Juniper chassis with Trio (Trinity) chipset line cards and Junos OS 13.3 before 13.3R8, 14.1 before 14.1R6, 14.2 before 14.2R5, and 15.1 before 15.1R2 allow remote attackers to cause a denial of service (MPC line card crash) via a crafted uBFD packet.
| Software | From | Fixed in |
|---|---|---|
| juniper / junos | 14.1-r1 | 14.1-r1.x |
| juniper / junos | 13.3-r7 | 13.3-r7.x |
| juniper / junos | 14.1-r4 | 14.1-r4.x |
| juniper / junos | 14.2-r1 | 14.2-r1.x |
| juniper / junos | 13.3-r4 | 13.3-r4.x |
| juniper / junos | 14.1 | 14.1.x |
| juniper / junos | 14.2-r2 | 14.2-r2.x |
| juniper / junos | 14.1-r3 | 14.1-r3.x |
| juniper / junos | 13.3 | 13.3.x |
| juniper / junos | 13.3-r5 | 13.3-r5.x |
| juniper / junos | 13.3-r1 | 13.3-r1.x |
| juniper / junos | 14.2-r3 | 14.2-r3.x |
| juniper / junos | 13.3-r2-s2 | 13.3-r2-s2.x |
| juniper / junos | 14.2-r4 | 14.2-r4.x |
| juniper / junos | 13.3-r6 | 13.3-r6.x |
| juniper / junos | 15.1-r1 | 15.1-r1.x |
| juniper / junos | 13.3-r2 | 13.3-r2.x |
| juniper / junos | 14.1-r2 | 14.1-r2.x |
| juniper / junos | 13.3-r3 | 13.3-r3.x |
| juniper / junos | 14.1-r5 | 14.1-r5.x |
| juniper / junos | 15.1 | 15.1.x |