An Improper Check for Unusual or Exceptional Conditions vulnerability in the bbe-smgd of Juniper Networks Junos OS allows an unauthenticated, adjacent attacker to cause a Denial of Service (DoS). In a Broadband Edge / Subscriber Management scenario on MX Series when a specifically malformed ICMP packet addressed to the device is received from a subscriber the bbe-smgd will crash, affecting the subscriber sessions that are connecting, updating, or terminating. Continued receipt of such packets will lead to a sustained DoS condition. When this issue happens the below log can be seen if the traceoptions for the processes smg-service are enabled: BBE_TRACE(TRACE_LEVEL_INFO, %s: Dropped unsupported ICMP PKT … This issue affects Juniper Networks Junos OS on MX Series: All versions prior to 19.4R3-S11; 20.2 versions prior to 20.2R3-S7; 20.3 versions prior to 20.3R3-S6; 20.4 versions prior to 20.4R3-S6; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S4; 21.3 versions prior to 21.3R3-S3; 21.4 versions prior to 21.4R3-S2; 22.1 versions prior to 22.1R2-S2, 22.1R3; 22.2 versions prior to 22.2R2; 22.3 versions prior to 22.3R1-S2, 22.3R2.
The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Junos | Juniper | * | 19.4 (excluding) |
Junos | Juniper | 19.4 (including) | 19.4 (including) |
Junos | Juniper | 19.4-r1 (including) | 19.4-r1 (including) |
Junos | Juniper | 19.4-r1-s1 (including) | 19.4-r1-s1 (including) |
Junos | Juniper | 19.4-r1-s2 (including) | 19.4-r1-s2 (including) |
Junos | Juniper | 19.4-r1-s3 (including) | 19.4-r1-s3 (including) |
Junos | Juniper | 19.4-r1-s4 (including) | 19.4-r1-s4 (including) |
Junos | Juniper | 19.4-r2 (including) | 19.4-r2 (including) |
Junos | Juniper | 19.4-r2-s1 (including) | 19.4-r2-s1 (including) |
Junos | Juniper | 19.4-r2-s2 (including) | 19.4-r2-s2 (including) |
Junos | Juniper | 19.4-r2-s3 (including) | 19.4-r2-s3 (including) |
Junos | Juniper | 19.4-r2-s4 (including) | 19.4-r2-s4 (including) |
Junos | Juniper | 19.4-r2-s5 (including) | 19.4-r2-s5 (including) |
Junos | Juniper | 19.4-r2-s6 (including) | 19.4-r2-s6 (including) |
Junos | Juniper | 19.4-r2-s7 (including) | 19.4-r2-s7 (including) |
Junos | Juniper | 19.4-r3 (including) | 19.4-r3 (including) |
Junos | Juniper | 19.4-r3-s1 (including) | 19.4-r3-s1 (including) |
Junos | Juniper | 19.4-r3-s10 (including) | 19.4-r3-s10 (including) |
Junos | Juniper | 19.4-r3-s2 (including) | 19.4-r3-s2 (including) |
Junos | Juniper | 19.4-r3-s3 (including) | 19.4-r3-s3 (including) |
Junos | Juniper | 19.4-r3-s4 (including) | 19.4-r3-s4 (including) |
Junos | Juniper | 19.4-r3-s5 (including) | 19.4-r3-s5 (including) |
Junos | Juniper | 19.4-r3-s6 (including) | 19.4-r3-s6 (including) |
Junos | Juniper | 19.4-r3-s7 (including) | 19.4-r3-s7 (including) |
Junos | Juniper | 19.4-r3-s8 (including) | 19.4-r3-s8 (including) |
Junos | Juniper | 19.4-r3-s9 (including) | 19.4-r3-s9 (including) |
Junos | Juniper | 20.2 (including) | 20.2 (including) |
Junos | Juniper | 20.2-r1 (including) | 20.2-r1 (including) |
Junos | Juniper | 20.2-r1-s1 (including) | 20.2-r1-s1 (including) |
Junos | Juniper | 20.2-r1-s2 (including) | 20.2-r1-s2 (including) |
Junos | Juniper | 20.2-r1-s3 (including) | 20.2-r1-s3 (including) |
Junos | Juniper | 20.2-r2 (including) | 20.2-r2 (including) |
Junos | Juniper | 20.2-r2-s1 (including) | 20.2-r2-s1 (including) |
Junos | Juniper | 20.2-r2-s2 (including) | 20.2-r2-s2 (including) |
Junos | Juniper | 20.2-r2-s3 (including) | 20.2-r2-s3 (including) |
Junos | Juniper | 20.2-r3 (including) | 20.2-r3 (including) |
Junos | Juniper | 20.2-r3-s1 (including) | 20.2-r3-s1 (including) |
Junos | Juniper | 20.2-r3-s2 (including) | 20.2-r3-s2 (including) |
Junos | Juniper | 20.2-r3-s3 (including) | 20.2-r3-s3 (including) |
Junos | Juniper | 20.2-r3-s4 (including) | 20.2-r3-s4 (including) |
Junos | Juniper | 20.2-r3-s5 (including) | 20.2-r3-s5 (including) |
Junos | Juniper | 20.2-r3-s6 (including) | 20.2-r3-s6 (including) |
Junos | Juniper | 20.3 (including) | 20.3 (including) |
Junos | Juniper | 20.3-r1 (including) | 20.3-r1 (including) |
Junos | Juniper | 20.3-r1-s1 (including) | 20.3-r1-s1 (including) |
Junos | Juniper | 20.3-r1-s2 (including) | 20.3-r1-s2 (including) |
Junos | Juniper | 20.3-r2 (including) | 20.3-r2 (including) |
