First published: Tue Oct 18 2022(Updated: )
An Improper Control of a Resource Through its Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows an unauthenticated adjacent attacker to cause a Denial of Service (DoS). When there is a continuous mac move a memory corruption causes one or more FPCs to crash and reboot. These MAC moves can be between two local interfaces or between core/EVPN and local interface. The below error logs can be seen in PFE syslog when this issue happens: xss_event_handler(1071): EA[0:0]_PPE 46.xss[0] ADDR Error. ppe_error_interrupt(4298): EA[0:0]_PPE 46 Errors sync xtxn error xss_event_handler(1071): EA[0:0]_PPE 1.xss[0] ADDR Error. ppe_error_interrupt(4298): EA[0:0]_PPE 1 Errors sync xtxn error xss_event_handler(1071): EA[0:0]_PPE 2.xss[0] ADDR Error. This issue affects Juniper Networks Junos OS on MX Series: All versions prior to 15.1R7-S13; 19.1 versions prior to 19.1R3-S9; 19.2 versions prior to 19.2R3-S6; 19.3 versions prior to 19.3R3-S6; 19.4 versions prior to 19.4R2-S7, 19.4R3-S8; 20.1 version 20.1R1 and later versions; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S2; 21.1 versions prior to 21.1R3; 21.2 versions prior to 21.2R3; 21.3 versions prior to 21.3R2.
Credit: sirt@juniper.net
Affected Software | Affected Version | How to fix |
---|---|---|
Juniper JUNOS | <15.1 | |
Juniper JUNOS | =15.1 | |
Juniper JUNOS | =15.1-a1 | |
Juniper JUNOS | =15.1-f1 | |
Juniper JUNOS | =15.1-f2 | |
Juniper JUNOS | =15.1-f2-s1 | |
Juniper JUNOS | =15.1-f2-s2 | |
Juniper JUNOS | =15.1-f2-s3 | |
Juniper JUNOS | =15.1-f2-s4 | |
Juniper JUNOS | =15.1-f3 | |
Juniper JUNOS | =15.1-f4 | |
Juniper JUNOS | =15.1-f5 | |
Juniper JUNOS | =15.1-f5-s7 | |
Juniper JUNOS | =15.1-f6 | |
Juniper JUNOS | =15.1-f6-s1 | |
Juniper JUNOS | =15.1-f6-s10 | |
Juniper JUNOS | =15.1-f6-s12 | |
Juniper JUNOS | =15.1-f6-s2 | |
Juniper JUNOS | =15.1-f6-s3 | |
Juniper JUNOS | =15.1-f6-s4 | |
Juniper JUNOS | =15.1-f6-s5 | |
Juniper JUNOS | =15.1-f6-s6 | |
Juniper JUNOS | =15.1-f6-s7 | |
Juniper JUNOS | =15.1-f6-s8 | |
Juniper JUNOS | =15.1-f6-s9 | |
Juniper JUNOS | =15.1-f7 | |
Juniper JUNOS | =15.1-r1 | |
Juniper JUNOS | =15.1-r2 | |
Juniper JUNOS | =15.1-r3 | |
Juniper JUNOS | =15.1-r4 | |
Juniper JUNOS | =15.1-r4-s7 | |
Juniper JUNOS | =15.1-r4-s8 | |
Juniper JUNOS | =15.1-r4-s9 | |
Juniper JUNOS | =15.1-r5 | |
Juniper JUNOS | =15.1-r5-s1 | |
Juniper JUNOS | =15.1-r5-s3 | |
Juniper JUNOS | =15.1-r5-s5 | |
Juniper JUNOS | =15.1-r5-s6 | |
Juniper JUNOS | =15.1-r6 | |
Juniper JUNOS | =15.1-r6-s1 | |
Juniper JUNOS | =15.1-r6-s2 | |
Juniper JUNOS | =15.1-r6-s3 | |
Juniper JUNOS | =15.1-r6-s4 | |
Juniper JUNOS | =15.1-r6-s6 | |
