PT-2021-19272 · Juniper Networks · Junos

Published

2021-10-19

·

Updated

2021-10-25

·

CVE-2021-31374

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions 17.3 through 17.3R3-S10 Juniper Networks Junos OS versions 17.4 through 17.4R2-S12 Juniper Networks Junos OS versions 17.4R3 through 17.4R3-S3 Juniper Networks Junos OS versions 18.1 through 18.1R3-S11 Juniper Networks Junos OS versions 18.2 through 18.2R2-S7 Juniper Networks Junos OS versions 18.2R3 through 18.2R3-S6 Juniper Networks Junos OS versions 18.3 through 18.3R3-S3 Juniper Networks Junos OS versions 18.4 through 18.4R1-S7 Juniper Networks Junos OS versions 18.4R2 through 18.4R2-S6 Juniper Networks Junos OS versions 18.4R3 through 18.4R3-S6 Juniper Networks Junos OS versions 19.1 through 19.1R1-S5 Juniper Networks Junos OS versions 19.1R2 through 19.1R2-S1 Juniper Networks Junos OS versions 19.1R3 through 19.1R3-S3 Juniper Networks Junos OS versions 19.2 through 19.2R1-S5 Juniper Networks Junos OS versions 19.2R3 through 19.2R3-S0 Juniper Networks Junos OS versions 19.3 through 19.3R2-S4 Juniper Networks Junos OS versions 19.3R3 through 19.3R3-S0 Juniper Networks Junos OS versions 19.4 through 19.4R1-S3 Juniper Networks Junos OS versions 19.4R2 through 19.4R2-S2 Juniper Networks Junos OS versions 19.4R3 through 19.4R3-S0 Juniper Networks Junos OS versions 20.1 through 20.1R1 Juniper Networks Junos OS versions 20.2 through 20.2R1 Juniper Networks Junos OS versions 20.3 through 20.3R1-S0 Juniper Networks Junos OS Evolved versions 20.3 through 20.3R1
Description Processing a specially crafted BGP UPDATE or KEEPALIVE message can lead to a routing process daemon crash and restart, causing a Denial of Service condition. This issue affects both IBGP and EBGP deployments over IPv4 or IPv6.
Recommendations For Juniper Networks Junos OS version 17.3, update to version 17.3R3-S11 or later. For Juniper Networks Junos OS version 17.4, update to version 17.4R2-S13 or 17.4R3-S4 or later. For Juniper Networks Junos OS version 18.1, update to version 18.1R3-S12 or later. For Juniper Networks Junos OS version 18.2, update to version 18.2R2-S8 or 18.2R3-S7 or later. For Juniper Networks Junos OS version 18.3, update to version 18.3R3-S4 or later. For Juniper Networks Junos OS version 18.4, update to version 18.4R1-S8, 18.4R2-S7, or 18.4R3-S7 or later. For Juniper Networks Junos OS version 19.1, update to version 19.1R1-S6, 19.1R2-S2, or 19.1R3-S4 or later. For Juniper Networks Junos OS version 19.2, update to version 19.2R1-S6 or 19.2R3-S1 or later. For Juniper Networks Junos OS version 19.3, update to version 19.3R2-S5 or 19.3R3-S1 or later. For Juniper Networks Junos OS version 19.4, update to version 19.4R1-S4, 19.4R2-S3, or 19.4R3-S1 or later. For Juniper Networks Junos OS version 20.1, update to version 20.1R2 or later. For Juniper Networks Junos OS version 20.2, update to version 20.2R2 or later. For Juniper Networks Junos OS version 20.3, update to version 20.3R1-S1, 20.3R2 or later. For Juniper Networks Junos OS Evolved version 20.3, update to version 20.3R2-EVO or later.

Fix

DoS

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2021-31374

Affected Products

Junos