Lucene search

[email protected]NVD:CVE-2021-0271

HistoryApr 22, 2021 - 8:15 p.m.

CVE-2021-0271

2021-04-2220:15:10

CWE-415

[email protected]

web.nvd.nist.gov

juniper networks

junos os

double free vulnerability

sfid process

denial of service

ex series

marvell chipset

arp packet

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

25.0%

JSON

A Double Free vulnerability in the software forwarding interface daemon (sfid) process of Juniper Networks Junos OS allows an adjacently-connected attacker to cause a Denial of Service (DoS) by sending a crafted ARP packet to the device. Continued receipt and processing of the crafted ARP packets will create a sustained Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS on EX2200-C Series, EX3200 Series, EX3300 Series, EX4200 Series, EX4500 Series, EX4550 Series, EX6210 Series, EX8208 Series, EX8216 Series. 12.3 versions prior to 12.3R12-S17; 15.1 versions prior to 15.1R7-S8. This issue only affects the listed Marvell-chipset based EX Series devices. No other products or platforms are affected.

Affected configurations

Nvd

Node

juniperjunosMatch12.3-

juniperjunosMatch12.3r1

juniperjunosMatch12.3r10

juniperjunosMatch12.3r10-s1

juniperjunosMatch12.3r10-s2

juniperjunosMatch12.3r11

juniperjunosMatch12.3r12

juniperjunosMatch12.3r12-s1

juniperjunosMatch12.3r12-s10

juniperjunosMatch12.3r12-s11

juniperjunosMatch12.3r12-s12

juniperjunosMatch12.3r12-s13

juniperjunosMatch12.3r12-s14

juniperjunosMatch12.3r12-s15

juniperjunosMatch12.3r12-s16

juniperjunosMatch12.3r12-s3

juniperjunosMatch12.3r12-s4

juniperjunosMatch12.3r12-s6

juniperjunosMatch12.3r12-s8

juniperjunosMatch15.1-

juniperjunosMatch15.1a1

juniperjunosMatch15.1f

juniperjunosMatch15.1f1

juniperjunosMatch15.1f2

juniperjunosMatch15.1f2-s1

juniperjunosMatch15.1f2-s2

juniperjunosMatch15.1f2-s3

juniperjunosMatch15.1f2-s4

juniperjunosMatch15.1f3

juniperjunosMatch15.1f4

juniperjunosMatch15.1f5

juniperjunosMatch15.1f5-s7

juniperjunosMatch15.1f6

juniperjunosMatch15.1f6-s1

juniperjunosMatch15.1f6-s10

juniperjunosMatch15.1f6-s12

juniperjunosMatch15.1f6-s2

juniperjunosMatch15.1f6-s3

juniperjunosMatch15.1f6-s4

juniperjunosMatch15.1f6-s5

juniperjunosMatch15.1f6-s6

juniperjunosMatch15.1f6-s7

juniperjunosMatch15.1f6-s8

juniperjunosMatch15.1f6-s9

juniperjunosMatch15.1f7

juniperjunosMatch15.1r

juniperjunosMatch15.1r1

juniperjunosMatch15.1r2

juniperjunosMatch15.1r3

juniperjunosMatch15.1r4

juniperjunosMatch15.1r4-s7

juniperjunosMatch15.1r4-s8

juniperjunosMatch15.1r4-s9

juniperjunosMatch15.1r5

juniperjunosMatch15.1r5-s1

juniperjunosMatch15.1r5-s3

juniperjunosMatch15.1r5-s5

juniperjunosMatch15.1r5-s6

juniperjunosMatch15.1r6

juniperjunosMatch15.1r6-s1

juniperjunosMatch15.1r6-s2

juniperjunosMatch15.1r6-s3

juniperjunosMatch15.1r6-s4

juniperjunosMatch15.1r6-s6

juniperjunosMatch15.1r7

juniperjunosMatch15.1r7-s1

juniperjunosMatch15.1r7-s2

juniperjunosMatch15.1r7-s3

juniperjunosMatch15.1r7-s4

juniperjunosMatch15.1r7-s5

juniperjunosMatch15.1r7-s6

juniperjunosMatch15.1r7-s7

AND

juniperex2200-cMatch-

juniperex3200Match-

juniperex3300Match-

juniperex4200Match-

juniperex4500Match-

juniperex4550Match-

juniperex6210Match-

juniperex8208Match-

juniperex8216Match-

VendorProductVersionCPE
juniperjunos12.3cpe:2.3:o:juniper:junos:12.3:-:*:*:*:*:*:*
juniperjunos12.3cpe:2.3:o:juniper:junos:12.3:r1:*:*:*:*:*:*
juniperjunos12.3cpe:2.3:o:juniper:junos:12.3:r10:*:*:*:*:*:*
juniperjunos12.3cpe:2.3:o:juniper:junos:12.3:r10-s1:*:*:*:*:*:*
juniperjunos12.3cpe:2.3:o:juniper:junos:12.3:r10-s2:*:*:*:*:*:*
juniperjunos12.3cpe:2.3:o:juniper:junos:12.3:r11:*:*:*:*:*:*
juniperjunos12.3cpe:2.3:o:juniper:junos:12.3:r12:*:*:*:*:*:*
juniperjunos12.3cpe:2.3:o:juniper:junos:12.3:r12-s1:*:*:*:*:*:*
juniperjunos12.3cpe:2.3:o:juniper:junos:12.3:r12-s10:*:*:*:*:*:*
juniperjunos12.3cpe:2.3:o:juniper:junos:12.3:r12-s11:*:*:*:*:*:*

Vendor	Product	Version	CPE
juniper	junos	12.3	cpe:2.3:o:juniper:junos:12.3:-::::::
juniper	junos	12.3	cpe:2.3:o:juniper:junos:12.3:r1::::::
juniper	junos	12.3	cpe:2.3:o:juniper:junos:12.3:r10::::::
juniper	junos	12.3	cpe:2.3:o:juniper:junos:12.3:r10-s1::::::
juniper	junos	12.3	cpe:2.3:o:juniper:junos:12.3:r10-s2::::::
juniper	junos	12.3	cpe:2.3:o:juniper:junos:12.3:r11::::::
juniper	junos	12.3	cpe:2.3:o:juniper:junos:12.3:r12::::::
juniper	junos	12.3	cpe:2.3:o:juniper:junos:12.3:r12-s1::::::
juniper	junos	12.3	cpe:2.3:o:juniper:junos:12.3:r12-s10::::::
juniper	junos	12.3	cpe:2.3:o:juniper:junos:12.3:r12-s11::::::

Rows per page:

1-10 of 811

References

kb.juniper.net/JSA11162

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

25.0%

JSON

Related for NVD:CVE-2021-0271

cve1 nessus1 cvelist1 prion1