QID 43949

Juniper Junos is the network operating system used in Juniper Networks hardware systems.

An Uncontrolled Resource Consumption vulnerability in TCP processing on the Routing Engine (RE) of Juniper Networks Junos OS allows an unauthenticated network-based attacker to send crafted TCP packets destined to the device, resulting in an MBUF leak that ultimately leads to a Denial of Service (DoS).

Affected Junos versions:
2.3 version 12.3R12-S19 and later versions
15.1 version 15.1R7-S10 and later versions
17.3 version 17.3R3-S12 and later versions
18.4 version 18.4R3-S9 and later versions
19.1 version 19.1R3-S7 and later versions
19.2 version 19.2R3-S3 and later versions
19.3 version 19.3R2-S7, 19.3R3-S3 and later versions prior to 19.3R3-S7
19.4 version 19.4R2-S7, 19.4R3-S5 and later versions prior to 19.4R3-S10
20.1 version 20.1R3-S1 and later versions
20.2 version 20.2R3-S2 and later versions prior to 20.2R3-S6
20.3 version 20.3R3-S1 and later versions prior to 20.3R3-S6
20.4 version 20.4R2-S2, 20.4R3 and later versions prior to 20.4R3-S5
21.1 version 21.1R2 and later versions prior to 21.1R3-S4
21.2 version 21.2R1-S1, 21.2R2 and later versions prior to 21.2R3-S3
21.3 versions prior to 21.3R3-S2
21.4 versions prior to 21.4R3
22.1 versions prior to 22.1R2-S1, 22.1R3
22.2 versions prior to 22.2R1-S2, 22.2R2
22.3 versions prior to 22.3R1-S1, 22.3R2

QID detection logic: (Authenticated)
It checks for vulnerable Junos OS version.

Successful exploitation of this vulnerability may allows an unauthenticated network-based attacker to send crafted TCP packets destined to the device, resulting Denial of Service (DoS).