QFX5000/EX4600 Series: Routing protocol flap upon receipt of high rate of Ethernet frames
Published Oct 10, 2018
6.5
MEDIUMCVSS 3.0
EPSS 0.65%
Description
On QFX5000 Series and EX4600 switches, a high rate of Ethernet pause frames or an ARP packet storm received on the management interface (fxp0) can cause egress interface congestion, resulting in routing protocol packet drops, such as BGP, leading to peering flaps. The following log message may also be displayed: fpc0 dcbcm_check_stuck_buffers: Buffers are stuck on queue 7 of port 45 This issue only affects the QFX5000 Series products (QFX5100, QFX5110, QFX5200, QFX5210) and the EX4600 switch. No other platforms are affected by this issue. Affected releases are Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D47 on QFX5000 Series and EX4600; 15.1 versions prior to 15.1R7, 15.1R8 on QFX5000 Series and EX4600; 15.1X53 versions prior to 15.1X53-D233 on QFX5000 Series and EX4600; 16.1 versions prior to 16.1R7 on QFX5000 Series and EX4600; 16.2 versions prior to 16.2R3 on QFX5000 Series and EX4600; 17.1 versions prior to 17.1R2-S9, 17.1R3 on QFX5000 Series and EX4600; 17.2 versions prior to 17.2R2-S6, 17.2R3 on QFX5000 Series and EX4600; 17.2X75 versions prior to 17.2X75-D42 on QFX5000 Series and EX4600; 17.3 versions prior to 17.3R3 on QFX5000 Series and EX4600; 17.4 versions prior to 17.4R2 on QFX5000 Series and EX4600; 18.1 versions prior to 18.1R2 on QFX5000 Series and EX4600.
Affected products
-
- Version 14.1X53StatusaffectedConstraints<14.1X53-D47
- Version 15.1StatusaffectedConstraints<15.1R7, 15.1R8
- Version 15.1X53StatusaffectedConstraints<15.1X53-D233
- Version 16.1StatusaffectedConstraints<16.1R7
- Version 16.2StatusaffectedConstraints<16.2R3
- Version 17.1StatusaffectedConstraints<17.1R2-S9, 17.1R3
- Version 17.2StatusaffectedConstraints<17.2R2-S6, 17.2R3
- Version 17.2X75StatusaffectedConstraints<17.2X75-D42
- Version 17.3StatusaffectedConstraints<17.3R3
- Version 17.4StatusaffectedConstraints<17.4R2
- Version 18.1StatusaffectedConstraints<18.1R2
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Juniper Networks | Junos OS | n/a |
|
Configuration 1
- 14.1x53
- 14.1x53
- 14.1x53
- 14.1x53
- 14.1x53
- 14.1x53
- 14.1x53
- 14.1x53
- 14.1x53
- 14.1x53
- 14.1x53
- 14.1x53
- 14.1x53
- 14.1x53
- 14.1x53
- 14.1x53
Configuration 2
Configuration 3
- 15.1x53
- 15.1x53
- 15.1x53
- 15.1x53
- 15.1x53
- 15.1x53
- 15.1x53
- 15.1x53
- 15.1x53
- 15.1x53
- 15.1x53
- 15.1x53
- 15.1x53
- 15.1x53
Configuration 4
Configuration 5
Configuration 6
Configuration 7
Configuration 8
Configuration 9
Configuration 10
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Vendor solution
The following software releases have been updated to resolve this specific issue: 14.1X53-D47, 15.1R7, 15.1R8, 15.1X53-D233, 16.1R7, 16.2R3, 17.1R2-S9, 17.1R3, 17.2R2-S6, 17.2R3, 17.2X75-D42, 17.3R3, 17.4R2, 18.1R2, 18.2R1, 18.2X75-D5, and all subsequent releases.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AV:A/AC:L/Au:N/C:N/I:N/A:P
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
Score over time
2021–2026- EPSS v1
- EPSS v5
- EPSS v2
- EPSS v3
Percentile over time
- EPSS v1
- EPSS v5
- EPSS v2
- EPSS v3
Table of values (10 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 0.65% (0.00647) | 49.14th | v5 (v2026.06.15) |
| Sep 20, 2026 | 0.65% (0.00647) | 49.59th | v5 (v2026.06.15) |
| Jul 20, 2024 | 0.06% (0.00057) | 24.23th | v3 (v2023.03.01) |
| May 29, 2024 | 0.06% (0.00057) | 23.39th | v3 (v2023.03.01) |
| Mar 2, 2024 | 0.07% (0.00075) | 30.30th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.06% (0.00064) | 25.90th | v3 (v2023.03.01) |
| Mar 6, 2023 | 0.89% (0.00885) | 27.89th | v2 (v2022.01.01) |
| Feb 4, 2022 | 0.89% (0.00885) | 10.50th | v2 (v2022.01.01) |
| Feb 3, 2022 | 0.62% (0.00624) | 17.80th | v5 (v2026.06.15) |
| Apr 14, 2021 | 0.62% (0.00624) | 0.00th | v1 |
References (2)
- http://www.securitytracker.com/id/1041855 vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
- https://kb.juniper.net/JSA10888 x_refsource_CONFIRMVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| http://www.securitytracker.com/id/1041855 | vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry | |
| https://kb.juniper.net/JSA10888 | x_refsource_CONFIRMVendor Advisory |
Change history (0)
No recorded changes yet.