junos Juniper 17.4-r2-s3 (including) 17.4-r2-s3 (including)
Junos Juniper 18.1 (including) 18.1 (including)
Junos Juniper 18.1-r2 (including) 18.1-r2 (including)
Junos Juniper 18.1-r2-s1 (including) 18.1-r2-s1 (including)
Junos Juniper 18.1-r2-s2 (including) 18.1-r2-s2 (including)
Junos Juniper 18.1-r2-s4 (including) 18.1-r2-s4 (including)
Junos Juniper 18.1-r3 (including) 18.1-r3 (including)
Junos Juniper 18.1-r3-s2 (including) 18.1-r3-s2 (including)
Junos Juniper 18.1-r3-s3 (including) 18.1-r3-s3 (including)
Junos Juniper 18.1-r3-s4 (including) 18.1-r3-s4 (including)
Junos Juniper 18.2 (including) 18.2 (including)
Junos Juniper 18.2-r1-s5 (including) 18.2-r1-s5 (including)
Junos Juniper 18.2-r2-s1 (including) 18.2-r2-s1 (including)
Junos Juniper 18.2-r2-s2 (including) 18.2-r2-s2 (including)
Junos Juniper 18.2-r2-s3 (including) 18.2-r2-s3 (including)
Junos Juniper 18.2-r2-s4 (including) 18.2-r2-s4 (including)
Junos Juniper 18.2-r2-s5 (including) 18.2-r2-s5 (including)
Junos Juniper 18.2-r2-s6 (including) 18.2-r2-s6 (including)
Junos Juniper 18.2x75 (including) 18.2x75 (including)
Junos Juniper 18.2x75-d20 (including) 18.2x75-d20 (including)
Junos Juniper 18.2x75-d40 (including) 18.2x75-d40 (including)
Junos Juniper 18.3 (including) 18.3 (including)
Junos Juniper 18.3-r1 (including) 18.3-r1 (including)
Junos Juniper 18.3-r1-s1 (including) 18.3-r1-s1 (including)
Junos Juniper 18.3-r1-s2 (including) 18.3-r1-s2 (including)
Junos Juniper 18.3-r1-s3 (including) 18.3-r1-s3 (including)
Junos Juniper 18.3-r2 (including) 18.3-r2 (including)
Junos Juniper 18.4 (including) 18.4 (including)
Junos Juniper 18.4-r1 (including) 18.4-r1 (including)
Junos Juniper 18.4-r1-s1 (including) 18.4-r1-s1 (including)
Junos Juniper 18.4-r1-s2 (including) 18.4-r1-s2 (including)
Junos Juniper 18.4-r1-s3 (including) 18.4-r1-s3 (including)
Junos Juniper 18.4-r1-s4 (including) 18.4-r1-s4 (including)
Junos Juniper 18.4-r1-s5 (including) 18.4-r1-s5 (including)
Junos Juniper 19.1-r1 (including) 19.1-r1 (including)

References