Description
An Allocation of Resources Without Limits or Throttling vulnerability in the l2cpd process of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a denial of service and l2cpd restart via FNP-enabled Layer 2 interfaces. The issue is triggered when the FNP feature is enabled on a VPLS routing instance with VLAN-VPLS encapsulation enabled.
This issue affects all platforms except the PTX Series and SRX Series.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Juniper Networks | Junos OS | < 23.2R2-S7.7, 23.4 – < 23.4R2-S8.13, 24.2 – < 24.2R2-S5.5, 24.4 – < 24.4R2-S5, 25.2 – < 25.2R2-S2, 25.4 – < 25.4R1-S3, 26.2 – < 26.2R1-S2 | 23.2R2-S7.7 |
References
- https://supportportal.juniper.net/JSA112188 vendor-advisory