An improper interpretation conflict of certain data between certain software components within the Juniper Networks Junos OS devices does not allow certain traffic to pass through the device upon receipt from an ingress interface filtering certain specific types of traffic which is then being redirected to an egress interface on a different VLAN. This causes a Denial of Service (DoS) to those clients sending these particular types of traffic. Such traffic being sent by a client may appear genuine, but is non-standard in nature and should be considered as potentially malicious, and can be targeted to the device, or destined through it for the issue to occur. This issues affects IPv4 and IPv6 traffic. An indicator of compromise may be found by checking log files. You may find that traffic on
The following software releases have been updated to resolve this specific issue: 17.3R3-S7, 17.4R2-S11, 17.4R3-S3, 18.1R3-S9, 18.2R3-S3, 18.3R3-S1, 18.4R1-S5, 18.4R2-S3, 18.4R3, 19.1R1-S5, 19.1R2-S1, 19.1R3, 19.2R1-S5, 19.2R2, 19.3R2-S3, 19.3R3, 19.4R1-S2, 19.4R2, 20.1R1 and all subsequent releases.
There are no available workarounds for this issue.
| Product | Vulnerable range | Fixed version | Advisory |
|---|---|---|---|
| Juniper Networks Junos OS | >=17.3<17.3R3-S7 | 17.3R3-S7 | advisory ↗ |
| Juniper Networks Junos OS | >=17.4<17.4R2-S11, 17.4R3-S3 | 17.4R2-S11, 17.4R3-S3 | advisory ↗ |
| Juniper Networks Junos OS | >=18.1<18.1R3-S9 | 18.1R3-S9 | advisory ↗ |
| Juniper Networks Junos OS | >=18.2<18.2R3-S3 | 18.2R3-S3 | advisory ↗ |
| Juniper Networks Junos OS | >=18.3<18.3R3-S1 | 18.3R3-S1 | advisory ↗ |
| Juniper Networks Junos OS | >=18.4<18.4R1-S5, 18.4R2-S3, 18.4R3 | 18.4R1-S5, 18.4R2-S3, 18.4R3 | advisory ↗ |
| Juniper Networks Junos OS | >=19.1<19.1R1-S5, 19.1R2-S1, 19.1R3 | 19.1R1-S5, 19.1R2-S1, 19.1R3 | advisory ↗ |
| Juniper Networks Junos OS | >=19.2<19.2R1-S5, 19.2R2 | 19.2R1-S5, 19.2R2 | advisory ↗ |
| Juniper Networks Junos OS | >=19.3<19.3R2-S3, 19.3R3 | 19.3R2-S3, 19.3R3 | advisory ↗ |
| Juniper Networks Junos OS | >=19.4<19.4R1-S2, 19.4R2 | 19.4R1-S2, 19.4R2 | advisory ↗ |