CVE-2021-0222: Junos OS: Upon receipt of certain protocol packets with invalid payloads a self-propagating Denial of Service may occur.
Juniper Networks · Junos OS
Vendor fix available · Affected: Juniper Networks Junos OS · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 51% of scored CVEs
DescriptionCVE.org
A vulnerability in Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending certain crafted protocol packets from an adjacent device with invalid payloads to the device. These crafted packets, which should be discarded, are instead replicated and sent to the RE. Over time, a Denial of Service (DoS) occurs. Continued receipt of these crafted protocol packets will cause an extended Denial of Service (DoS) condition, which may cause wider traffic impact due to protocol flapping. An indication of compromise is to check "monitor interface traffic" on the ingress and egress port packet counts. For each ingress packet, two duplicate packets are seen on egress. This issue can be triggered by IPv4 and IPv6 packets. This issue affects all traffic through the device.
Affected products7
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Juniper Networks · Junos OSfrom 14.1X53 before 14.1X53-D53; from 15.1 before 15.1R7-S6
- Juniper Networks · Junos OSfrom 16.1 before 16.1R7-S7; from 17.1 before 17.1R2-S11
- Juniper Networks · Junos OSfrom 17.1 before 17.1R3-S2; from 17.2 before 17.2R1-S9; from 18.2 before 18.2R2-S7; from 18.3 before 18.3R2-S3; from 19.2 before 19.2R1-S3, 19.2R2; from 19.3 before 19.3R2-S1, 19.3R3
- Juniper Networks · Junos OSfrom 17.2 before 17.2R3-S3; from 17.3 before 17.3R2-S5, 17.3R3-S7; from 17.4 before 17.4R2-S9, 17.4R3
- Juniper Networks · Junos OSfrom 18.1 before 18.1R3-S9; from 18.2 before 18.2R3-S3
- Juniper Networks · Junos OSfrom 18.3 before 18.3R1-S7, 18.3R3-S1; from 18.4 before 18.4R1-S5, 18.4R2-S3, 18.4R3; from 19.1 before 19.1R1-S4, 19.1R2-S1, 19.1R3
- Juniper Networks · Junos OSfrom 19.2 before 19.2R1-S4, 19.2R2; from 19.3 before 19.3R1-S1, 19.3R2, 19.3R3
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Juniper Networks
- Published
- January 2021
CoverageNo articles yet
No CyberSIXT article names CVE-2021-0222 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.