An Improper Control of a Resource Through its Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series allows an unauthenticated adjacent attacker to cause a Denial of Service (DoS). When there is a continuous mac move a memory corruption causes one or more FPCs to crash and reboot. These MAC moves can be between two local interfaces or between core/EVPN and local interface. The below error logs can be seen in PFE syslog when this issue happens: xss_event_handler(1071): EA[0:0]_PPE 46.xss[0] ADDR Error. ppe_error_interrupt(4298): EA[0:0]_PPE 46 Errors sync xtxn error xss_event_handler(1071): EA[0:0]_PPE 1.xss[0] ADDR Error. ppe_error_interrupt(4298): EA[0:0]_PPE 1 Errors sync xtxn error xss_event_handler(1071): EA[0:0]_PPE 2.xss[0] ADDR Error. This issue affects Juniper Networks Junos OS on MX Series: All versions prior to 15.1R7-S13; 19.1 versions prior to 19.1R3-S9; 19.2 versions prior to 19.2R3-S6; 19.3 versions prior to 19.3R3-S6; 19.4 versions prior to 19.4R2-S7, 19.4R3-S8; 20.1 version 20.1R1 and later versions; 20.2 versions prior to 20.2R3-S5; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S2; 21.1 versions prior to 21.1R3; 21.2 versions prior to 21.2R3; 21.3 versions prior to 21.3R2.
The product does not maintain or incorrectly maintains control over a resource throughout its lifetime of creation, use, and release.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Junos | Juniper | * | 15.1 (excluding) |
| Junos | Juniper | 15.1 (including) | 15.1 (including) |
| Junos | Juniper | 15.1-a1 (including) | 15.1-a1 (including) |
| Junos | Juniper | 15.1-f1 (including) | 15.1-f1 (including) |
| Junos | Juniper | 15.1-f2 (including) | 15.1-f2 (including) |
| Junos | Juniper | 15.1-f2-s1 (including) | 15.1-f2-s1 (including) |
| Junos | Juniper | 15.1-f2-s2 (including) | 15.1-f2-s2 (including) |
| Junos | Juniper | 15.1-f2-s3 (including) | 15.1-f2-s3 (including) |
| Junos | Juniper | 15.1-f2-s4 (including) | 15.1-f2-s4 (including) |
| Junos | Juniper | 15.1-f3 (including) | 15.1-f3 (including) |
| Junos | Juniper | 15.1-f4 (including) | 15.1-f4 (including) |
| Junos | Juniper | 15.1-f5 (including) | 15.1-f5 (including) |
| Junos | Juniper | 15.1-f5-s7 (including) | 15.1-f5-s7 (including) |
| Junos | Juniper | 15.1-f6 (including) | 15.1-f6 (including) |
| Junos | Juniper | 15.1-f6-s1 (including) | 15.1-f6-s1 (including) |
| Junos | Juniper | 15.1-f6-s10 (including) | 15.1-f6-s10 (including) |
| Junos | Juniper | 15.1-f6-s12 (including) | 15.1-f6-s12 (including) |
| Junos | Juniper | 15.1-f6-s2 (including) | 15.1-f6-s2 (including) |
| Junos | Juniper | 15.1-f6-s3 (including) | 15.1-f6-s3 (including) |
| Junos | Juniper | 15.1-f6-s4 (including) | 15.1-f6-s4 (including) |
| Junos | Juniper | 15.1-f6-s5 (including) | 15.1-f6-s5 (including) |
| Junos | Juniper | 15.1-f6-s6 (including) | 15.1-f6-s6 (including) |
| Junos | Juniper | 15.1-f6-s7 (including) | 15.1-f6-s7 (including) |
| Junos | Juniper | 15.1-f6-s8 (including) | 15.1-f6-s8 (including) |
