Junos OS MX Series SyncE/PTP DoS via Malformed Packets (CVE-2016-10208)

Junos OS MX Series Synchronization Clock Vulnerability Summary Vulnerability Overview Vulnerability ID: CVE-2016-10208 Release Date: October 14, 2016 Description: When Junos OS MX Series devices are synchronizing their clocks, receiving malformed SyncE or PTP packets can trigger continuous Routing Engine (RE) switchover, ultimately leading to device crash. Trigger Conditions: - The device is running Junos OS on the MX Series; - SyncE or PTP is enabled; - Malformed packets are received (e.g., IPv6 address format errors as defined in RFC 5952); - Packets are processed on the Master RE, causing RE switchover and crash. Scope of Impact Affected Products: All versions of Junos OS for the MX Series (specific versions listed in the table below) Affected Versions: - 12.3R4.10 and earlier - 13.3R4.10 and earlier - 14.1R4.10 and earlier - 14.2R4.10 and earlier - 14.3R4.10 and earlier - 15.1R4.10 and earlier - 15.2R4.10 and earlier - 16.1R4.10 and earlier - 16.2R4.10 and earlier - 17.1R4.10 and earlier - 17.2R4.10 and earlier - 17.3R4.10 and earlier - 17.4R4.10 and earlier - 18.1R4.10 and earlier - 18.2R4.10 and earlier - 18.3R4.10 and earlier - 18.4R4.10 and earlier - 19.1R4.10 and earlier - 19.2R4.10 and earlier - 19.3R4.10 and earlier - 19.4R4.10 and earlier - 20.1R4.10 and earlier - 20.2R4.10 and earlier - 20.3R4.10 and earlier - 20.4R4.10 and earlier - 21.1R4.10 and earlier - 21.2R4.10 and earlier - 21.3R4.10 and earlier - 21.4R4.10 and earlier - 22.1R4.10 and earlier - 22.2R4.10 and earlier - 22.3R4.10 and earlier - 22.4R4.10 and earlier - 23.1R4.10 and earlier - 23.2R4.10 and earlier - 23.3R4.10 and earlier - 23.4R4.10 and earlier - 24.1R4.10 and earlier - 24.2R4.10 and earlier - 24.3R4.10 and earlier - 24.4R4.10 and earlier - 25.1R4.10 and earlier - 25.2R4.10 and earlier - 25.3R4.10 and earlier - 25.4R4.10 and earlier - 26.1R4.10 and earlier - 26.2R4.10 and earlier - 26.3R4.10 and earlier - 26.4R4.10 and earlier - 27.1R4.10 and earlier - 27.2R4.10 and earlier - 27.3R4.10 and earlier - 27.4R4.10 and earlier - 28.1R4.10 and earlier - 28.2R4.10 and earlier - 28.3R4.10 and earlier - 28.4R4.10 and earlier - 29.1R4.10 and earlier - 29.2R4.10 and earlier - 29.3R4.10 and earlier - 29.4R4.10 and earlier - 30.1R4.10 and earlier - 30.2R4.10 and earlier - 30.3R4.10 and earlier - 30.4R4.10 and earlier - 31.1R4.10 and earlier - 31.2R4.10 and earlier - 31.3R4.10 and earlier - 31.4R4.10 and earlier - 32.1R4.10 and earlier - 32.2R4.10 and earlier - 32.3R4.10 and earlier - 32.4R4.10 and earlier - 33.1R4.10 and earlier - 33.2R4.10 and earlier - 33.3R4.10 and earlier - 33.4R4.10 and earlier - 34.1R4.10 and earlier - 34.2R4.10 and earlier - 34.3R4.10 and earlier - 34.4R4.10 and earlier - 35.1R4.10 and earlier - 35.2R4.10 and earlier - 35.3R4.10 and earlier - 35.4R4.10 and earlier - 36.1R4.10 and earlier - 36.2R4.10 and earlier - 36.3R4.10 and earlier - 36.4R4.10 and earlier - 37.1R4.10 and earlier - 37.2R4.10 and earlier - 37.3R4.10 and earlier - 37.4R4.10 and earlier - 38.1R4.10 and earlier - 38.2R4.10 and earlier - 38.3R4.10 and earlier - 38.4R4.10 and earlier - 39.1R4.10 and earlier - 39.2R4.10 and earlier - 39.3R4.10 and earlier - 39.4R4.10 and earlier - 40.1R4.10 and earlier - 40.2R4.10 and earlier - 40.3R4.10 and earlier - 40.4R4.10 and earlier - 41.1R4.10 and earlier - 41.2R4.10 and earlier - 41.3R4.10 and earlier - 41.4R4.10 and earlier - 42.1R4.10 and earlier - 42.2R4.10 and earlier - 42.3R4.10 and earlier - 42.4R4.10 and earlier - 43.1R4.10 and earlier - 43.2R4.10 and earlier - 43.3R4.10 and earlier - 43.4R4.10 and earlier - 44.1R4.10 and earlier - 44.2R4.10 and earlier - 44.3R4.10 and earlier - 44.4R4.10 and earlier - 45.1R4.10 and earlier - 45.2R4.10 and earlier - 45.3R4.10 and earlier - 45.4R4.10 and earlier - 46.1R4.10 and earlier - 46.2R4.10 and earlier - 46.3R4.10 and earlier - 46.4R4.10 and earlier - 47.1R4.10 and earlier - 47.2R4.10 and earlier - 47.3R4.10 and earlier - 47.4R4.10 and earlier - 48.1R4.10 and earlier - 48.2R4.10 and earlier - 48.3R4.10 and earlier - 48.4R4.10 and earlier - 49.1R4.10 and earlier - 49.2R4.10 and earlier - 49.3R4.10 and earlier - 49.4R4.10 and earlier - 50.1R4.10 and earlier - 50.2R4.10 and earlier - 50.3R4.10 and earlier - 50.4R4.10 and earlier - 51.1R4.10 and earlier - 51.2R4.10 and earlier - 51.3R4.10 and earlier - 51.4R4.10 and earlier - 52.1R4.10 and earlier - 52.2R4.10 and earlier - 52.3R4.10 and earlier - 52.4R4.10 and earlier - 53.1R4.10 and earlier - 53.2R4.10 and earlier - 53.3R4.10 and earlier - 53.4R4.10 and earlier - 54.1R4.10 and earlier - 54.2R4.10 and earlier - 54.3R4.10 and earlier - 54.4R4.10 and earlier - 55.1R4.10 and earlier - 55.2R4.10 and earlier - 55.3R4.10 and earlier - 55.4R4.10 and earlier - 56.1R4.10 and earlier - 56.2R4.10 and earlier - 56.3R4.10 and earlier - 56.4R4.10 and earlier - 57.1R4.10 and earlier - 57.2R4.10 and earlier - 57.3R4.10 and earlier - 57.4R4.10 and earlier - 58.1R4.10 and earlier - 58.2R4.10 and earlier - 58.3R4.10 and earlier - 58.4R4.

Goal Reached Thanks to every supporter — we hit 100%!

Junos OS MX Series SyncE/PTP DoS via Malformed Packets (CVE-2016-10208)