← Back

CVE-2021-0206

nvd nist
Published: Jan 15, 2021Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: sirt@juniper.net (Secondary)

Description

A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to send a specific packet causing the packet forwarding engine (PFE) to crash and restart, resulting in a Denial of Service (DoS). By continuously sending these specific packets, an attacker can repeatedly disable the PFE causing a sustained Denial of Service (DoS). This issue only affects Juniper Networks NFX Series, SRX Series platforms when SSL Proxy is configured. This issue affects Juniper Networks Junos OS on NFX Series and SRX Series: 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R3-S1; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3; 19.2 versions prior to 19.2R1-S2, 19.2R2; 19.3 versions prior to 19.3R2. This issue does not affect Juniper Networks Junos OS versions on NFX Series and SRX Series prior to 18.3R1.

Affected (43)

Products: Juniper: Junos
1 product
Junos
Configuration A
43 vulnerable · 16 platform
Vulnerable SoftwareAffected Versions
Juniper
Version 18.3
Version 18.3 r1-s1
Version 18.3 r1-s2
Version 18.3 r1-s3
Version 18.3 r1-s5
Version 18.3 r1-s6
Version 18.3 r1
Version 18.3 r2-s1
Version 18.3 r2-s2
Version 18.3 r2-s3
Version 18.3 r2-s4
Version 18.3 r2
Version 18.3 r3-s1
Version 18.3 r3-s2
Version 18.3 r3-s3
Version 18.3 r3
Version 18.4
Version 18.4 r1-s1
Version 18.4 r1-s2
Version 18.4 r1-s5
Version 18.4 r1-s6
Version 18.4 r1
Version 18.4 r2-s1
Version 18.4 r2-s2
Version 18.4 r2-s3
Version 18.4 r2-s4
Version 18.4 r2
Version 18.4 r3
Version 19.1
Version 19.1 r1-s1
Version 19.1 r1-s2
Version 19.1 r1-s3
Version 19.1 r1-s4
Version 19.1 r1-s5
Version 19.1 r1
Version 19.1 r2-s1
Version 19.1 r2
Version 19.2
Version 19.2 r1-s1
Version 19.2 r1
Version 19.3
Version 19.3 r1-s1
Version 19.3 r1
Running on/withPlatform Versions
Juniper
Nfx150
All versions
Juniper
Nfx250
All versions
Juniper
Nfx350
All versions
Juniper
Srx1500
All versions
Juniper
Srx300
All versions
Juniper
Srx320
All versions
Juniper
Srx340
All versions
Juniper
Srx345
All versions
Juniper
Srx380
All versions
Juniper
Srx4100
All versions
Juniper
Srx4200
All versions
Juniper
Srx4600
All versions
Juniper
Srx5400
All versions
Juniper
Srx550
All versions
Juniper
Srx5600
All versions
Juniper
Srx5800
All versions

References (2)

Source: sirt@juniper.net
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.