PT-2021-12938 · Juniper Networks · Junos
Published
2021-04-22
·
Updated
2021-07-23
·
CVE-2021-0224
CVSS v3.1
6.5
Medium
| Vector | AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Juniper Networks Junos OS versions prior to 17.3R3-S12
Juniper Networks Junos OS versions 17.4 prior to 17.4R2-S13
Juniper Networks Junos OS versions 18.1 prior to 18.1R3-S13
Juniper Networks Junos OS versions 18.2 prior to 18.2R3-S8
Juniper Networks Junos OS versions 18.3 prior to 18.3R3-S5
Juniper Networks Junos OS versions 18.4 prior to 18.4R1-S8, 18.4R3-S8
Juniper Networks Junos OS versions 19.1 prior to 19.1R3-S4
Juniper Networks Junos OS versions 19.2 prior to 19.2R3-S2
Juniper Networks Junos OS versions 19.3 prior to 19.3R3-S1
Juniper Networks Junos OS versions 19.4 prior to 19.4R3-S1
Juniper Networks Junos OS versions 20.1 prior to 20.1R2
Juniper Networks Junos OS versions 20.2 prior to 20.2R2
Juniper Networks Junos OS versions 20.3 prior to 20.3R2
Description:
A vulnerability in the handling of internal resources necessary to bring up a large number of Layer 2 broadband remote access subscriber (BRAS) nodes in Juniper Networks Junos OS can cause the Access Node Control Protocol daemon (ANCPD) to crash and restart, leading to a Denial of Service (DoS) condition. Continued processing of spoofed subscriber nodes will create a sustained Denial of Service (DoS) condition. When the number of subscribers attempting to connect exceeds the configured maximum-discovery-table-entries value, the subscriber fails to map to an internal neighbor entry, causing the ANCPD process to crash.
Recommendations:
For Juniper Networks Junos OS versions prior to 17.3R3-S12, update to version 17.3R3-S12 or later.
For Juniper Networks Junos OS versions 17.4 prior to 17.4R2-S13, update to version 17.4R2-S13 or later.
For Juniper Networks Junos OS versions 18.1 prior to 18.1R3-S13, update to version 18.1R3-S13 or later.
For Juniper Networks Junos OS versions 18.2 prior to 18.2R3-S8, update to version 18.2R3-S8 or later.
For Juniper Networks Junos OS versions 18.3 prior to 18.3R3-S5, update to version 18.3R3-S5 or later.
For Juniper Networks Junos OS versions 18.4 prior to 18.4R1-S8, 18.4R3-S8, update to version 18.4R1-S8, 18.4R3-S8 or later.
For Juniper Networks Junos OS versions 19.1 prior to 19.1R3-S4, update to version 19.1R3-S4 or later.
For Juniper Networks Junos OS versions 19.2 prior to 19.2R3-S2, update to version 19.2R3-S2 or later.
For Juniper Networks Junos OS versions 19.3 prior to 19.3R3-S1, update to version 19.3R3-S1 or later.
For Juniper Networks Junos OS versions 19.4 prior to 19.4R3-S1, update to version 19.4R3-S1 or later.
For Juniper Networks Junos OS versions 20.1 prior to 20.1R2, update to version 20.1R2 or later.
For Juniper Networks Junos OS versions 20.2 prior to 20.2R2, update to version 20.2R2 or later.
For Juniper Networks Junos OS versions 20.3 prior to 20.3R2, update to version 20.3R2 or later.
Fix
DoS
Allocation of Resources Without Limits
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Junos