Can you explain this vulnerability to me?

This vulnerability is an improper check for unusual or exceptional conditions in the packet forwarding engine of Juniper Networks Junos OS on EX4k and QFX5k Series platforms. It allows an unauthenticated network-adjacent attacker to cause an interface to flap, which leads to traffic between VXLAN Network Identifiers (VNIs) dropping. This results in a Denial of Service (DoS) condition. The issue occurs specifically in EVPN-VXLAN configurations using Link Aggregation Groups (LAG) when multiple load-balanced next-hop routes exist for the same destination. Service restoration requires restarting the affected FPC.

Useful 0 Not Useful 0

How can this vulnerability impact me? :

This vulnerability can cause a Denial of Service (DoS) by dropping traffic between VXLAN Network Identifiers (VNIs) when an attacker causes an interface to flap. This disrupts network communication on affected Juniper EX4k and QFX5k platforms configured with EVPN-VXLAN and Link Aggregation Groups, potentially impacting network availability and reliability until the affected FPC is restarted.

Useful 0 Not Useful 0

What immediate steps should I take to mitigate this vulnerability?

To mitigate this vulnerability immediately, you should restart the affected FPC using the command 'request chassis fpc restart slot <slot-number>'. Additionally, ensure your Junos OS version is updated to a fixed release version beyond the vulnerable ones listed.

Useful 0 Not Useful 0