PT-2021-12940 · Juniper Networks · Junos Evolved

Published 2021-04-22 · Updated 2021-10-07 · CVE-2021-0226

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions 19.4 through 19.4R2-S3-EVO Juniper Networks Junos OS Evolved versions 20.1 through 20.1R2-S3-EVO Juniper Networks Junos OS Evolved versions 20.2 through 20.2R2-S1-EVO Juniper Networks Junos OS Evolved versions 20.3 through 20.3R2-EVO

Description: The issue is caused by the receipt of a specific IPv6 packet, which may terminate an established IPv6 BGP session and create a Denial of Service (DoS) condition. Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue affects IBGP or EBGP peer sessions with IPv6 and does not affect IPv4 BGP sessions.

Recommendations: For Juniper Networks Junos OS Evolved versions 19.4 through 19.4R2-S3-EVO, update to version 19.4R2-S3-EVO or later. For Juniper Networks Junos OS Evolved versions 20.1 through 20.1R2-S3-EVO, update to version 20.1R2-S3-EVO or later. For Juniper Networks Junos OS Evolved versions 20.2 through 20.2R2-S1-EVO, update to version 20.2R2-S1-EVO or later. For Juniper Networks Junos OS Evolved versions 20.3 through 20.3R2-EVO, update to version 20.3R2-EVO or later.

Fix

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

CVE-2021-0226

Affected Products

Junos Evolved

References · 3

• https://kb.juniper.net/JSA11121 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-0226 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-0226 · Security Note