CVE-2020-1651

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on MX Series versions 17.2 prior to 17.2R3-S4 Juniper Networks Junos OS on MX Series versions 17.2X75 prior to 17.2X75-D105.19 Juniper Networks Junos OS on MX Series versions 17.3 prior to 17.3R3-S7 Juniper Networks Junos OS on MX Series versions 17.4 prior to 17.4R1-S3, 17.4R2 Juniper Networks Junos OS on MX Series versions 18.1 prior to 18.1R2

Description: The issue is related to a memory leak in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series, which can be caused by receipt of a specific stream of Layer 2 frames. This can lead to a crash and restart of the PFE, resulting in traffic interruption. An attacker connected to the same broadcast domain can exploit this issue to cause a prolonged Denial of Service (DoS) by continuously sending the specific stream of Layer 2 frames.

Recommendations: For versions 17.2 prior to 17.2R3-S4, update to 17.2R3-S4 or later. For versions 17.2X75 prior to 17.2X75-D105.19, update to 17.2X75-D105.19 or later. For versions 17.3 prior to 17.3R3-S7, update to 17.3R3-S7 or later. For versions 17.4 prior to 17.4R1-S3, 17.4R2, update to 17.4R1-S3 or later, or 17.4R2 or later. For versions 18.1 prior to 18.1R2, update to 18.1R2 or later.