CVE-2020-1660

When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stream of packets processed by the Multiservices PIC Management Daemon (mspmand) process, responsible for managing "URL Filtering service", may crash, causing the Services PIC to restart. While the Services PIC is restarting, all PIC services including DNS filtering service (DNS sink holing) will be bypassed until the Services PIC completes its boot process. This vulnerability might allow an attacker to cause an extended Denial of Service (DoS) attack against the device and to cause clients to be vulnerable to DNS based attacks by malicious DNS servers when they send DNS requests through the device. As a result, devices which were once protected by the DNS Filtering service are no longer protected and at risk of exploitation. This issue affects Juniper Networks Junos OS: 17.3 versions prior to 17.3R3-S8; 18.3 versions prior to 18.3R3-S1; 18.4 versions prior to 18.4R3; 19.1 versions prior to 19.1R3; 19.2 versions prior to 19.2R2; 19.3 versions prior to 19.3R3. This issue does not affect Juniper Networks Junos OS 17.4, 18.1, and 18.2.

• CWE-362

• https://kb.juniper.net/JSA11054Vendor Advisory
• https://kb.juniper.net/JSA11054Vendor Advisory

Published

Oct 16, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-16590A double free vulnerability exists in the Binary File Descri…5.5
• CVE-2020-16591A Denial of Service vulnerability exists in the Binary File …5.5
• CVE-2020-16592A use after free issue exists in the Binary File Descriptor …5.5
• CVE-2020-16593A Null Pointer Dereference vulnerability exists in the Binar…5.5
• CVE-2020-16598Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-16599A Null Pointer Dereference vulnerability exists in the Binar…5.5
• CVE-2020-16600A Use After Free vulnerability exists in Artifex Software, I…7.8
• CVE-2020-16602Razer Chroma SDK Rest Server through 3.12.17 allows remote a…8.1
• CVE-2020-16608Notable 1.8.4 allows XSS via crafted Markdown text, with res…9.6
• CVE-2020-1661On Juniper Networks Junos OS devices configured as a DHCP fo…5.3
• CVE-2020-16610Hoosk Codeigniter CMS before 1.7.2 is affected by a Cross Si…4.3
• CVE-2020-1662On Juniper Networks Junos OS and Junos OS Evolved devices, B…7.5