PT-2021-12961 · Juniper Networks · Junos Evolved+1

Published 2021-04-22 · Updated 2021-04-27 · CVE-2021-0250

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 17.4R1 through 17.4R2-S6, 17.4R3 Juniper Networks Junos OS versions 18.1 through 18.1R3-S7 Juniper Networks Junos OS versions 18.2 through 18.2R2-S6, 18.2R3-S3 Juniper Networks Junos OS versions 18.3 through 18.3R1-S7, 18.3R2-S3, 18.3R3 Juniper Networks Junos OS versions 18.4 through 18.4R1-S5, 18.4R2-S3, 18.4R3 Juniper Networks Junos OS versions 19.1 through 19.1R1-S4, 19.1R2 Juniper Networks Junos OS versions 19.2 through 19.2R1-S3, 19.2R2 Juniper Networks Junos OS Evolved versions 19.2-EVO through 19.2R2-EVO

Description: A vulnerability in the Routing Protocol Daemon (RPD) process of Juniper Networks Junos OS allows an attacker to send a specific crafted BGP update message, causing the RPD service to crash and creating a Denial of Service (DoS) condition. This issue affects both IPv4 and IPv6 environments. Continued receipt and processing of this update message will create a sustained Denial of Service (DoS) condition.

Recommendations: For Juniper Networks Junos OS versions 17.4R1 through 17.4R2-S6, 17.4R3, update to version 17.4R2-S6 or later. For Juniper Networks Junos OS versions 18.1 through 18.1R3-S7, update to version 18.1R3-S7 or later. For Juniper Networks Junos OS versions 18.2 through 18.2R2-S6, 18.2R3-S3, update to version 18.2R2-S6 or later. For Juniper Networks Junos OS versions 18.3 through 18.3R1-S7, 18.3R2-S3, 18.3R3, update to version 18.3R1-S7 or later. For Juniper Networks Junos OS versions 18.4 through 18.4R1-S5, 18.4R2-S3, 18.4R3, update to version 18.4R1-S5 or later. For Juniper Networks Junos OS versions 19.1 through 19.1R1-S4, 19.1R2, update to version 19.1R1-S4 or later. For Juniper Networks Junos OS versions 19.2 through 19.2R1-S3, 19.2R2, update to version 19.2R1-S3 or later. For Juniper Networks Junos OS Evolved versions 19.2-EVO through 19.2R2-EVO, update to version 19.2R2-EVO or later.

Fix

Related Identifiers

CVE-2021-0250

Affected Products

Junos

Junos Evolved

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-0250 · Security Note
• https://kb.juniper.net/JSA11143 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-0250 · Vendor Advisory