Lucene search

[email protected]CVE-2021-0289

HistoryJul 15, 2021 - 8:15 p.m.

CVE-2021-0289

2021-07-1520:15:10

CWE-367

[email protected]

web.nvd.nist.gov

juniper networks

junos os

cve-2021-0289

arp policer

vulnerability

toctou

network security

nvd

2.9 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

When user-defined ARP Policer is configured and applied on one or more Aggregated Ethernet (AE) interface units, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability between the Device Control Daemon (DCD) and firewall process (dfwd) daemons of Juniper Networks Junos OS allows an attacker to bypass the user-defined ARP Policer. In this particular case the User ARP policer is replaced with default ARP policer. To review the desired ARP Policers and actual state one can run the command “show interfaces <> extensive” and review the output. See further details below. An example output is: show interfaces extensive | match policer Policer: Input: default_arp_policer <<< incorrect if user ARP Policer was applied on an AE interface and the default ARP Policer is displayed Policer: Input: jtac-arp-ae5.317-inet-arp <<< correct if user ARP Policer was applied on an AE interface For all platforms, except SRX Series: This issue affects Juniper Networks Junos OS: All versions 5.6R1 and all later versions prior to 18.4 versions prior to 18.4R2-S9, 18.4R3-S9 with the exception of 15.1 versions 15.1R7-S10 and later versions; 19.4 versions prior to 19.4R3-S3; 20.1 versions prior to 20.1R3; 20.2 versions prior to 20.2R3-S2; 20.3 version 20.3R1 and later versions; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2; This issue does not affect Juniper Networks Junos OS versions prior to 5.6R1. On SRX Series this issue affects Juniper Networks Junos OS: 18.4 versions prior to 18.4R2-S9, 18.4R3-S9; 19.4 versions prior to 19.4R3-S4; 20.1 versions prior to 20.1R3; 20.2 versions prior to 20.2R3-S2; 20.3 version 20.3R1 and later versions; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2. This issue does not affect 18.4 versions prior to 18.4R1 on SRX Series. This issue does not affect Junos OS Evolved.

