On Juniper Networks MX series, receipt of a stream of specific Layer 2 frames may cause a memory leak resulting in the packet forwarding engine (PFE) on the line card to crash and restart, causing traffic interruption.
By continuously sending this stream of specific layer 2 frame, an attacker connected to the same broadcast domain can repeatedly crash the PFE, causing a prolonged Denial of Service (DoS).
This issue affects Juniper Networks Junos OS on MX Series:
17.2 versions prior to 17.2R3-S4;
17.2X75 versions prior to 17.2X75-D105.19;
17.3 versions prior to 17.3R3-S7;
17.4 versions prior to 17.4R1-S3, 17.4R2;
18.1 versions prior to 18.1R2.
This issue does not affect Juniper Networks Junos OS releases prior to 17.2R1.
This issue is not specific to any configuration.
Juniper SIRT is not aware of any malicious exploitation of this vulnerability.
This issue was seen during production usage.
This issue has been assigned CVE-2020-1651 .
The following software releases have been updated to resolve this specific issue: 17.2R3-S4, 17.2X75-D105.19, 17.3R3-S7, 17.4R1-S3, 17.4R2, 18.1R2, 18.2R1, 18.2X75-D10, and all subsequent releases.
This issue is being tracked as 1347250 .
Software releases or updates are available for download at https://www.juniper.net/support/downloads/ .
There are no available workarounds for this issue.
2020-07-08: Initial publication