Lucene search

[email protected]CVE-2021-0286

HistoryJul 15, 2021 - 8:15 p.m.

CVE-2021-0286

2021-07-1520:15:10

CWE-754

CWE-703

[email protected]

web.nvd.nist.gov

181

vulnerability

juniper networks

junos os evolved

evo

dos

cve-2021-0286

nvd

security issue

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

42.7%

JSON

A vulnerability in the handling of exceptional conditions in Juniper Networks Junos OS Evolved (EVO) allows an attacker to send specially crafted packets to the device, causing the Advanced Forwarding Toolkit manager (evo-aftmand-bt or evo-aftmand-zx) process to crash and restart, impacting all traffic going through the FPC, resulting in a Denial of Service (DoS). Continued receipt and processing of these packets will create a sustained Denial of Service (DoS) condition. Following messages will be logged prior to the crash: Feb 2 10:14:39 fpc0 evo-aftmand-bt[16263]: [Error] Nexthop: Failed to get fwd nexthop for nexthop:32710470974358 label:1089551617 for session:18 probe:35 Feb 2 10:14:39 fpc0 evo-aftmand-bt[16263]: [Error] Nexthop: Failed to get fwd nexthop for nexthop:19241453497049 label:1089551617 for session:18 probe:37 Feb 2 10:14:39 fpc0 evo-aftmand-bt[16263]: [Error] Nexthop: Failed to get fwd nexthop for nexthop:19241453497049 label:1089551617 for session:18 probe:44 Feb 2 10:14:39 fpc0 evo-aftmand-bt[16263]: [Error] Nexthop: Failed to get fwd nexthop for nexthop:32710470974358 label:1089551617 for session:18 probe:47 Feb 2 10:14:39 fpc0 audit[16263]: ANOM_ABEND auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16263 comm=“EvoAftManBt-mai” exe=“/usr/sbin/evo-aftmand-bt” sig=11 Feb 2 10:14:39 fpc0 kernel: audit: type=1701 audit(1612260879.272:17): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16263 comm=“EvoAftManBt-mai” exe=“/usr/sbin/evo-aftmand-bt” sig=1 This issue affects Juniper Networks Junos OS Evolved: All versions prior to 20.4R2-EVO; 21.1 versions prior to 21.1R2-EVO.

Affected configurations

NVD

Node

juniperjunos_os_evolvedMatch19.2r1

juniperjunos_os_evolvedMatch19.2r2

juniperjunos_os_evolvedMatch19.3r1

juniperjunos_os_evolvedMatch19.3r2

juniperjunos_os_evolvedMatch19.4r1

juniperjunos_os_evolvedMatch19.4r2

juniperjunos_os_evolvedMatch19.4r2-s1

juniperjunos_os_evolvedMatch20.1-

juniperjunos_os_evolvedMatch20.1r1

juniperjunos_os_evolvedMatch20.1r1-s1

juniperjunos_os_evolvedMatch20.2-

juniperjunos_os_evolvedMatch20.3-

juniperjunos_os_evolvedMatch20.3r1

juniperjunos_os_evolvedMatch20.4r1

juniperjunos_os_evolvedMatch21.1r1

CPENameOperatorVersion
juniper:junos_os_evolvedjuniper junos os evolvedeq19.2
juniper:junos_os_evolvedjuniper junos os evolvedeq19.3
juniper:junos_os_evolvedjuniper junos os evolvedeq19.4
juniper:junos_os_evolvedjuniper junos os evolvedeq20.1
juniper:junos_os_evolvedjuniper junos os evolvedeq20.2
juniper:junos_os_evolvedjuniper junos os evolvedeq20.3
juniper:junos_os_evolvedjuniper junos os evolvedeq20.4
juniper:junos_os_evolvedjuniper junos os evolvedeq21.1

CPE	Name	Operator	Version
juniper:junos_os_evolved	juniper junos os evolved	eq	19.2
juniper:junos_os_evolved	juniper junos os evolved	eq	19.3
juniper:junos_os_evolved	juniper junos os evolved	eq	19.4
juniper:junos_os_evolved	juniper junos os evolved	eq	20.1
juniper:junos_os_evolved	juniper junos os evolved	eq	20.2
juniper:junos_os_evolved	juniper junos os evolved	eq	20.3
juniper:junos_os_evolved	juniper junos os evolved	eq	20.4
juniper:junos_os_evolved	juniper junos os evolved	eq	21.1

CNA Affected

[
  {
    "product": "Junos OS Evolved",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "lessThan": "20.4R2-EVO",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "21.1R2-EVO",
        "status": "affected",
        "version": "21.1",
        "versionType": "custom"
      }
    ]
  }
]

References

kb.juniper.net/JSA11188

Social References

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

42.7%

JSON

Related for CVE-2021-0286

nessus1 nvd1 cvelist1 prion1