Affected configurations

NVD

Node

juniperjunosRange5.7–15.1

juniperjunosRange15.2–18.4

juniperjunosMatch5.6r1

juniperjunosMatch18.4-

juniperjunosMatch18.4r1

juniperjunosMatch18.4r1-s1

juniperjunosMatch18.4r1-s2

juniperjunosMatch18.4r1-s3

juniperjunosMatch18.4r1-s4

juniperjunosMatch18.4r1-s5

juniperjunosMatch18.4r1-s6

juniperjunosMatch18.4r1-s7

juniperjunosMatch18.4r2

juniperjunosMatch18.4r2-s1

juniperjunosMatch18.4r2-s2

juniperjunosMatch18.4r2-s3

juniperjunosMatch18.4r2-s4

juniperjunosMatch18.4r2-s5

juniperjunosMatch18.4r2-s6

juniperjunosMatch18.4r2-s7

juniperjunosMatch18.4r2-s8

juniperjunosMatch18.4r3

juniperjunosMatch18.4r3-s1

juniperjunosMatch18.4r3-s2

juniperjunosMatch18.4r3-s3

juniperjunosMatch18.4r3-s4

juniperjunosMatch18.4r3-s5

juniperjunosMatch18.4r3-s6

juniperjunosMatch18.4r3-s7

juniperjunosMatch18.4r3-s8

juniperjunosMatch19.4r1

juniperjunosMatch19.4r1-s1

juniperjunosMatch19.4r1-s2

juniperjunosMatch19.4r1-s3

juniperjunosMatch19.4r2

juniperjunosMatch19.4r2-s1

juniperjunosMatch19.4r2-s2

juniperjunosMatch19.4r2-s3

juniperjunosMatch19.4r3

juniperjunosMatch19.4r3-s1

juniperjunosMatch19.4r3-s2

juniperjunosMatch20.1r1

juniperjunosMatch20.1r1-s1

juniperjunosMatch20.1r1-s2

juniperjunosMatch20.1r1-s3

juniperjunosMatch20.1r1-s4

juniperjunosMatch20.1r2

juniperjunosMatch20.1r2-s1

juniperjunosMatch20.2r1

juniperjunosMatch20.2r1-s1

juniperjunosMatch20.2r1-s2

juniperjunosMatch20.2r1-s3

juniperjunosMatch20.2r2

juniperjunosMatch20.2r2-s1

juniperjunosMatch20.2r2-s2

juniperjunosMatch20.2r2-s3

juniperjunosMatch20.2r3

juniperjunosMatch20.2r3-s1

juniperjunosMatch20.4r1

juniperjunosMatch20.4r1-s1

juniperjunosMatch20.4r2

juniperjunosMatch20.4r2-s1

juniperjunosMatch21.1r1

AND

juniperacx1000Match-

juniperacx1100Match-

juniperacx2000Match-

juniperacx2100Match-

juniperacx2200Match-

juniperacx4000Match-

juniperacx500Match-

juniperacx5000Match-

juniperacx5048Match-

juniperacx5096Match-

juniperacx5400Match-

juniperacx5448Match-

juniperacx5800Match-

juniperacx6300Match-

juniperacx6360Match-

juniperacx710Match-

juniperatp400Match-

juniperatp700Match-

junipercsrxMatch-

juniperctp150Match-

juniperctp2008Match-

juniperctp2024Match-

juniperctp2056Match-

juniperdxMatch-

juniperdxMatch5.1

juniperex_rpsMatch-

juniperex2200Match-

juniperex2200-cMatch-

juniperex2200-vcMatch-

juniperex2300Match-

juniperex2300-cMatch-

juniperex2300mMatch-

juniperex3200Match-

juniperex3300Match-

juniperex3300-vcMatch-

juniperex3400Match-

juniperex4200Match-

juniperex4200-vcMatch-

juniperex4300Match-

juniperex4300-24pMatch-

juniperex4300-24p-sMatch-

juniperex4300-24tMatch-

juniperex4300-24t-sMatch-

juniperex4300-32fMatch-

juniperex4300-32f-dcMatch-

juniperex4300-32f-sMatch-

juniperex4300-48mpMatch-

juniperex4300-48mp-sMatch-

juniperex4300-48pMatch-

juniperex4300-48p-sMatch-

juniperex4300-48tMatch-

juniperex4300-48t-afiMatch-

juniperex4300-48t-dcMatch-

juniperex4300-48t-dc-afiMatch-

juniperex4300-48t-sMatch-

juniperex4300-48tafiMatch-

juniperex4300-48tdcMatch-

juniperex4300-48tdc-afiMatch-

juniperex4300-mpMatch-

juniperex4300-vcMatch-

juniperex4300mMatch-

juniperex4400Match-

juniperex4500Match-

