Description
Certain types of malformed Path Computation Element Protocol (PCEP) packets when received and processed by a Juniper Networks Junos OS device serving as a Path Computation Client (PCC) in a PCEP environment using Juniper's path computational element protocol daemon (pccd) process allows an attacker to cause the pccd process to crash and generate a core file thereby causing a Denial of Service (DoS). Continued receipt of this family of malformed PCEP packets will cause an extended Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS: 15.1 versions prior to 15.1F6-S13, 15.1R7-S4; 15.1X49 versions prior to 15.1X49-D180 on SRX Series; 15.1X53 versions prior to 15.1X53-D238, 15.1X53-D496, 15.1X53-D592; 16.1 versions prior to 16.1R7-S4; 16.2 versions prior to 16.2R2-S9; 17.1 versions prior to 17.1R2-S11, 17.1R3; 17.2 versions prior to 17.2R1-S9; 17.2 version 17.2R2 and later prior to 17.2R3-S2; 17.3 versions prior to 17.3R3-S3; 17.4 versions prior to 17.4R2-S2, 17.4R3; 18.1 versions prior to 18.1R3-S2; 18.2 versions prior to 18.2R2-S6, 18.2R3; 18.2X75 versions prior to 18.2X75-D40; 18.3 versions prior to 18.3R2; 18.4 versions prior to 18.4R1-S2, 18.4R2. This issue does not affect releases of Junos OS prior to 15.1R1.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Juniper Networks Junos OS
15.1 to < 15.1F6-S13, 15.1R7-S4affected16.1 to < 16.1R7-S4affected16.2 to < 16.2R2-S9affected17.1 to < 17.1R2-S11, 17.1R3affected17.2 to < 17.2R1-S9, 17.2R3-S2affected17.3 to < 17.3R3-S3affected17.4 to < 17.4R2-S2, 17.4R3affected18.1 to < 18.1R3-S2affected18.2 to < 18.2R3affected18.2X75 to < 18.2X75-D40affected18.3 to < 18.2R2-S6, 18.3R2affected18.4 to < 18.4R1-S2, 18.4R2affected15.1X53 to < 15.1X53-D238, 15.1X53-D496, 15.1X53-D592affected
Juniper Networks Junos OS
15.1X49 to < 15.1X49-D180affected