PT-2021-3765 · Juniper Networks · Sbr Carrier

Published 2021-07-14 · Updated 2022-08-05 · CVE-2021-0276

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Juniper Networks SBR Carrier versions 8.4.1 through 8.4.1R18 Juniper Networks SBR Carrier versions 8.5.0 through 8.5.0R9 Juniper Networks SBR Carrier versions 8.6.0 through 8.6.0R3

Description The issue is caused by a stack-based buffer overflow vulnerability in the implementation of the Extensible Authentication Protocol (EAP) server. This vulnerability can be exploited by an attacker sending specific packets, potentially leading to a Denial of Service (DoS) or remote code execution (RCE). Continuous exploitation can result in a sustained DoS by repeatedly crashing the radius daemon.

Recommendations For Juniper Networks SBR Carrier versions 8.4.1 through 8.4.1R18, update to version 8.4.1R19 or later. For Juniper Networks SBR Carrier versions 8.5.0 through 8.5.0R9, update to version 8.5.0R10 or later. For Juniper Networks SBR Carrier versions 8.6.0 through 8.6.0R3, update to version 8.6.0R4 or later.

Fix

Stack Overflow

Memory Corruption

Weakness Enumeration

CWE-121

CWE-787

Related Identifiers

BDU:2021-04020

CVE-2021-0276

Affected Products

Sbr Carrier

References · 4

• https://kb.juniper.net/JSA11180 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-04020 · Security Note
• https://osv.dev/vulnerability/CVE-2021-0276 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-0276 · Security Note