juniperex4500-vcMatch-

juniperex4550Match-

juniperex4550-vcMatch-

juniperex4550\/vcMatch-

juniperex4600Match-

juniperex4600-vcMatch-

juniperex4650Match-

juniperex6200Match-

juniperex6210Match-

juniperex8200Match-

juniperex8200-vcMatch-

juniperex8208Match-

juniperex8216Match-

juniperex9200Match-

juniperex9204Match-

juniperex9208Match-

juniperex9214Match-

juniperex9250Match-

juniperex9251Match-

juniperex9253Match-

juniperfips_infranet_controller_6500Match-

juniperfips_secure_access_4000Match-

juniperfips_secure_access_4500Match-

juniperfips_secure_access_6000Match-

juniperfips_secure_access_6500Match-

junipergfx3600Match-

juniperidp250Match-

juniperidp75Match-

juniperidp800Match-

juniperidp8200Match-

juniperinfranet_controller_4000Match-

juniperinfranet_controller_4500Match-

juniperinfranet_controller_6000Match-

juniperinfranet_controller_6500Match-

juniperjatpMatch400

juniperjatpMatch700

juniperjunosMatch-

juniperjunos_space_ja1500_applianceMatch-

juniperjunos_space_ja2500_applianceMatch-

juniperln1000Match-

juniperln2600Match-

juniperm10iMatch-

juniperm120Match-

juniperm320Match-

juniperm7iMatch-

junipermag2600_gatewayMatch-

junipermag4610_gatewayMatch-

junipermag6610_gatewayMatch-

junipermag6611_gatewayMatch-

junipermxMatch-

junipermx10Match-

junipermx10000Match-

junipermx10003Match-

junipermx10008Match-

junipermx10016Match-

junipermx104Match-

junipermx150Match-

junipermx2008Match-

junipermx2010Match-

junipermx2020Match-

junipermx204Match-

junipermx240Match-

junipermx40Match-

junipermx480Match-

junipermx5Match-

junipermx80Match-

junipermx960Match-

junipernetscreen-5200Match-

junipernetscreen-5400Match-

junipernetscreen-5gtMatch-

junipernetscreen-5gtMatch5.0

junipernetscreen-idpMatch3.0

junipernetscreen-idpMatch3.0r1

junipernetscreen-idpMatch3.0r2

junipernetscreen-idp_10Match-

junipernetscreen-idp_100Match-

junipernetscreen-idp_1000Match-

junipernetscreen-idp_500Match-

junipernfxMatch-

junipernfx150Match-

junipernfx250Match-

junipernfx350Match-

junipernsm3000Match-

junipernsmexpressMatch-

juniperocx1100Match-

juniperptx1000Match-

juniperptx1000-72qMatch-

juniperptx10000Match-

juniperptx10001Match-

juniperptx10001-36mrMatch-

juniperptx100016Match-

juniperptx10002Match-

juniperptx10002-60cMatch-

juniperptx10003Match-

juniperptx10003_160cMatch-

juniperptx10003_80cMatch-

juniperptx10003_81cdMatch-

juniperptx10004Match-

juniperptx10008Match-

juniperptx10016Match-

juniperptx3000Match-

juniperptx5000Match-

juniperqfx10000Match-

juniperqfx10002Match-

juniperqfx10002-32qMatch-

juniperqfx10002-60cMatch-

juniperqfx10002-72qMatch-

juniperqfx10008Match-

juniperqfx10016Match-

juniperqfx3000-gMatch-

juniperqfx3000-mMatch-

juniperqfx3008-iMatch-

juniperqfx3100Match-

juniperqfx3500Match-

juniperqfx3600Match-

juniperqfx3600-iMatch-

juniperqfx5100Match-

juniperqfx5100-96sMatch-

juniperqfx5110Match-

juniperqfx5120Match-

juniperqfx5130Match-

juniperqfx5200Match-

juniperqfx5200-32cMatch-

juniperqfx5200-48yMatch-

juniperqfx5210Match-

juniperqfx5210-64cMatch-

juniperqfx5220Match-

juniperrouter_m10Match-

juniperrouter_m16Match-

juniperrouter_m20Match-

juniperrouter_m40Match-

