Junos OS: MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) and PTX1K: Line card may crash upon receipt of specific MPLS packet.
Published Jul 11, 2018
7.5
HIGHCVSS 3.0
EPSS 2.39%
Description
Receipt of a specific MPLS packet may cause MPC7/8/9, PTX-FPC3 (FPC-P1, FPC-P2) line cards or PTX1K to crash and restart. By continuously sending specific MPLS packets, an attacker can repeatedly crash the line cards or PTX1K causing a sustained Denial of Service. Affected releases are Juniper Networks Junos OS with MPC7/8/9 or PTX-FPC3 (FPC-P1, FPC-P2) installed and PTX1K: 15.1F versions prior to 15.1F6-S10; 15.1 versions prior to 15.1R4-S9, 15.1R6-S6, 15.1R7; 16.1 versions prior to 16.1R3-S8, 16.1R4-S9, 16.1R5-S4, 16.1R6-S3, 16.1R7; 16.1X65 versions prior to 16.1X65-D46; 16.2 versions prior to 16.2R1-S6, 16.2R2-S5, 16.2R3; 17.1 versions prior to 17.1R1-S7, 17.1R2-S7, 17.1R3; 17.2 versions prior to 17.2R1-S4, 17.2R2-S4, 17.2R3; 17.2X75 versions prior to 17.2X75-D70, 17.2X75-D90; 17.3 versions prior to 17.3R1-S4, 17.3R2, 17.4 versions prior to 17.4R1-S2, 17.4R2. Refer to KB25385 for more information about PFE line cards.
Affected products
-
- Version 15.1StatusaffectedConstraints<15.1R4-S9, 15.1R6-S6, 15.1R7
- Version 15.1FStatusaffectedConstraints<15.1F6-S10
- Version 16.1StatusaffectedConstraints<16.1R3-S8, 16.1R4-S9, 16.1R5-S4, 16.1R6-S3, 16.1R7
- Version 16.1X65StatusaffectedConstraints<16.1X65-D46
- Version 16.2StatusaffectedConstraints<16.2R1-S6, 16.2R2-S5, 16.2R3
- Version 17.1StatusaffectedConstraints<17.1R1-S7, 17.1R2-S7, 17.1R3
- Version 17.2StatusaffectedConstraints<17.2R1-S4, 17.2R2-S4, 17.2R3
- Version 17.2X75StatusaffectedConstraints<17.2X75-D70
- Version 17.3StatusaffectedConstraints<17.3R1-S4, 17.3R2
- Version 17.4StatusaffectedConstraints<17.4R1-S2, 17.4R2
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Juniper Networks | Junos OS | n/a |
|
Configuration 1
Configuration 2
Configuration 3
Configuration 4
Configuration 5
Configuration 6
Configuration 7
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Vendor solution
The following software releases have been updated to resolve this specific issue: 12.1X46-D77, 12.3X48-D70, 14.1X53-D47, 15.1F6-S10, 15.1R4-S9, 15.1R6-S6, 15.1R7, 15.1X49-D140, 15.1X53-D471, 15.1X53-D59, 15.1X53-D67, 16.1R3-S8, 16.1R4-S9, 16.1R5-S4, 16.1R6-S3, 16.1R7, 16.1X65-D46, 16.2R1-S6, 16.2R2-S5, 16.2R3, 17.1R1-S7, 17.1R2-S7, 17.1R3, 17.2R1-S4, 17.2R2-S4, 17.2R3, 17.2X75-D70, 17.3R1-S4, 17.3R2, 17.4R1-S2, 17.4R2, 18.1R1, 18.1X75-D10 and all subsequent releases. This fix has been proactively committed into other releases that might not support these specific line card.
References (4)
- http://www.securitytracker.com/id/1041325 vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-0854 Advisory
- https://kb.juniper.net/JSA10864 x_refsource_CONFIRMVendor Advisory
- https://kb.juniper.net/KB25385 x_refsource_MISCVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| http://www.securitytracker.com/id/1041325 | vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-0854 | Advisory | |
| https://kb.juniper.net/JSA10864 | x_refsource_CONFIRMVendor Advisory | |
| https://kb.juniper.net/KB25385 | x_refsource_MISCVendor Advisory |
Change history (0)
No recorded changes yet.