Description
On Juniper Networks MX Series with MS-MIC or MS-MPC card configured with NAT64 configuration, receipt of a malformed IPv6 packet may crash the MS-PIC component on MS-MIC or MS-MPC. This issue occurs when a multiservice card is translating the malformed IPv6 packet to IPv4 packet. An unauthenticated attacker can continuously send crafted IPv6 packets through the device causing repetitive MS-PIC process crashes, resulting in an extended Denial of Service condition. This issue affects Juniper Networks Junos OS on MX Series: 15.1 versions prior to 15.1R7-S7; 15.1X53 versions prior to 15.1X53-D593; 16.1 versions prior to 16.1R7-S8; 17.2 versions prior to 17.2R3-S4; 17.3 versions prior to 17.3R3-S6; 17.4 versions prior to 17.4R2-S11, 17.4R3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.2X75 versions prior to 18.2X75-D41, 18.2X75-D430, 18.2X75-D53, 18.2X75-D65; 18.3 versions prior to 18.3R2-S4, 18.3R3; 18.4 versions prior to 18.4R2-S5, 18.4R3; 19.1 versions prior to 19.1R2; 19.2 versions prior to 19.2R1-S5, 19.2R2; 19.3 versions prior to 19.3R2.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Juniper Networks Junos OS
15.1 to < 15.1R7-S7affected15.1X53 to < 15.1X53-D593affected16.1 to < 16.1R7-S8affected17.2 to < 17.2R3-S4affected17.3 to < 17.3R3-S6affected17.4 to < 17.4R2-S11, 17.4R3affected18.1 to < 18.1R3-S11affected18.2 to < 18.2R3-S6affected18.2X75 to < 18.2X75-D41, 18.2X75-D430, 18.2X75-D53, 18.2X75-D65affected18.3 to < 18.3R2-S4, 18.3R3affected18.4 to < 18.4R2-S5, 18.4R3affected19.1 to < 19.1R2affected19.2 to < 19.2R1-S5, 19.2R2affected19.3 to < 19.3R2affected