Junos | Juniper | 20.3-r2-s1 (including) | 20.3-r2-s1 (including) |
Junos | Juniper | 20.3-r3 (including) | 20.3-r3 (including) |
Junos | Juniper | 20.3-r3-s1 (including) | 20.3-r3-s1 (including) |
Junos | Juniper | 20.3-r3-s2 (including) | 20.3-r3-s2 (including) |
Junos | Juniper | 20.3-r3-s3 (including) | 20.3-r3-s3 (including) |
Junos | Juniper | 20.3-r3-s4 (including) | 20.3-r3-s4 (including) |
Junos | Juniper | 20.3-r3-s5 (including) | 20.3-r3-s5 (including) |
Junos | Juniper | 21.1 (including) | 21.1 (including) |
Junos | Juniper | 21.1-r1 (including) | 21.1-r1 (including) |
Junos | Juniper | 21.1-r1-s1 (including) | 21.1-r1-s1 (including) |
Junos | Juniper | 21.1-r2 (including) | 21.1-r2 (including) |
Junos | Juniper | 21.1-r2-s1 (including) | 21.1-r2-s1 (including) |
Junos | Juniper | 21.1-r2-s2 (including) | 21.1-r2-s2 (including) |
Junos | Juniper | 21.1-r3 (including) | 21.1-r3 (including) |
Junos | Juniper | 21.1-r3-s1 (including) | 21.1-r3-s1 (including) |
Junos | Juniper | 21.1-r3-s2 (including) | 21.1-r3-s2 (including) |
Junos | Juniper | 21.1-r3-s3 (including) | 21.1-r3-s3 (including) |
Junos | Juniper | 21.2 (including) | 21.2 (including) |
Junos | Juniper | 21.2-r1 (including) | 21.2-r1 (including) |
Junos | Juniper | 21.2-r1-s1 (including) | 21.2-r1-s1 (including) |
Junos | Juniper | 21.2-r1-s2 (including) | 21.2-r1-s2 (including) |
Junos | Juniper | 21.2-r2 (including) | 21.2-r2 (including) |
Junos | Juniper | 21.2-r2-s1 (including) | 21.2-r2-s1 (including) |
Junos | Juniper | 21.2-r2-s2 (including) | 21.2-r2-s2 (including) |
Junos | Juniper | 21.2-r3 (including) | 21.2-r3 (including) |
Junos | Juniper | 21.2-r3-s1 (including) | 21.2-r3-s1 (including) |
Junos | Juniper | 21.2-r3-s2 (including) | 21.2-r3-s2 (including) |
Junos | Juniper | 21.2-r3-s3 (including) | 21.2-r3-s3 (including) |
Junos | Juniper | 21.3 (including) | 21.3 (including) |
Junos | Juniper | 21.3-r1 (including) | 21.3-r1 (including) |
Junos | Juniper | 21.3-r1-s1 (including) | 21.3-r1-s1 (including) |
Junos | Juniper | 21.3-r1-s2 (including) | 21.3-r1-s2 (including) |
Junos | Juniper | 21.3-r2 (including) | 21.3-r2 (including) |
Junos | Juniper | 21.3-r2-s1 (including) | 21.3-r2-s1 (including) |
Junos | Juniper | 21.3-r2-s2 (including) | 21.3-r2-s2 (including) |
Junos | Juniper | 21.3-r3 (including) | 21.3-r3 (including) |
Junos | Juniper | 21.3-r3-s1 (including) | 21.3-r3-s1 (including) |
Junos | Juniper | 21.3-r3-s2 (including) | 21.3-r3-s2 (including) |
Junos | Juniper | 21.4 (including) | 21.4 (including) |
Junos | Juniper | 21.4-r1 (including) | 21.4-r1 (including) |
Junos | Juniper | 21.4-r1-s1 (including) | 21.4-r1-s1 (including) |
Junos | Juniper | 21.4-r1-s2 (including) | 21.4-r1-s2 (including) |
Junos | Juniper | 21.4-r2 (including) | 21.4-r2 (including) |
Junos | Juniper | 21.4-r2-s1 (including) | 21.4-r2-s1 (including) |
Junos | Juniper | 21.4-r2-s2 (including) | 21.4-r2-s2 (including) |
Junos | Juniper | 21.4-r3 (including) | 21.4-r3 (including) |
Junos | Juniper | 21.4-r3-s1 (including) | 21.4-r3-s1 (including) |
Junos | Juniper | 22.1-r1 (including) | 22.1-r1 (including) |
Junos | Juniper | 22.1-r1-s1 (including) | 22.1-r1-s1 (including) |
Junos | Juniper | 22.1-r1-s2 (including) | 22.1-r1-s2 (including) |
Junos | Juniper | 22.1-r2 (including) | 22.1-r2 (including) |
Junos | Juniper | 22.1-r2-s1 (including) | 22.1-r2-s1 (including) |
Junos | Juniper | 22.2-r1 (including) | 22.2-r1 (including) |
Junos | Juniper | 22.2-r1-s1 (including) | 22.2-r1-s1 (including) |
Junos | Juniper | 22.2-r1-s2 (including) | 22.2-r1-s2 (including) |
Junos | Juniper | 22.3-r1 (including) | 22.3-r1 (including) |
Junos | Juniper | 22.3-r1-s1 (including) | 22.3-r1-s1 (including) |
The programmer may assume that certain events or conditions will never occur or do not need to be worried about, such as low memory conditions, lack of access to resources due to restrictive permissions, or misbehaving clients or components. However, attackers may intentionally trigger these unusual conditions, thus violating the programmer’s assumptions, possibly introducing instability, incorrect behavior, or a vulnerability. Note that this entry is not exclusively about the use of exceptions and exception handling, which are mechanisms for both checking and handling unusual or unexpected conditions.