CVE-2020-1645

When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets processed by the Multiservices PIC Management Daemon (mspmand) process, responsible for managing "URL Filtering service", may crash, causing the Services PIC to restart. While the Services PIC is restarting, all PIC services including DNS filtering service (DNS sink holing) will be bypassed until the Services PIC completes its boot process. If the issue occurs, system core-dumps output will show a crash of mspmand process: root@device> show system core-dumps -rw-rw---- 1 nobody wheel 575685123 <Date> /var/tmp/pics/mspmand.core.<*>.gz This issue affects Juniper Networks Junos OS: 17.3 versions prior to 17.3R3-S8; 18.3 versions prior to 18.3R2-S4, 18.3R3-S1; 18.4 versions prior to 18.4R2-S5, 18.4R3; 19.1 versions prior to 19.1R2-S2, 19.1R3; 19.2 versions prior to 19.2R1-S5, 19.2R2; 19.3 versions prior to 19.3R2-S3, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2. This issue does not affect Juniper Networks Junos OS releases prior to 17.3R2.

• CWE-362

• https://kb.juniper.net/JSA11028Vendor Advisory
• https://kb.juniper.net/JSA11028Vendor Advisory

Published

Jul 17, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-1638The FPC (Flexible PIC Concentrator) of Juniper Networks Juno…7.5
• CVE-2020-1639When an attacker sends a specific crafted Ethernet Operation…7.5
• CVE-2020-1640An improper use of a validation framework when processing in…7.5
• CVE-2020-1641A Race Condition vulnerability in Juniper Networks Junos OS …6.5
• CVE-2020-1643Execution of the "show ospf interface extensive" or "show os…5.5
• CVE-2020-1644On Juniper Networks Junos OS and Junos OS Evolved devices, t…7.5
• CVE-2020-1646On Juniper Networks Junos OS and Junos OS Evolved devices, p…7.5
• CVE-2020-1647On Juniper Networks SRX Series with ICAP (Internet Content A…9.8
• CVE-2020-1648On Juniper Networks Junos OS and Junos OS Evolved devices, p…7.5
• CVE-2020-1649When a device running Juniper Networks Junos OS with MPC7, M…7.5
• CVE-2020-1650On Juniper Networks Junos MX Series with service card config…7.5
• CVE-2020-1651On Juniper Networks MX series, receipt of a stream of specif…6.5