PT-2021-12949 · Juniper Networks · Junos

Published 2021-04-22 · Updated 2021-07-23 · CVE-2021-0237

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series, EX4650 Series, QFX5K Series versions prior to 15.1R7-S9 Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series, EX4650 Series, QFX5K Series versions 17.3 prior to 17.3R3-S11 Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series, EX4650 Series, QFX5K Series versions 17.4 prior to 17.4R2-S13, 17.4R3-S5 Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series, EX4650 Series, QFX5K Series versions 18.2 prior to 18.2R3-S8 Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series, EX4650 Series, QFX5K Series versions 18.3 prior to 18.3R3-S4 Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series, EX4650 Series, QFX5K Series versions 18.4 prior to 18.4R2-S7, 18.4R3-S6 Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series, EX4650 Series, QFX5K Series versions 19.1 prior to 19.1R3-S4 Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series, EX4650 Series, QFX5K Series versions 19.2 prior to 19.2R1-S6, 19.2R3-S1 Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series, EX4650 Series, QFX5K Series versions 19.3 prior to 19.3R3-S1 Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series, EX4650 Series, QFX5K Series versions 19.4 prior to 19.4R2-S4, 19.4R3-S1 Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series, EX4650 Series, QFX5K Series versions 20.1 prior to 20.1R2 Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series, EX4650 Series, QFX5K Series versions 20.2 prior to 20.2R2, 20.2R3 Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series, EX4650 Series, QFX5K Series versions 20.3 prior to 20.3R1-S2, 20.3R2

Description: The issue affects Juniper Networks EX4300-MP Series, EX4600 Series, EX4650 Series, QFX5K Series deployed as a Virtual Chassis with a specific Layer 2 circuit configuration. The Packet Forwarding Engine manager (FXPC) process may crash and restart upon receipt of specific layer 2 frames, creating a sustained Denial of Service (DoS) condition.

Recommendations: For versions 15.1 prior to 15.1R7-S9, update to 15.1R7-S9 or later. For versions 17.3 prior to 17.3R3-S11, update to 17.3R3-S11 or later. For versions 17.4 prior to 17.4R2-S13, 17.4R3-S5, update to 17.4R2-S13 or 17.4R3-S5 or later. For versions 18.2 prior to 18.2R3-S8, update to 18.2R3-S8 or later. For versions 18.3 prior to 18.3R3-S4, update to 18.3R3-S4 or later. For versions 18.4 prior to 18.4R2-S7, 18.4R3-S6, update to 18.4R2-S7 or 18.4R3-S6 or later. For versions 19.1 prior to 19.1R3-S4, update to 19.1R3-S4 or later. For versions 19.2 prior to 19.2R1-S6, 19.2R3-S1, update to 19.2R1-S6 or 19.2R3-S1 or later. For versions 19.3 prior to 19.3R3-S1, update to 19.3R3-S1 or later. For versions 19.4 prior to 19.4R2-S4, 19.4R3-S1, update to 19.4R2-S4 or 19.4R3-S1 or later. For versions 20.1 prior to 20.1R2, update to 20.1R2 or later. For versions 20.2 prior to 20.2R2, 20.2R3, update to 20.2R2 or 20.2R3 or later. For versions 20.3 prior to 20.3R1-S2, 20.3R2, update to 20.3R1-S2 or 20.3R2 or later.

Fix

Related Identifiers

CVE-2021-0237

Affected Products

Junos

References · 3

• https://osv.dev/vulnerability/CVE-2021-0237 · Vendor Advisory
• https://kb.juniper.net/JSA11132 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-0237 · Security Note