PT-2021-12971 · Juniper Networks · Junos

Published 2021-04-22 · Updated 2021-05-04 · CVE-2021-0262

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Junos OS versions 19.1R3-S1 through 19.1R3-S2 Junos OS versions 19.2R2 through 19.2R3-S0 Junos OS versions 20.2 through 20.2R1-S1

Description: A Use After Free vulnerability was identified in PFE packet processing on the QFX10002-60C switching platform. This issue may allow a logically adjacent attacker to trigger a Denial of Service (DoS), and continued exploitation will sustain the DoS condition.

Recommendations: For Junos OS version 19.1, update to version 19.1R3-S3 or later. For Junos OS version 19.2, update to version 19.2R3-S1 or later. For Junos OS version 20.2, update to version 20.2R1-S2 or later.

Fix

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2021-0262

Affected Products

Junos

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-0262 · Security Note
• https://kb.juniper.net/JSA11153 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-0262 · Vendor Advisory