Product Affected

This issue affects all versions of Junos OS Evolved. Affected platforms: QFX5000 Series.
Medium

CVSS: v3.1: 6.5 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
CVSS: v4.0: 7.1 (CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:L)

Problem

An Unimplemented or Unsupported Feature in UI vulnerability in the CLI of Juniper Networks Junos OS Evolved on QFX5000 Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS).

Several configuration statements meant to enforce limits on MAC learning and moves can be configured but do not take effect. This can lead to control plane overload situations which will severely impact the ability of the device to processes legitimate traffic.

This issue affects Junos OS Evolved on QFX5000 Series:

  • All versions before 21.4R3-S8-EVO,
  • 22.2-EVO versions before 22.2R3-S5-EVO,
  • 22.4-EVO versions before 22.4R3-EVO,
  • 23.2-EVO versions before 23.2R2-EVO.

 

A device is exposed to this issue if one or more of the following options are configured:

[ switch-options interface-mac-limit ... ]
[ switch-options interface <interface> interface-mac-limit ... ]
[ vlans <vlan> switch-options interface <interface> interface-mac-limit ... ]
[ vlans <vlan> switch-options mac-table-size ... ]
[ protocols l2-learning global-mac-limit ... ]
[ vlans <vlan> switch-options mac-move-limit drop/drop-and-log ]

 

Juniper SIRT is not aware of any malicious exploitation of this vulnerability.

This issue was seen during production usage.

Solution

The following software releases have been updated to resolve this specific issue: 21.4R3-S8-EVO, 22.2R3-S5-EVO*, 22.4R3-EVO, 23.2R2-EVO, 23.4R1-EVO, and all subsequent releases.
(* future release)

 

This issue is being tracked as 1705911 which is visible on the Customer Support website.

 

Note: Juniper SIRT's policy is not to evaluate releases which are beyond End of Engineering (EOE) or End of Life (EOL).

 

Workaround

There are no known workarounds for this issue.

Severity Assessment

Information for how Juniper Networks uses CVSS can be found at KB 16446 [juniper.net] "Common Vulnerability Scoring System (CVSS) and Juniper's Security Advisories."

Modification History

 2024-10-09: Initial Publication

Related Information