Improper Memory Release in Juniper Junos OS QFX5K EVPN

Executive Summary

This vulnerability is an Improper Release of Memory Before Removing Last Reference issue in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved on QFX5K-family platforms. It allows a configured EVPN peer to cause a denial of service by triggering memory exhaustion through EVPN-VXLAN active-active multihoming route processing.

Useful 0 Not Useful 0

Detection Guidance

Detecting this vulnerability requires monitoring memory usage and EVPN-VXLAN route processing on QFX5K-family devices running Junos OS or Junos OS Evolved. Check for abnormal memory consumption in the l2ald process using commands like 'show system processes extensive' or 'show system memory'. Monitor EVPN-VXLAN active-active multihoming routes with 'show evpn instance' and 'show route extensive'. Look for excessive route churn or memory leaks.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to a denial of service due to memory exhaustion, which may cause network devices to become unresponsive or crash. It specifically affects systems using EVPN-VXLAN active-active multihoming on QFX5K-family platforms.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability causes a denial of service through memory exhaustion, which could disrupt network services. Such disruptions may impact systems handling sensitive data, potentially violating compliance requirements for availability in standards like GDPR and HIPAA.

Useful 0 Not Useful 0

Mitigation Strategies

Apply the latest Junos OS or Junos OS Evolved updates from Juniper Networks to patch the l2ald process vulnerability. Disable EVPN-VXLAN active-active multihoming route processing if not required. Monitor system memory usage for signs of exhaustion.

Useful 0 Not Useful 0