juniperrouter_m5Match-

junipersecure_access_2000Match-

junipersecure_access_2500Match-

junipersecure_access_4000Match-

junipersecure_access_4500Match-

junipersecure_access_6000Match-

junipersecure_access_6500Match-

junipersecure_access_700Match-

junipert1600Match-

junipert320Match-

junipert4000Match-

junipert640Match-

juniperxre200Match-

Node

juniperjunosMatch18.4-

juniperjunosMatch18.4r1

juniperjunosMatch18.4r1-s1

juniperjunosMatch18.4r1-s2

juniperjunosMatch18.4r1-s3

juniperjunosMatch18.4r1-s4

juniperjunosMatch18.4r1-s5

juniperjunosMatch18.4r1-s6

juniperjunosMatch18.4r1-s7

juniperjunosMatch18.4r2

juniperjunosMatch18.4r2-s1

juniperjunosMatch18.4r2-s2

juniperjunosMatch18.4r2-s3

juniperjunosMatch18.4r2-s4

juniperjunosMatch18.4r2-s5

juniperjunosMatch18.4r2-s6

juniperjunosMatch18.4r2-s7

juniperjunosMatch18.4r2-s8

juniperjunosMatch18.4r3

juniperjunosMatch18.4r3-s1

juniperjunosMatch18.4r3-s2

juniperjunosMatch18.4r3-s3

juniperjunosMatch18.4r3-s4

juniperjunosMatch18.4r3-s5

juniperjunosMatch18.4r3-s6

juniperjunosMatch18.4r3-s7

juniperjunosMatch18.4r3-s8

juniperjunosMatch19.4r1

juniperjunosMatch19.4r1-s1

juniperjunosMatch19.4r1-s2

juniperjunosMatch19.4r1-s3

juniperjunosMatch19.4r2

juniperjunosMatch19.4r2-s1

juniperjunosMatch19.4r2-s2

juniperjunosMatch19.4r2-s3

juniperjunosMatch19.4r3

juniperjunosMatch19.4r3-s1

juniperjunosMatch19.4r3-s2

juniperjunosMatch19.4r3-s3

juniperjunosMatch20.1r1

juniperjunosMatch20.1r1-s1

juniperjunosMatch20.1r1-s2

juniperjunosMatch20.1r1-s3

juniperjunosMatch20.1r1-s4

juniperjunosMatch20.1r2

juniperjunosMatch20.1r2-s1

juniperjunosMatch20.2r1

juniperjunosMatch20.2r1-s1

juniperjunosMatch20.2r1-s2

juniperjunosMatch20.2r1-s3

juniperjunosMatch20.2r2

juniperjunosMatch20.2r2-s1

juniperjunosMatch20.2r2-s2

juniperjunosMatch20.2r2-s3

juniperjunosMatch20.2r3

juniperjunosMatch20.2r3-s1

juniperjunosMatch20.3r1

juniperjunosMatch20.3r1-s1

juniperjunosMatch20.3r2

juniperjunosMatch20.4r1

juniperjunosMatch20.4r1-s1

juniperjunosMatch21.1r1-s1

AND

junipersrx100Match-

junipersrx110Match-

junipersrx1400Match-

junipersrx1500Match-

junipersrx210Match-

junipersrx220Match-

junipersrx240Match-

junipersrx240h2Match-

junipersrx300Match-

junipersrx320Match-

junipersrx340Match-

junipersrx3400Match-

junipersrx345Match-

junipersrx3600Match-

junipersrx380Match-

junipersrx4000Match-

junipersrx4100Match-

junipersrx4200Match-

junipersrx4600Match-

junipersrx5000Match-

junipersrx5400Match-

junipersrx550Match-

junipersrx550_hmMatch-

junipersrx550mMatch-

junipersrx5600Match-

junipersrx5800Match-

junipersrx650Match-

CPENameOperatorVersion
juniper:junosjuniper junoslt15.1
juniper:junosjuniper junoslt18.4
juniper:junosjuniper junoseq5.6
juniper:junosjuniper junoseq19.4
juniper:junosjuniper junoseq20.1
juniper:junosjuniper junoseq20.2
juniper:junosjuniper junoseq20.4
juniper:junosjuniper junoseq21.1

CPE	Name	Operator	Version
juniper:junos	juniper junos	lt	15.1
juniper:junos	juniper junos	lt	18.4
juniper:junos	juniper junos	eq	5.6
juniper:junos	juniper junos	eq	19.4
juniper:junos	juniper junos	eq	20.1
juniper:junos	juniper junos	eq	20.2
juniper:junos	juniper junos	eq	20.4
juniper:junos	juniper junos	eq	21.1

