CVE-2017-2346: MS-MPC or MS-MIC crash when passing large fragmented traffic through an ALG

Security readout for executives and security teams

This Juniper Junos OS issue can crash a service processing card when certain large fragmented traffic passes through an enabled ALG. Repeated crashes can create an extended denial of service. Exposure is narrow: only listed Junos OS releases on MX platforms, with NAT or stateful firewall rules using ALGs. Likely exposure is limited to Juniper MX deployments running the named Junos OS release ranges with NAT or stateful-firewall rules configured with ALGs enabled. The source states no other Junos OS versions, Juniper products, or platforms are affected. Treat this as a targeted network availability risk, not a broad enterprise compromise. Prioritize remediation where affected MX routers support critical traffic flows and use ALG-enabled NAT or firewall services. Business urgency rises if repeated card crashes would disrupt customer, partner, or production network connectivity. Mitigation focus: Upgrade affected Junos OS deployments to a fixed or later release named by Juniper.; Prioritize MX platforms using MS-MPC or MS-MIC Service PICs with ALG-enabled NAT or firewall rules.; Consult Juniper advisory JSA10794 before changing ALG behavior as a temporary risk reduction..

Prepared

May 25, 2026, 05:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.