| Junos | Juniper | 15.1-f6-s9 (including) | 15.1-f6-s9 (including) |
| Junos | Juniper | 15.1-f7 (including) | 15.1-f7 (including) |
| Junos | Juniper | 15.1-r1 (including) | 15.1-r1 (including) |
| Junos | Juniper | 15.1-r2 (including) | 15.1-r2 (including) |
| Junos | Juniper | 15.1-r3 (including) | 15.1-r3 (including) |
| Junos | Juniper | 15.1-r4 (including) | 15.1-r4 (including) |
| Junos | Juniper | 15.1-r4-s7 (including) | 15.1-r4-s7 (including) |
| Junos | Juniper | 15.1-r4-s8 (including) | 15.1-r4-s8 (including) |
| Junos | Juniper | 15.1-r4-s9 (including) | 15.1-r4-s9 (including) |
| Junos | Juniper | 15.1-r5 (including) | 15.1-r5 (including) |
| Junos | Juniper | 15.1-r5-s1 (including) | 15.1-r5-s1 (including) |
| Junos | Juniper | 15.1-r5-s3 (including) | 15.1-r5-s3 (including) |
| Junos | Juniper | 15.1-r5-s5 (including) | 15.1-r5-s5 (including) |
| Junos | Juniper | 15.1-r5-s6 (including) | 15.1-r5-s6 (including) |
| Junos | Juniper | 15.1-r6 (including) | 15.1-r6 (including) |
| Junos | Juniper | 15.1-r6-s1 (including) | 15.1-r6-s1 (including) |
| Junos | Juniper | 15.1-r6-s2 (including) | 15.1-r6-s2 (including) |
| Junos | Juniper | 15.1-r6-s3 (including) | 15.1-r6-s3 (including) |
| Junos | Juniper | 15.1-r6-s4 (including) | 15.1-r6-s4 (including) |
| Junos | Juniper | 15.1-r6-s6 (including) | 15.1-r6-s6 (including) |
| Junos | Juniper | 15.1-r7 (including) | 15.1-r7 (including) |
| Junos | Juniper | 15.1-r7-s1 (including) | 15.1-r7-s1 (including) |
| Junos | Juniper | 15.1-r7-s10 (including) | 15.1-r7-s10 (including) |
| Junos | Juniper | 15.1-r7-s11 (including) | 15.1-r7-s11 (including) |
| Junos | Juniper | 15.1-r7-s12 (including) | 15.1-r7-s12 (including) |
| Junos | Juniper | 15.1-r7-s2 (including) | 15.1-r7-s2 (including) |
| Junos | Juniper | 15.1-r7-s3 (including) | 15.1-r7-s3 (including) |
| Junos | Juniper | 15.1-r7-s4 (including) | 15.1-r7-s4 (including) |
| Junos | Juniper | 15.1-r7-s5 (including) | 15.1-r7-s5 (including) |
| Junos | Juniper | 15.1-r7-s6 (including) | 15.1-r7-s6 (including) |
| Junos | Juniper | 15.1-r7-s7 (including) | 15.1-r7-s7 (including) |
| Junos | Juniper | 15.1-r7-s8 (including) | 15.1-r7-s8 (including) |
| Junos | Juniper | 15.1-r7-s9 (including) | 15.1-r7-s9 (including) |
| Junos | Juniper | 19.1 (including) | 19.1 (including) |
| Junos | Juniper | 19.1-r1 (including) | 19.1-r1 (including) |
| Junos | Juniper | 19.1-r1-s1 (including) | 19.1-r1-s1 (including) |
| Junos | Juniper | 19.1-r1-s2 (including) | 19.1-r1-s2 (including) |
| Junos | Juniper | 19.1-r1-s3 (including) | 19.1-r1-s3 (including) |
| Junos | Juniper | 19.1-r1-s4 (including) | 19.1-r1-s4 (including) |
| Junos | Juniper | 19.1-r1-s5 (including) | 19.1-r1-s5 (including) |
| Junos | Juniper | 19.1-r1-s6 (including) | 19.1-r1-s6 (including) |
| Junos | Juniper | 19.1-r2 (including) | 19.1-r2 (including) |
| Junos | Juniper | 19.1-r2-s1 (including) | 19.1-r2-s1 (including) |
| Junos | Juniper | 19.1-r2-s2 (including) | 19.1-r2-s2 (including) |
| Junos | Juniper | 19.1-r2-s3 (including) | 19.1-r2-s3 (including) |