CNA Affected

[
  {
    "product": "Junos OS",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "lessThan": "5.6R1",
        "status": "unaffected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "5.6*",
        "status": "affected",
        "version": "5.6R1",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "15.1F1",
            "status": "affected"
          }
        ],
        "lessThan": "15.1R7-S10",
        "status": "affected",
        "version": "15.1",
        "versionType": "custom"
      },
      {
        "lessThan": "16.1*",
        "status": "affected",
        "version": "16.1R1",
        "versionType": "custom"
      },
      {
        "lessThan": "16.2*",
        "status": "affected",
        "version": "16.2R1",
        "versionType": "custom"
      },
      {
        "lessThan": "17.1*",
        "status": "affected",
        "version": "17.1R1",
        "versionType": "custom"
      },
      {
        "lessThan": "17.2*",
        "status": "affected",
        "version": "17.2R1",
        "versionType": "custom"
      },
      {
        "lessThan": "17.3*",
        "status": "affected",
        "version": "17.3R1",
        "versionType": "custom"
      },
      {
        "lessThan": "17.4*",
        "status": "affected",
        "version": "17.4R1",
        "versionType": "custom"
      },
      {
        "lessThan": "18.1*",
        "status": "affected",
        "version": "18.1R1",
        "versionType": "custom"
      },
      {
        "lessThan": "18.2*",
        "status": "affected",
        "version": "18.2R1",
        "versionType": "custom"
      },
      {
        "lessThan": "18.3*",
        "status": "affected",
        "version": "18.3R1",
        "versionType": "custom"
      },
      {
        "lessThan": "18.4R2-S9, 18.4R3-S9",
        "status": "affected",
        "version": "18.4",
        "versionType": "custom"
      },
      {
        "lessThan": "19.4R3-S3",
        "status": "affected",
        "version": "19.4",
        "versionType": "custom"
      },
      {
        "lessThan": "20.1R3",
        "status": "affected",
        "version": "20.1",
        "versionType": "custom"
      },
      {
        "lessThan": "20.2R3-S2",
        "status": "affected",
        "version": "20.2",
        "versionType": "custom"
      },
      {
        "lessThan": "20.3*",
        "status": "affected",
        "version": "20.3R1",
        "versionType": "custom"
      },
      {
        "lessThan": "20.4R3",
        "status": "affected",
        "version": "20.4",
        "versionType": "custom"
      },
      {
        "lessThan": "21.1R2",
        "status": "affected",
        "version": "21.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "SRX Series"
    ],
    "product": "Junos OS",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "changes": [
          {
            "at": "18.4R1",
            "status": "affected"
          }
        ],
        "lessThan": "18.4R2-S9, 18.4R3-S9",
        "status": "affected",
        "version": "18.4",
        "versionType": "custom"
      },
      {
        "lessThan": "19.4R3-S3",
        "status": "affected",
        "version": "19.4",
        "versionType": "custom"
      },
      {
        "lessThan": "20.1R3",
        "status": "affected",
        "version": "20.1",
        "versionType": "custom"
      },
      {
        "lessThan": "20.2R3-S2",
        "status": "unaffected",
        "version": "20.2",
        "versionType": "custom"
      },
      {
        "lessThan": "20.3*",
        "status": "affected",
        "version": "20.3R1",
        "versionType": "custom"
      },
      {
        "lessThan": "20.4R3",
        "status": "affected",
        "version": "20.4",
        "versionType": "custom"
      },
      {
        "lessThan": "21.1R2",
        "status": "affected",
        "version": "21.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Junos OS Evolved",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "status": "unaffected",
        "version": "Any"
      }
    ]
  }
]

References

kb.juniper.net/JSA11191

Social References

2.9 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

Related for CVE-2021-0289

cvelist1 nvd1 nessus1 prion1