PT-2021-19260 · Juniper Networks · Junos

Published

2021-10-19

·

Updated

2022-10-27

·

CVE-2021-31361

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on QFX Series versions prior to 17.3R3-S11 Juniper Networks Junos OS on QFX Series versions 17.4 prior to 17.4R2-S13, 17.4R3-S4 Juniper Networks Junos OS on QFX Series versions 18.1 prior to 18.1R3-S12 Juniper Networks Junos OS on QFX Series versions 18.2 prior to 18.2R2-S8, 18.2R3-S7 Juniper Networks Junos OS on QFX Series versions 18.3 prior to 18.3R3-S4 Juniper Networks Junos OS on QFX Series versions 18.4 prior to 18.4R1-S8, 18.4R2-S7, 18.4R3-S7 Juniper Networks Junos OS on QFX Series versions 19.1 prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S4 Juniper Networks Junos OS on QFX Series versions 19.2 prior to 19.2R1-S6, 19.2R3-S2 Juniper Networks Junos OS on QFX Series versions 19.3 prior to 19.3R3-S1 Juniper Networks Junos OS on QFX Series versions 19.4 prior to 19.4R2-S3, 19.4R3-S1 Juniper Networks Junos OS on QFX Series versions 20.1 prior to 20.1R2, 20.1R3 Juniper Networks Junos OS on QFX Series versions 20.2 prior to 20.2R2, 20.2R3 Juniper Networks Junos OS on QFX Series versions 20.3 prior to 20.3R1-S1, 20.3R2 Juniper Networks Junos OS on PTX Series versions prior to 18.4R3-S9 Juniper Networks Junos OS on PTX Series versions 19.1 prior to 19.1R3-S6 Juniper Networks Junos OS on PTX Series versions 19.2 prior to 19.2R1-S7, 19.2R3-S3 Juniper Networks Junos OS on PTX Series versions 19.3 prior to 19.3R2-S6, 19.3R3-S3 Juniper Networks Junos OS on PTX Series versions 19.4 prior to 19.4R1-S4, 19.4R3-S5 Juniper Networks Junos OS on PTX Series versions 20.1 prior to 20.1R2-S2, 20.1R3 Juniper Networks Junos OS on PTX Series versions 20.2 prior to 20.2R3-S1 Juniper Networks Junos OS on PTX Series versions 20.3 prior to 20.3R2-S1, 20.3R3 Juniper Networks Junos OS on PTX Series versions 20.4 prior to 20.4R2-S1, 20.4R3 Juniper Networks Junos OS on PTX Series versions 21.1 prior to 21.1R1-S1, 21.1R2
Description The issue is caused by an Improper Check for Unusual or Exceptional Conditions vulnerability combined with Improper Handling of Exceptional Conditions in Juniper Networks Junos OS on QFX Series and PTX Series. This allows an unauthenticated network-based attacker to cause increased FPC CPU utilization by sending specific IP packets that are being VXLAN encapsulated, leading to a partial Denial of Service (DoS). Continued receipt of these specific traffic will create a sustained Denial of Service (DoS) condition.
Recommendations For Juniper Networks Junos OS on QFX Series versions prior to 17.3R3-S11, update to version 17.3R3-S11 or later. For Juniper Networks Junos OS on QFX Series versions 17.4 prior to 17.4R2-S13, 17.4R3-S4, update to version 17.4R2-S13 or 17.4R3-S4 or later. For Juniper Networks Junos OS on QFX Series versions 18.1 prior to 18.1R3-S12, update to version 18.1R3-S12 or later. For Juniper Networks Junos OS on QFX Series versions 18.2 prior to 18.2R2-S8, 18.2R3-S7, update to version 18.2R2-S8 or 18.2R3-S7 or later. For Juniper Networks Junos OS on QFX Series versions 18.3 prior to 18.3R3-S4, update to version 18.3R3-S4 or later. For Juniper Networks Junos OS on QFX Series versions 18.4 prior to 18.4R1-S8, 18.4R2-S7, 18.4R3-S7, update to version 18.4R1-S8 or 18.4R2-S7 or 18.4R3-S7 or later. For Juniper Networks Junos OS on QFX Series versions 19.1 prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S4, update to version 19.1R1-S6 or 19.1R2-S2 or 19.1R3-S4 or later. For Juniper Networks Junos OS on QFX Series versions 19.2 prior to 19.2R1-S6, 19.2R3-S2, update to version 19.2R1-S6 or 19.2R3-S2 or later. For Juniper Networks Junos OS on QFX Series versions 19.3 prior to 19.3R3-S1, update to version 19.3R3-S1 or later. For Juniper Networks Junos OS on QFX Series versions 19.4 prior to 19.4R2-S3, 19.4R3-S1, update to version 19.4R2-S3 or 19.4R3-S1 or later. For Juniper Networks Junos OS on QFX Series versions 20.1 prior to 20.1R2, 20.1R3, update to version 20.1R2 or 20.1R3 or later. For Juniper Networks Junos OS on QFX Series versions 20.2 prior to 20.2R2, 20.2R3, update to version 20.2R2 or 20.2R3 or later. For Juniper Networks Junos OS on QFX Series versions 20.3 prior to 20.3R1-S1, 20.3R2, update to version 20.3R1-S1 or 20.3R2 or later. For Juniper Networks Junos OS on PTX Series versions prior to 18.4R3-S9, update to version 18.4R3-S9 or later. For Juniper Networks Junos OS on PTX Series versions 19.1 prior to 19.1R3-S6, update to version 19.1R3-S6 or later. For Juniper Networks Junos OS on PTX Series versions 19.2 prior to 19.2R1-S7, 19.2R3-S3, update to version 19.2R1-S7 or 19.2R3-S3 or later. For Juniper Networks Junos OS on PTX Series versions 19.3 prior to 19.3R2-S6, 19.3R3-S3, update to version 19.3R2-S6 or 19.3R3-S3 or later. For Juniper Networks Junos OS on PTX Series versions 19.4 prior to 19.4R1-S4, 19.4R3-S5, update to version 19.4R1-S4 or 19.4R3-S5 or later. For Juniper Networks Junos OS on PTX Series versions 20.1 prior to 20.1R2-S2, 20.1R3, update to version 20.1R2-S2 or 20.1R3 or later. For Juniper Networks Junos OS on PTX Series versions 20.2 prior to 20.2R3-S1, update to version 20.2R3-S1 or later. For Juniper Networks Junos OS on PTX Series versions 20.3 prior to 20.3R2-S1, 20.3R3, update to version 20.3R2-S1 or 20.3R3 or later. For Juniper Networks Junos OS on PTX Series versions 20.4 prior to 20.4R2-S1, 20.4R3, update to version 20.4R2-S1 or 20.4R3 or later. For Juniper Networks Junos OS on PTX Series versions 21.1 prior to 21.1R1-S1, 21.1R2, update to version 21.1R1-S1 or 21.1R2 or later.

Fix

DoS

Improper Check for Exceptional Conditions

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-754CWE-755

Related Identifiers

CVE-2021-31361

Affected Products

Junos