| Junos | Juniper | 19.1-r3 (including) | 19.1-r3 (including) |
| Junos | Juniper | 19.1-r3-s1 (including) | 19.1-r3-s1 (including) |
| Junos | Juniper | 19.1-r3-s2 (including) | 19.1-r3-s2 (including) |
| Junos | Juniper | 19.1-r3-s3 (including) | 19.1-r3-s3 (including) |
| Junos | Juniper | 19.1-r3-s4 (including) | 19.1-r3-s4 (including) |
| Junos | Juniper | 19.1-r3-s5 (including) | 19.1-r3-s5 (including) |
| Junos | Juniper | 19.1-r3-s6 (including) | 19.1-r3-s6 (including) |
| Junos | Juniper | 19.1-r3-s7 (including) | 19.1-r3-s7 (including) |
| Junos | Juniper | 19.1-r3-s8 (including) | 19.1-r3-s8 (including) |
| Junos | Juniper | 19.2 (including) | 19.2 (including) |
| Junos | Juniper | 19.2-r1 (including) | 19.2-r1 (including) |
| Junos | Juniper | 19.2-r1-s1 (including) | 19.2-r1-s1 (including) |
| Junos | Juniper | 19.2-r1-s2 (including) | 19.2-r1-s2 (including) |
| Junos | Juniper | 19.2-r1-s3 (including) | 19.2-r1-s3 (including) |
| Junos | Juniper | 19.2-r1-s4 (including) | 19.2-r1-s4 (including) |
| Junos | Juniper | 19.2-r1-s5 (including) | 19.2-r1-s5 (including) |
| Junos | Juniper | 19.2-r1-s6 (including) | 19.2-r1-s6 (including) |
| Junos | Juniper | 19.2-r1-s7 (including) | 19.2-r1-s7 (including) |
| Junos | Juniper | 19.2-r1-s8 (including) | 19.2-r1-s8 (including) |
| Junos | Juniper | 19.2-r1-s9 (including) | 19.2-r1-s9 (including) |
| Junos | Juniper | 19.2-r2 (including) | 19.2-r2 (including) |
| Junos | Juniper | 19.2-r2-s1 (including) | 19.2-r2-s1 (including) |
| Junos | Juniper | 19.2-r3 (including) | 19.2-r3 (including) |
| Junos | Juniper | 19.2-r3-s1 (including) | 19.2-r3-s1 (including) |
| Junos | Juniper | 19.2-r3-s2 (including) | 19.2-r3-s2 (including) |
| Junos | Juniper | 19.2-r3-s3 (including) | 19.2-r3-s3 (including) |
| Junos | Juniper | 19.2-r3-s4 (including) | 19.2-r3-s4 (including) |
| Junos | Juniper | 19.2-r3-s5 (including) | 19.2-r3-s5 (including) |
| Junos | Juniper | 19.3 (including) | 19.3 (including) |
| Junos | Juniper | 19.3-r1 (including) | 19.3-r1 (including) |
| Junos | Juniper | 19.3-r1-s1 (including) | 19.3-r1-s1 (including) |
| Junos | Juniper | 19.3-r2 (including) | 19.3-r2 (including) |
| Junos | Juniper | 19.3-r2-s1 (including) | 19.3-r2-s1 (including) |
| Junos | Juniper | 19.3-r2-s2 (including) | 19.3-r2-s2 (including) |
| Junos | Juniper | 19.3-r2-s3 (including) | 19.3-r2-s3 (including) |
| Junos | Juniper | 19.3-r2-s4 (including) | 19.3-r2-s4 (including) |
| Junos | Juniper | 19.3-r2-s5 (including) | 19.3-r2-s5 (including) |
| Junos | Juniper | 19.3-r2-s6 (including) | 19.3-r2-s6 (including) |
| Junos | Juniper | 19.3-r3 (including) | 19.3-r3 (including) |
| Junos | Juniper | 19.3-r3-s1 (including) | 19.3-r3-s1 (including) |
| Junos | Juniper | 19.3-r3-s2 (including) | 19.3-r3-s2 (including) |
| Junos | Juniper | 19.3-r3-s3 (including) | 19.3-r3-s3 (including) |
| Junos | Juniper | 19.3-r3-s4 (including) | 19.3-r3-s4 (including) |
| Junos | Juniper | 19.3-r3-s5 (including) | 19.3-r3-s5 (including) |
