CVE-2020-1664

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A stack buffer overflow vulnerability in the device control daemon (DCD) on Juniper Networks Junos OS allows a low privilege local user to create a Denial of Service (DoS) against the daemon or execute arbitrary code in the system with root privilege. This issue affects Juniper Networks Junos OS: 17.3 versions prior to 17.3R3-S9; 17.4 versions prior to 17.4R2-S12, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.2X75 versions prior to 18.2X75-D53, 18.2X75-D65; 18.3 versions prior to 18.3R2-S4, 18.3R3-S4; 18.4 versions prior to 18.4R2-S5, 18.4R3-S5; 19.1 versions prior to 19.1R3-S3; 19.2 versions prior to 19.2R1-S5, 19.2R3; 19.3 versions prior to 19.3R2-S4, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R1-S1, 20.2R2. Versions of Junos OS prior to 17.3 are unaffected by this vulnerability.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-121 CWE-787

Affected software

Vendor	Product	Versions
Juniper Networks	Junos OS	>= 17.3, < 17.3R3-S9; >= 17.4, < 17.4R2-S12, 17.4R3-S3; >= 18.1, < 18.1R3-S11; >= 18.2, < 18.2R3-S6; >= 18.2X75, < 18.2X75-D53, 18.2X75-D65; >= 18.3, < 18.3R2-S4, 18.3R3-S4; >= 18.4, < 18.4R2-S5, 18.4R3-S5; >= 19.1, < 19.1R3-S3; >= 19.2, < 19.2R1-S5, 19.2R3; >= 19.3, < 19.3R2-S4, 19.3R3; >= 19.4, < 19.4R1-S3, 19.4R2-S2, 19.4R3; >= 20.1, < 20.1R1-S4, 20.1R2; >= 20.2, < 20.2R1-S1, 20.2R2

References

https://kb.juniper.net/JSA11061Vendor Advisory
https://kb.juniper.net/JSA11061Vendor Advisory

Timeline

Published: Oct 16, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-16655.3On Juniper Networks MX Series and EX9200 Series, in a certain condition the IPv6 Distributed Denial of Service (DDoS) protection might not t CVE-2020-16666.6The system console configuration option 'log-out-on-disconnect' In Juniper Networks Junos OS Evolved fails to log out an active CLI session CVE-2020-16678.3When DNS filtering is enabled on Juniper Networks Junos MX Series with one of the following cards MS-PIC, MS-MIC or MS-MPC, an incoming stre CVE-2020-16686.5On Juniper Networks EX2300 Series, receipt of a stream of specific multicast packets by the layer2 interface can cause high CPU load, which CVE-2020-16696.3The Juniper Device Manager (JDM) container, used by the disaggregated Junos OS architecture on Juniper Networks NFX350 Series devices, store CVE-2020-16706.5On Juniper Networks EX4300 Series, receipt of a stream of specific IPv4 packets can cause Routing Engine (RE) high CPU load, which could lea CVE-2020-16717.5On Juniper Networks Junos OS platforms configured as DHCPv6 local server or DHCPv6 Relay Agent, Juniper Networks Dynamic Host Configuration CVE-2020-16727.5On Juniper Networks Junos OS devices configured with DHCPv6 relay enabled, receipt of a specific DHCPv6 packet might crash the jdhcpd daemon CVE-2020-16738.8Insufficient Cross-Site Scripting (XSS) protection in Juniper Networks J-Web and web based (HTTP/HTTPS) services allows an unauthenticated a CVE-2020-16758.3When Security Assertion Markup Language (SAML) authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly process invalid a CVE-2020-16767.2When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle SAML responses, allowing a remote attacker to m CVE-2020-16777.2When SAML authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly handle child elements in SAML responses, allowing a re