title: Junos OS: MX Series: PFE on the line card may crash due to memory leak.
description: On Juniper Networks MX series, receipt of a stream of specific Layer 2 frames may cause a memory leak resulting in the packet forwarding engine (PFE) on the line card to crash and restart, causing traffic interruption. By continuously sending this stream of specific layer 2 frame, an attacker connected to the same broadcast domain can repeatedly crash the PFE, causing a prolonged Denial of Service (DoS). This issue affects Juniper Networks Junos OS on MX Series: 17.2 versions prior to 17.2R3-S4; 17.2X75 versions prior to 17.2X75-D105.19; 17.3 versions prior to 17.3R3-S7; 17.4 versions prior to 17.4R1-S3, 17.4R2; 18.1 versions prior to 18.1R2. This issue does not affect Juniper Networks Junos OS releases prior to 17.2R1.
problem types: CWE-19 Data Processing Errors
affected:
{
platforms: MX Series
product: Junos OS
vendor: Juniper Networks
versions:
lessThan: 17.2R1, status: unaffected, version: unspecified, versionType: custom
lessThan: 17.2R3-S4, status: affected, version: 17.2, versionType: custom
lessThan: 17.2X75-D105.19, status: affected, version: 17.2X75, versionType: custom
lessThan: 17.3R3-S7, status: affected, version: 17.3, versionType: custom
lessThan: 17.4R1-S3, 17.4R2, status: affected, version: 17.4, versionType: custom
lessThan: 18.1R2, status: affected, version: 18.1, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
]
exploits: Juniper SIRT is not aware of any malicious exploitation of this vulnerability.
solutions: The following software releases have been updated to resolve this specific issue: 17.2R3-S4, 17.2X75-D105.19, 17.3R3-S7, 17.4R1-S3, 17.4R2, 18.1R2, 18.2R1, 18.2X75-D10, and all subsequent releases.
workarounds: There are no available workarounds for this issue.