Juniper JUNOS | =15.1-r7 | |
Juniper JUNOS | =15.1-r7-s1 | |
Juniper JUNOS | =15.1-r7-s10 | |
Juniper JUNOS | =15.1-r7-s11 | |
Juniper JUNOS | =15.1-r7-s12 | |
Juniper JUNOS | =15.1-r7-s2 | |
Juniper JUNOS | =15.1-r7-s3 | |
Juniper JUNOS | =15.1-r7-s4 | |
Juniper JUNOS | =15.1-r7-s5 | |
Juniper JUNOS | =15.1-r7-s6 | |
Juniper JUNOS | =15.1-r7-s7 | |
Juniper JUNOS | =15.1-r7-s8 | |
Juniper JUNOS | =15.1-r7-s9 | |
Juniper JUNOS | =19.1 | |
Juniper JUNOS | =19.1-r1 | |
Juniper JUNOS | =19.1-r1-s1 | |
Juniper JUNOS | =19.1-r1-s2 | |
Juniper JUNOS | =19.1-r1-s3 | |
Juniper JUNOS | =19.1-r1-s4 | |
Juniper JUNOS | =19.1-r1-s5 | |
Juniper JUNOS | =19.1-r1-s6 | |
Juniper JUNOS | =19.1-r2 | |
Juniper JUNOS | =19.1-r2-s1 | |
Juniper JUNOS | =19.1-r2-s2 | |
Juniper JUNOS | =19.1-r2-s3 | |
Juniper JUNOS | =19.1-r3 | |
Juniper JUNOS | =19.1-r3-s1 | |
Juniper JUNOS | =19.1-r3-s2 | |
Juniper JUNOS | =19.1-r3-s3 | |
Juniper JUNOS | =19.1-r3-s4 | |
Juniper JUNOS | =19.1-r3-s5 | |
Juniper JUNOS | =19.1-r3-s6 | |
Juniper JUNOS | =19.1-r3-s7 | |
Juniper JUNOS | =19.1-r3-s8 | |
Juniper JUNOS | =19.2 | |
Juniper JUNOS | =19.2-r1 | |
Juniper JUNOS | =19.2-r1-s1 | |
Juniper JUNOS | =19.2-r1-s2 | |
Juniper JUNOS | =19.2-r1-s3 | |
Juniper JUNOS | =19.2-r1-s4 | |
Juniper JUNOS | =19.2-r1-s5 | |
Juniper JUNOS | =19.2-r1-s6 | |
Juniper JUNOS | =19.2-r1-s7 | |
Juniper JUNOS | =19.2-r1-s8 | |
Juniper JUNOS | =19.2-r1-s9 | |
Juniper JUNOS | =19.2-r2 | |
Juniper JUNOS | =19.2-r2-s1 | |
Juniper JUNOS | =19.2-r3 | |
Juniper JUNOS | =19.2-r3-s1 | |
Juniper JUNOS | =19.2-r3-s2 | |
Juniper JUNOS | =19.2-r3-s3 | |
Juniper JUNOS | =19.2-r3-s4 | |
Juniper JUNOS | =19.2-r3-s5 | |
Juniper JUNOS | =19.3 | |
Juniper JUNOS | =19.3-r1 | |
Juniper JUNOS | =19.3-r1-s1 | |
Juniper JUNOS | =19.3-r2 | |
Juniper JUNOS | =19.3-r2-s1 | |
Juniper JUNOS | =19.3-r2-s2 | |
Juniper JUNOS | =19.3-r2-s3 | |
Juniper JUNOS | =19.3-r2-s4 | |
Juniper JUNOS | =19.3-r2-s5 | |
Juniper JUNOS | =19.3-r2-s6 | |
Juniper JUNOS | =19.3-r3 | |
Juniper JUNOS | =19.3-r3-s1 | |
Juniper JUNOS | =19.3-r3-s2 | |
Juniper JUNOS | =19.3-r3-s3 | |
Juniper JUNOS | =19.3-r3-s4 | |
Juniper JUNOS | =19.3-r3-s5 | |
Juniper JUNOS | =19.4 | |
Juniper JUNOS | =19.4-r1 | |
Juniper JUNOS | =19.4-r1-s1 | |
Juniper JUNOS | =19.4-r1-s2 | |
Juniper JUNOS | =19.4-r1-s3 | |
Juniper JUNOS | =19.4-r1-s4 | |
Juniper JUNOS | =19.4-r2 | |
Juniper JUNOS | =19.4-r2-s1 | |
Juniper JUNOS | =19.4-r2-s2 | |
Juniper JUNOS | =19.4-r2-s3 | |
Juniper JUNOS | =19.4-r2-s4 | |
Juniper JUNOS | =19.4-r2-s5 | |
Juniper JUNOS | =19.4-r2-s6 | |
Juniper JUNOS | =19.4-r3 | |
Juniper JUNOS | =19.4-r3-s1 | |
Juniper JUNOS | =19.4-r3-s2 | |
Juniper JUNOS | =19.4-r3-s3 | |
