CVE-2020-1625 Information

Description

The kernel memory usage represented as \temp\ via ‘show system virtual-memory’ may constantly increase when Integrated Routing and Bridging (IRB) is configured with multiple underlay physical interfaces and one interface flaps. This memory leak can affect running daemons (processes) leading to an extended Denial of Service (DoS) condition. Usage of \temp\ virtual memory shown here by a constantly increasing value of outstanding Requests can be monitored by executing the ‘show system virtual-memory’ command as shown below: user@junos show system virtual-memory |match \fpc|type|temp\ fpc0: ————————————————————————– Type InUse MemUse HighUse Requests Size(s) temp 2023 431K - 10551 163264128256512102420484096655362621441048576209715241943048388608 fpc1: ————————————————————————– Type InUse MemUse HighUse Requests Size(s) temp 2020 431K - 6460 163264128256512102420484096655362621441048576209715241943048388608 user@junos show system virtual-memory |match \fpc|type|temp\ fpc0: ————————————————————————– Type InUse MemUse HighUse Requests Size(s) temp 2023 431K - 16101 163264128256512102420484096655362621441048576209715241943048388608 fpc1: ————————————————————————– Type InUse MemUse HighUse Requests Size(s) temp 2020 431K - 6665 163264128256512102420484096655362621441048576209715241943048388608 user@junos show system virtual-memory |match \fpc|type|temp\ fpc0: ————————————————————————– Type InUse MemUse HighUse Requests Size(s) temp 2023 431K - 21867 163264128256512102420484096655362621441048576209715241943048388608 fpc1: ————————————————————————– Type InUse MemUse HighUse Requests Size(s) temp 2020 431K - 6858 163264128256512102420484096655362621441048576209715241943048388608 This issue affects Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S6; 17.1 versions prior to 17.1R2-S11 17.1R3-S1; 17.2 versions prior to 17.2R2-S8 17.2R3-S3; 17.2X75 versions prior to 17.2X75-D44; 17.3 versions prior to 17.3R2-S5 17.3R3-S6; 17.4 versions prior to 17.4R2-S5 17.4R3; 18.1 versions prior to 18.1R3-S7; 18.2 versions prior to 18.2R2-S5 18.2R3; 18.2X75 versions prior to 18.2X75-D33 18.2X75-D411 18.2X75-D420 18.2X75-D60; 18.3 versions prior to 18.3R1-S5 18.3R2-S3 18.3R3; 18.4 versions prior to 18.4R2-S2 18.4R3; 19.1 versions prior to 19.1R1-S3 19.1R2; 19.2 versions prior to 19.2R1-S3 19.2R2. This issue does not affect Juniper Networks Junos OS 12.3 and 15.1.

CVSS Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Reference

https://kb.juniper.net/JSA11004

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

NONE

Availability Impact

NONE

Base Score

HIGH

Base Severity

6.5