A stack-based Buffer Overflow vulnerability in Juniper Networks SBR Carrier with EAP (Extensible Authentication Protocol) authentication configured, allows an attacker sending specific packets causing the radius daemon to crash resulting with a Denial of Service (DoS) or leading to remote code execution (RCE). By continuously sending this specific packets, an attacker can repeatedly crash the radius daemon, causing a sustained Denial of Service (DoS). This issue affects Juniper Networks SBR Carrier: 8.4.1 versions prior to 8.4.1R19; 8.5.0 versions prior to 8.5.0R10; 8.6.0 versions prior to 8.6.0R4.
References
| Link | Resource |
|---|---|
| https://kb.juniper.net/JSA11180 | Vendor Advisory |
| https://kb.juniper.net/JSA11180 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 05:42
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://kb.juniper.net/JSA11180 - Vendor Advisory |
27 Jul 2021, 15:47
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : 6.8
v3 : 9.8 |
| References | (CONFIRM) https://kb.juniper.net/JSA11180 - Vendor Advisory | |
| CWE | CWE-787 | |
| CPE | cpe:2.3:a:juniper:steel-belted_radius_carrier:8.5.0:-:*:*:*:*:*:* cpe:2.3:a:juniper:steel-belted_radius_carrier:8.4.1:-:*:*:*:*:*:* cpe:2.3:a:juniper:steel-belted_radius_carrier:8.6.0:*:*:*:*:*:*:* cpe:2.3:a:juniper:steel-belted_radius_carrier:8.5.0:r4:*:*:*:*:*:* cpe:2.3:a:juniper:steel-belted_radius_carrier:8.4.1:r13:*:*:*:*:*:* |
15 Jul 2021, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-07-15 20:15
Updated : 2024-11-21 05:42
NVD link : CVE-2021-0276
Mitre link : CVE-2021-0276
CVE.ORG link : CVE-2021-0276
JSON object : View
Products Affected
juniper
- steel-belted_radius_carrier