In Juniper Networks Junos OS Evolved an attacker sending certain valid BGP update packets may cause Junos OS Evolved to access an uninitialized pointer causing RPD to core leading to a Denial of Service (DoS). Continued receipt of these types of valid BGP update packets will cause an extended Denial of Service condition. RPD will require a restart to recover. An indicator of compromise is to see if the file rpd.re exists by issuing the command: show system core-dumps This issue affects: Juniper Networks Junos OS Evolved 19.4 versions prior to 19.4R2-S2-EVO; 20.1 versions prior to 20.1R1-S2-EVO, 20.1R2-S1-EVO. This issue does not affect Junos OS.
References
Link | Resource |
---|---|
https://kb.juniper.net/JSA11099 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
25 Oct 2021, 15:20
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:juniper:junos_evolved:20.1:r1:*:*:*:*:*:* cpe:2.3:o:juniper:junos_evolved:20.1:r1-s1:*:*:*:*:*:* |
cpe:2.3:o:juniper:junos_os_evolved:20.1:r1:*:*:*:*:*:* cpe:2.3:o:juniper:junos_os_evolved:20.1:r1-s1:*:*:*:*:*:* cpe:2.3:o:juniper:junos_os_evolved:19.4:r1:*:*:*:*:*:* |
23 Oct 2021, 13:20
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:juniper:junos_evolved:20.1:-:*:*:*:*:*:* cpe:2.3:o:juniper:junos_evolved:19.4:r2-s1:*:*:*:*:*:* |
cpe:2.3:o:juniper:junos_os_evolved:19.4:r2:*:*:*:*:*:* cpe:2.3:o:juniper:junos_os_evolved:20.1:-:*:*:*:*:*:* cpe:2.3:o:juniper:junos_os_evolved:19.4:r2-s1:*:*:*:*:*:* |
Information
Published : 2021-01-15 18:15
Updated : 2024-02-04 21:23
NVD link : CVE-2021-0209
Mitre link : CVE-2021-0209
CVE.ORG link : CVE-2021-0209
JSON object : View
Products Affected
juniper
- junos_os_evolved
CWE
CWE-824
Access of Uninitialized Pointer