Receipt of a specific link-local IPv6 packet destined to the RE may cause the system to crash and restart (vmcore).
By continuously sending a specially crafted IPv6 packet, an attacker can repeatedly crash the system causing a prolonged Denial of Service (DoS).
This issue affects Juniper Networks Junos OS:
16.1 versions prior to 16.1R6-S2, 16.1R7;
16.2 versions prior to 16.2R2-S10;
17.1 versions prior to 17.1R3.
This issue does not affect Juniper Networks Junos OS version 15.1 and prior versions.
This issue affects Junos OS devices with Multi-Chassis Link Aggregation Group (MC-LAG) enabled.
Juniper SIRT is not aware of any malicious exploitation of this vulnerability.
This issue was seen during production usage.
This issue has been assigned CVE-2019-0067 .
The following software releases have been updated to resolve this specific issue: 16.1R6-S2, 16.1R7, 16.2R2-S10, 17.1R3, 17.2R1, and all subsequent releases.
This issue is being tracked as PR 1261996 which is visible on the Customer Support website.
Note: Juniper SIRT's policy is not to evaluate releases which are beyond End of Engineering (EOE) or End of Life (EOL).
Software Releases, patches and updates are available at https://www.juniper.net/support/downloads/ .
There are no available workarounds for this issue.
2019-10-09: Initial Publication.