PT-2021-12950 · Juniper Networks · Junos Evolved
Published
2021-04-22
·
Updated
2021-04-27
·
CVE-2021-0239
CVSS v3.1
6.5
Medium
| Vector | AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Juniper Networks Junos OS Evolved versions prior to 20.4R1-EVO
Description:
The issue is caused by the receipt of a specific stream of genuine Layer 2 frames, which may crash the Advanced Forwarding Toolkit (AFT) manager process, leading to a Denial of Service (DoS) condition. An attacker can repeatedly crash the packet forwarding engine (PFE) by continuously sending this specific stream of frames, causing a sustained DoS.
Recommendations:
For versions prior to 20.4R1-EVO, update to version 20.4R1-EVO or later to resolve the issue. As a temporary workaround, consider restricting access to the network to minimize the risk of exploitation.
Fix
Improper Check for Exceptional Conditions
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Junos Evolved