An Improper Check or Handling of Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS).

If an attacker sends a specific MPLS packet, which upon processing, causes an internal loop, that leads to a PFE crash and restart. Continued receipt of these packets leads to a sustained Denial of Service (DoS) condition.

Circuit cross-connect (CCC) needs to be configured on the device for it to be affected by this issue.

This issue only affects MX Series devices with MPC10, MPC11, LC9600, and MX304.

To be affected by this issue, the following configuration is required on the device:

[ set protocols ccc ]

An Improper Check or Handling of Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS). Please refer to https://supportportal.juniper.net/JSA75732 [juniper.net] for more information.

The following error may be seen.

May 29 18:29:40.000 2024 KOR01RTR01-MX fpc3 user.err ztchip-luss: dispatch_event_handler(1077): ZT[0:0].slice[0].disp[2] LMEM_PARCEL_MAX.

LKUP_ASIC_DECLARE_WEDGE_X0 (0x590001)

Upgrade to fixed release of SIRT ASAP.

No WA available

https://prsearch.juniper.net/problemreport/PR1720275