Juniper JUNOS | =19.4-r3-s4 | |
Juniper JUNOS | =19.4-r3-s5 | |
Juniper JUNOS | =19.4-r3-s6 | |
Juniper JUNOS | =19.4-r3-s7 | |
Juniper JUNOS | =20.1-r1 | |
Juniper JUNOS | =20.1-r1-s1 | |
Juniper JUNOS | =20.1-r1-s2 | |
Juniper JUNOS | =20.1-r1-s3 | |
Juniper JUNOS | =20.1-r1-s4 | |
Juniper JUNOS | =20.1-r2 | |
Juniper JUNOS | =20.1-r2-s1 | |
Juniper JUNOS | =20.1-r2-s2 | |
Juniper JUNOS | =20.1-r3 | |
Juniper JUNOS | =20.1-r3-s1 | |
Juniper JUNOS | =20.1-r3-s2 | |
Juniper JUNOS | =20.1-r3-s3 | |
Juniper JUNOS | =20.1-r3-s4 | |
Juniper JUNOS | =20.2 | |
Juniper JUNOS | =20.2-r1 | |
Juniper JUNOS | =20.2-r1-s1 | |
Juniper JUNOS | =20.2-r1-s2 | |
Juniper JUNOS | =20.2-r1-s3 | |
Juniper JUNOS | =20.2-r2 | |
Juniper JUNOS | =20.2-r2-s1 | |
Juniper JUNOS | =20.2-r2-s2 | |
Juniper JUNOS | =20.2-r2-s3 | |
Juniper JUNOS | =20.2-r3 | |
Juniper JUNOS | =20.2-r3-s1 | |
Juniper JUNOS | =20.2-r3-s2 | |
Juniper JUNOS | =20.2-r3-s3 | |
Juniper JUNOS | =20.2-r3-s4 | |
Juniper JUNOS | =20.3 | |
Juniper JUNOS | =20.3-r1 | |
Juniper JUNOS | =20.3-r1-s1 | |
Juniper JUNOS | =20.3-r1-s2 | |
Juniper JUNOS | =20.3-r2 | |
Juniper JUNOS | =20.3-r2-s1 | |
Juniper JUNOS | =20.3-r3 | |
Juniper JUNOS | =20.3-r3-s1 | |
Juniper JUNOS | =20.3-r3-s2 | |
Juniper JUNOS | =20.3-r3-s3 | |
Juniper JUNOS | =20.3-r3-s4 | |
Juniper JUNOS | =20.4 | |
Juniper JUNOS | =20.4-r1 | |
Juniper JUNOS | =20.4-r1-s1 | |
Juniper JUNOS | =20.4-r2 | |
Juniper JUNOS | =20.4-r2-s1 | |
Juniper JUNOS | =20.4-r2-s2 | |
Juniper JUNOS | =20.4-r3 | |
Juniper JUNOS | =20.4-r3-s1 | |
Juniper JUNOS | =21.1 | |
Juniper JUNOS | =21.1-r1 | |
Juniper JUNOS | =21.1-r1-s1 | |
Juniper JUNOS | =21.1-r2 | |
Juniper JUNOS | =21.1-r2-s1 | |
Juniper JUNOS | =21.1-r2-s2 | |
Juniper JUNOS | =21.2 | |
Juniper JUNOS | =21.2-r1 | |
Juniper JUNOS | =21.2-r1-s1 | |
Juniper JUNOS | =21.2-r1-s2 | |
Juniper JUNOS | =21.2-r2 | |
Juniper JUNOS | =21.2-r2-s1 | |
Juniper JUNOS | =21.2-r2-s2 | |
Juniper JUNOS | =21.3 | |
Juniper JUNOS | =21.3-r1 | |
Juniper JUNOS | =21.3-r1-s1 | |
Juniper JUNOS | =21.3-r1-s2 | |
Juniper Mx10 | ||
Juniper Mx10000 | ||
Juniper Mx10003 | ||
Juniper Mx10008 | ||
Juniper Mx10016 | ||
Juniper Mx104 | ||
Juniper Mx150 | ||
Juniper Mx2008 | ||
Juniper Mx2010 | ||
Juniper Mx2020 | ||
Juniper Mx204 | ||
Juniper Mx240 | ||
Juniper Mx40 | ||
Juniper Mx480 | ||
Juniper Mx5 | ||
Juniper Mx80 | ||
Juniper Mx960 |
The following software releases have been updated to resolve this specific issue: 15.1R7-S13, 19.1R3-S9, 19.2R3-S6, 19.3R3-S6, 19.4R2-S7, 19.4R3-S8, 20.2R3-S5, 20.3R3-S5, 20.4R3-S2, 21.1R3, 21.2R3, 21.3R2, 21.4R1, and all subsequent releases.
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.