| Junos | Juniper | 19.4 (including) | 19.4 (including) |
| Junos | Juniper | 19.4-r1 (including) | 19.4-r1 (including) |
| Junos | Juniper | 19.4-r1-s1 (including) | 19.4-r1-s1 (including) |
| Junos | Juniper | 19.4-r1-s2 (including) | 19.4-r1-s2 (including) |
| Junos | Juniper | 19.4-r1-s3 (including) | 19.4-r1-s3 (including) |
| Junos | Juniper | 19.4-r1-s4 (including) | 19.4-r1-s4 (including) |
| Junos | Juniper | 19.4-r2 (including) | 19.4-r2 (including) |
| Junos | Juniper | 19.4-r2-s1 (including) | 19.4-r2-s1 (including) |
| Junos | Juniper | 19.4-r2-s2 (including) | 19.4-r2-s2 (including) |
| Junos | Juniper | 19.4-r2-s3 (including) | 19.4-r2-s3 (including) |
| Junos | Juniper | 19.4-r2-s4 (including) | 19.4-r2-s4 (including) |
| Junos | Juniper | 19.4-r2-s5 (including) | 19.4-r2-s5 (including) |
| Junos | Juniper | 19.4-r2-s6 (including) | 19.4-r2-s6 (including) |
| Junos | Juniper | 19.4-r3 (including) | 19.4-r3 (including) |
| Junos | Juniper | 19.4-r3-s1 (including) | 19.4-r3-s1 (including) |
| Junos | Juniper | 19.4-r3-s2 (including) | 19.4-r3-s2 (including) |
| Junos | Juniper | 19.4-r3-s3 (including) | 19.4-r3-s3 (including) |
| Junos | Juniper | 19.4-r3-s4 (including) | 19.4-r3-s4 (including) |
| Junos | Juniper | 19.4-r3-s5 (including) | 19.4-r3-s5 (including) |
| Junos | Juniper | 19.4-r3-s6 (including) | 19.4-r3-s6 (including) |
| Junos | Juniper | 19.4-r3-s7 (including) | 19.4-r3-s7 (including) |
| Junos | Juniper | 20.1-r1 (including) | 20.1-r1 (including) |
| Junos | Juniper | 20.1-r1-s1 (including) | 20.1-r1-s1 (including) |
| Junos | Juniper | 20.1-r1-s2 (including) | 20.1-r1-s2 (including) |
| Junos | Juniper | 20.1-r1-s3 (including) | 20.1-r1-s3 (including) |
| Junos | Juniper | 20.1-r1-s4 (including) | 20.1-r1-s4 (including) |
| Junos | Juniper | 20.1-r2 (including) | 20.1-r2 (including) |
| Junos | Juniper | 20.1-r2-s1 (including) | 20.1-r2-s1 (including) |
| Junos | Juniper | 20.1-r2-s2 (including) | 20.1-r2-s2 (including) |
| Junos | Juniper | 20.1-r3 (including) | 20.1-r3 (including) |
| Junos | Juniper | 20.1-r3-s1 (including) | 20.1-r3-s1 (including) |
| Junos | Juniper | 20.1-r3-s2 (including) | 20.1-r3-s2 (including) |
| Junos | Juniper | 20.1-r3-s3 (including) | 20.1-r3-s3 (including) |
| Junos | Juniper | 20.1-r3-s4 (including) | 20.1-r3-s4 (including) |
| Junos | Juniper | 20.2 (including) | 20.2 (including) |
| Junos | Juniper | 20.2-r1 (including) | 20.2-r1 (including) |
| Junos | Juniper | 20.2-r1-s1 (including) | 20.2-r1-s1 (including) |
| Junos | Juniper | 20.2-r1-s2 (including) | 20.2-r1-s2 (including) |
| Junos | Juniper | 20.2-r1-s3 (including) | 20.2-r1-s3 (including) |
| Junos | Juniper | 20.2-r2 (including) | 20.2-r2 (including) |
| Junos | Juniper | 20.2-r2-s1 (including) | 20.2-r2-s1 (including) |
| Junos | Juniper | 20.2-r2-s2 (including) | 20.2-r2-s2 (including) |
| Junos | Juniper | 20.2-r2-s3 (including) | 20.2-r2-s3 (including) |
| Junos | Juniper | 20.2-r3 (including) | 20.2-r3 (including) |
| Junos | Juniper | 20.2-r3-s1 (including) | 20.2-r3-s1 (including) |
