CVE-2020-1632

In a certain condition, receipt of a specific BGP UPDATE message might cause Juniper Networks Junos OS and Junos OS Evolved devices to advertise an invalid BGP UPDATE message to other peers, causing the other peers to terminate the established BGP session, creating a Denial of Service (DoS) condition. For example, Router A sends a specific BGP UPDATE to Router B, causing Router B to send an invalid BGP UPDATE message to Router C, resulting in termination of the BGP session between Router B and Router C. This issue might occur when there is at least a single BGP session established on the device that does not support 4 Byte AS extension (RFC 4893). Repeated receipt of the same BGP UPDATE can result in an extended DoS condition. This issue affects Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S6; 16.2 versions prior to 16.2R2-S11; 17.1 versions prior to 17.1R2-S11, 17.1R3-S2; 17.2 versions prior to 17.2R1-S9, 17.2R2-S8, 17.2R3-S3; 17.2X75 versions prior to 17.2X75-D105, 17.2X75-D110, 17.2X75-D44; 17.3 versions prior to 17.3R2-S5, 17.3R3-S7; 17.4 versions prior to 17.4R2-S8, 17.4R3; 18.1 versions prior to 18.1R3-S8; 18.2 versions prior to 18.2R2-S6, 18.2R3-S2; 18.2X75 versions prior to 18.2X75-D12, 18.2X75-D33, 18.2X75-D411, 18.2X75-D420, 18.2X75-D51, 18.2X75-D60; 18.3 versions prior to 18.3R1-S6, 18.3R2-S3, 18.3R3; 18.4 versions prior to 18.4R1-S5, 18.4R3; 18.4 version 18.4R2 and later versions; 19.1 versions prior to 19.1R1-S3, 19.1R2; 19.2 versions prior to 19.2R1-S2, 19.2R2. This issue does not affect Juniper Networks Junos OS prior to 16.1R1. This issue affects Juniper Networks Junos OS Evolved prior to 19.2R2-EVO.

• CWE-755
• CWE-755

• https://kb.juniper.net/JSA11013Vendor Advisory
• https://kb.juniper.net/JSA11013Vendor Advisory

Published

Apr 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-16306A null pointer dereference vulnerability in devices/gdevtsep…5.5
• CVE-2020-16307A null pointer dereference vulnerability in devices/vector/g…5.5
• CVE-2020-16308A buffer overflow vulnerability in p_print_image() in device…5.5
• CVE-2020-16309A buffer overflow vulnerability in lxm5700m_print_page() in …5.5
• CVE-2020-1631A vulnerability in the HTTP/HTTPS service used by J-Web, Web…9.8
• CVE-2020-16310A division by zero vulnerability in dot24_print_page() in de…5.5
• CVE-2020-1633Due to a new NDP proxy feature for EVPN leaf nodes introduce…6.5
• CVE-2020-1634On High-End SRX Series devices, in specific configurations a…7.5
• CVE-2020-1637A vulnerability in Juniper Networks SRX Series device config…6.5
• CVE-2020-1638The FPC (Flexible PIC Concentrator) of Juniper Networks Juno…7.5
• CVE-2020-1639When an attacker sends a specific crafted Ethernet Operation…7.5
• CVE-2020-1640An improper use of a validation framework when processing in…7.5