CVE-2020-1638

The FPC (Flexible PIC Concentrator) of Juniper Networks Junos OS and Junos OS Evolved may restart after processing a specific IPv4 packet. Only packets destined to the device itself, successfully reaching the RE through existing edge and control plane filtering, will be able to cause the FPC restart. When this issue occurs, all traffic via the FPC will be dropped. By continuously sending this specific IPv4 packet, an attacker can repeatedly crash the FPC, causing an extended Denial of Service (DoS) condition. This issue can only occur when processing a specific IPv4 packet. IPv6 packets cannot trigger this issue. This issue affects: Juniper Networks Junos OS on MX Series with MPC10E or MPC11E and PTX10001: 19.2 versions prior to 19.2R1-S4, 19.2R2; 19.3 versions prior to 19.3R2-S2, 19.3R3; 19.4 versions prior to 19.4R1-S1, 19.4R2. Juniper Networks Junos OS Evolved on on QFX5220, and PTX10003 series: 19.2-EVO versions; 19.3-EVO versions; 19.4-EVO versions prior to 19.4R2-EVO. This issue does not affect Junos OS versions prior to 19.2R1. This issue does not affect Junos OS Evolved versions prior to 19.2R1-EVO.

• CWE-467

• https://kb.juniper.net/JSA11019Vendor Advisory
• https://kb.juniper.net/JSA11019Vendor Advisory

Published

Apr 8, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-1631A vulnerability in the HTTP/HTTPS service used by J-Web, Web…9.8
• CVE-2020-16310A division by zero vulnerability in dot24_print_page() in de…5.5
• CVE-2020-1632In a certain condition, receipt of a specific BGP UPDATE mes…8.6
• CVE-2020-1633Due to a new NDP proxy feature for EVPN leaf nodes introduce…6.5
• CVE-2020-1634On High-End SRX Series devices, in specific configurations a…7.5
• CVE-2020-1637A vulnerability in Juniper Networks SRX Series device config…6.5
• CVE-2020-1639When an attacker sends a specific crafted Ethernet Operation…7.5
• CVE-2020-1640An improper use of a validation framework when processing in…7.5
• CVE-2020-1641A Race Condition vulnerability in Juniper Networks Junos OS …6.5
• CVE-2020-1643Execution of the "show ospf interface extensive" or "show os…5.5
• CVE-2020-1644On Juniper Networks Junos OS and Junos OS Evolved devices, t…7.5
• CVE-2020-1645When DNS filtering is enabled on Juniper Networks Junos MX S…8.3