| Junos | Juniper | 20.2-r3-s2 (including) | 20.2-r3-s2 (including) |
| Junos | Juniper | 20.2-r3-s3 (including) | 20.2-r3-s3 (including) |
| Junos | Juniper | 20.2-r3-s4 (including) | 20.2-r3-s4 (including) |
| Junos | Juniper | 20.3 (including) | 20.3 (including) |
| Junos | Juniper | 20.3-r1 (including) | 20.3-r1 (including) |
| Junos | Juniper | 20.3-r1-s1 (including) | 20.3-r1-s1 (including) |
| Junos | Juniper | 20.3-r1-s2 (including) | 20.3-r1-s2 (including) |
| Junos | Juniper | 20.3-r2 (including) | 20.3-r2 (including) |
| Junos | Juniper | 20.3-r2-s1 (including) | 20.3-r2-s1 (including) |
| Junos | Juniper | 20.3-r3 (including) | 20.3-r3 (including) |
| Junos | Juniper | 20.3-r3-s1 (including) | 20.3-r3-s1 (including) |
| Junos | Juniper | 20.3-r3-s2 (including) | 20.3-r3-s2 (including) |
| Junos | Juniper | 20.3-r3-s3 (including) | 20.3-r3-s3 (including) |
| Junos | Juniper | 20.3-r3-s4 (including) | 20.3-r3-s4 (including) |
| Junos | Juniper | 20.4 (including) | 20.4 (including) |
| Junos | Juniper | 20.4-r1 (including) | 20.4-r1 (including) |
| Junos | Juniper | 20.4-r1-s1 (including) | 20.4-r1-s1 (including) |
| Junos | Juniper | 20.4-r2 (including) | 20.4-r2 (including) |
| Junos | Juniper | 20.4-r2-s1 (including) | 20.4-r2-s1 (including) |
| Junos | Juniper | 20.4-r2-s2 (including) | 20.4-r2-s2 (including) |
| Junos | Juniper | 20.4-r3 (including) | 20.4-r3 (including) |
| Junos | Juniper | 20.4-r3-s1 (including) | 20.4-r3-s1 (including) |
| Junos | Juniper | 21.1 (including) | 21.1 (including) |
| Junos | Juniper | 21.1-r1 (including) | 21.1-r1 (including) |
| Junos | Juniper | 21.1-r1-s1 (including) | 21.1-r1-s1 (including) |
| Junos | Juniper | 21.1-r2 (including) | 21.1-r2 (including) |
| Junos | Juniper | 21.1-r2-s1 (including) | 21.1-r2-s1 (including) |
| Junos | Juniper | 21.1-r2-s2 (including) | 21.1-r2-s2 (including) |
| Junos | Juniper | 21.2 (including) | 21.2 (including) |
| Junos | Juniper | 21.2-r1 (including) | 21.2-r1 (including) |
| Junos | Juniper | 21.2-r1-s1 (including) | 21.2-r1-s1 (including) |
| Junos | Juniper | 21.2-r1-s2 (including) | 21.2-r1-s2 (including) |
| Junos | Juniper | 21.2-r2 (including) | 21.2-r2 (including) |
| Junos | Juniper | 21.2-r2-s1 (including) | 21.2-r2-s1 (including) |
| Junos | Juniper | 21.2-r2-s2 (including) | 21.2-r2-s2 (including) |
| Junos | Juniper | 21.3 (including) | 21.3 (including) |
| Junos | Juniper | 21.3-r1 (including) | 21.3-r1 (including) |
| Junos | Juniper | 21.3-r1-s1 (including) | 21.3-r1-s1 (including) |
| Junos | Juniper | 21.3-r1-s2 (including) | 21.3-r1-s2 (including) |
Resources often have explicit instructions on how to be created, used and destroyed. When code does not follow these instructions, it can lead to unexpected behaviors and potentially exploitable states. Even without explicit instructions, various principles are expected to be adhered to, such as “Do not use an object until after its creation is complete,” or “do not use an object after it has been slated for destruction.”