CVE-2021-0298

🗓️ 19 Oct 2021 18:16:25Reported by juniperType

A Race Condition in the 'show chassis pic' command in Juniper Networks Junos OS Evolved may allow an attacker to crash the port interface concentrator daemon (picd) process on the FPC, if the command is executed coincident with other system events outside the attacker's control, leading to a Denial of Service (DoS) condition

Reporter	Title	Published	Views	Family All 8
CNNVD	Juniper Networks Junos OS 竞争条件问题漏洞	13 Oct 202100:00	–	cnnvd
Cvelist	CVE-2021-0298 Junos OS Evolved: PTX10003, PTX10008: picd core while executing the "show chassis pic" command under certain conditions	19 Oct 202118:16	–	cvelist
EUVD	EUVD-2021-2917	3 Oct 202520:07	–	euvd
Tenable Nessus	Juniper Junos OS DoS (JSA11212)	26 Apr 202200:00	–	nessus
NCSC	Vulnerabilities fixed in Juniper Junos OS	14 Oct 202100:00	–	ncsc
NVD	CVE-2021-0298	19 Oct 202119:15	–	nvd
OSV	CVE-2021-0298	19 Oct 202119:15	–	osv
Prion	Race condition	19 Oct 202119:15	–	prion

NVD

Vulners

Node

juniper junos_os_evolvedMatch18.3r1

juniper junos_os_evolvedMatch19.1r1

juniper junos_os_evolvedMatch19.1r2

juniper junos_os_evolvedMatch19.2r1

juniper junos_os_evolvedMatch19.2r2

juniper junos_os_evolvedMatch19.3r1

juniper junos_os_evolvedMatch19.3r2

juniper junos_os_evolvedMatch19.4r1

juniper junos_os_evolvedMatch19.4r1-s1

juniper junos_os_evolvedMatch20.1r1

juniper junos_os_evolvedMatch20.1r1-s1

AND

juniper ptx10003Match-

juniper ptx10008Match-

[
  {
    "platforms": [
      "PTX10003, PTX10008"
    ],
    "product": "Junos OS Evolved",
    "vendor": "Juniper Networks",
    "versions": [
      {
        "lessThan": "20.1R2-EVO",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
kb	www.kb.juniper.net/JSA11212

21 Nov 2024 05:42Current

4.9Medium risk

Vulners AI Score4.9

CVSS 24

CVSS 3.14.7

EPSS0.00033

CWE-362