CVE-2020-1651: Junos OS: MX Series: PFE on the line card may crash due to memory leak.
On Juniper Networks MX series, receipt of a stream of specific Layer 2 frames may cause a memory leak resulting in the packet forwarding engine (PFE) on the line card to crash and restart, causing traffic interruption. By continuously sending this stream of specific layer 2 frame, an attacker connected to the same broadcast domain can repeatedly crash the PFE, causing a prolonged Denial of Service (DoS). This issue affects Juniper Networks Junos OS on MX Series: 17.2 versions prior to 17.2R3-S4; 17.2X75 versions prior to 17.2X75-D105.19; 17.3 versions prior to 17.3R3-S7; 17.4 versions prior to 17.4R1-S3, 17.4R2; 18.1 versions prior to 18.1R2. This issue does not affect Juniper Networks Junos OS releases prior to 17.2R1.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2020-1651?
The severity of CVE-2020-1651 is medium with a severity value of 6.5.
Which Juniper Networks MX series versions are affected by CVE-2020-1651?
Juniper Networks MX series versions 17.2 through 18.1 are affected by CVE-2020-1651.
How does CVE-2020-1651 exploit work?
CVE-2020-1651 is exploited by continuously sending a stream of specific Layer 2 frames, which may cause a memory leak and crash the packet forwarding engine (PFE).
What is the fix for CVE-2020-1651?
To fix CVE-2020-1651, users should upgrade their Juniper Networks MX series devices to a non-vulnerable version, such as 18.2 or higher.
Where can I find more information about CVE-2020-1651?
More information about CVE-2020-1651 can be found on the Juniper Networks Knowledge Base at the following link: https://kb.juniper.net/JSA11038