← Back

CVE-2021-31369

nvd nist
Published: Oct 19, 2021Modified: Nov 21, 2024

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Exploitability: 3.9 / Impact: 1.4
Source: sirt@juniper.net (Secondary)

Description

On MX Series platforms with MS-MPC/MS-MIC, an Allocation of Resources Without Limits or Throttling vulnerability in Juniper Networks Junos OS allows an unauthenticated network attacker to cause a partial Denial of Service (DoS) with a high rate of specific traffic. If a Class of Service (CoS) rule is attached to the service-set and a high rate of specific traffic is processed by this service-set, for some of the other traffic which has services applied and is being processed by this MS-MPC/MS-MIC drops will be observed. Continued receipted of this high rate of specific traffic will create a sustained Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS on MX Series with MS-MPC/MS-MIC: All versions prior to 17.4R3-S5; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R3-S9; 19.1 versions prior to 19.1R3-S6; 19.2 versions prior to 19.2R1-S7, 19.2R3-S3; 19.3 versions prior to 19.3R2-S7, 19.3R3-S3; 19.4 versions prior to 19.4R3-S5; 20.1 versions prior to 20.1R2-S2, 20.1R3-S1; 20.2 versions prior to 20.2R3-S2; 20.3 versions prior to 20.3R3; 20.4 versions prior to 20.4R2-S1, 20.4R3; 21.1 versions prior to 21.1R1-S1, 21.1R2.

Affected (159)

Products: Juniper: Junos
1 product
Junos
Configuration A
159 vulnerable · 17 platform
Vulnerable SoftwareAffected Versions
Juniper
Before 17.4
Version 17.4
Version 17.4 r1-s1
Version 17.4 r1-s2
Version 17.4 r1-s3
Version 17.4 r1-s4
Version 17.4 r1-s5
Version 17.4 r1-s6
Version 17.4 r1-s7
Version 17.4 r1
Version 17.4 r2-s10
Version 17.4 r2-s11
Version 17.4 r2-s12
Version 17.4 r2-s13
Version 17.4 r2-s1
Version 17.4 r2-s2
Version 17.4 r2-s3
Version 17.4 r2-s4
Version 17.4 r2-s5
Version 17.4 r2-s6
Version 17.4 r2-s7
Version 17.4 r2-s8
Version 17.4 r2-s9
Version 17.4 r2
Version 17.4 r3-s1
Version 17.4 r3-s2
Version 17.4 r3-s3
Version 17.4 r3-s4
Version 17.4 r3
Version 18.3
Version 18.3 r1-s1
Version 18.3 r1-s2
Version 18.3 r1-s3
Version 18.3 r1-s4
Version 18.3 r1-s5
Version 18.3 r1-s6
Version 18.3 r1
Version 18.3 r2-s1
Version 18.3 r2-s2
Version 18.3 r2-s3
Version 18.3 r2-s4
Version 18.3 r2
Version 18.3 r3-s1
Version 18.3 r3-s2
Version 18.3 r3-s3
Version 18.3 r3-s4
Version 18.3 r3
Version 18.3 r
Version 18.4
Version 18.4 r1-s1
Version 18.4 r1-s2
Version 18.4 r1-s3
Version 18.4 r1-s4
Version 18.4 r1-s5
Version 18.4 r1-s6
Version 18.4 r1-s7
Version 18.4 r1
Version 18.4 r2-s1
Version 18.4 r2-s2
Version 18.4 r2-s3
Version 18.4 r2-s4
Version 18.4 r2-s5
Version 18.4 r2-s6
Version 18.4 r2-s7
Version 18.4 r2-s8
Version 18.4 r2
Version 18.4 r3-s1
Version 18.4 r3-s2
Version 18.4 r3-s3
Version 18.4 r3-s4
Version 18.4 r3-s5
Version 18.4 r3-s6
Version 18.4 r3-s7
Version 18.4 r3-s8
Version 18.4 r3
Version 19.1
Version 19.1 r1-s1
Version 19.1 r1-s2
Version 19.1 r1-s3
Version 19.1 r1-s4
Version 19.1 r1-s5
Version 19.1 r1-s6
Version 19.1 r1
Version 19.1 r2-s1
Version 19.1 r2-s2
Version 19.1 r2-s3
Version 19.1 r2
Version 19.1 r3-s1
Version 19.1 r3-s2
Version 19.1 r3-s3
Version 19.1 r3-s4
Version 19.1 r3-s5
Version 19.1 r3
Version 19.2
Version 19.2 r1-s1
Version 19.2 r1-s2
Version 19.2 r1-s3
Version 19.2 r1-s4
Version 19.2 r1-s5
Version 19.2 r1-s6
Version 19.2 r1
Version 19.2 r3-s1
Version 19.2 r3-s2
Version 19.2 r3
Version 19.3
Version 19.3 r1-s1
Version 19.3 r1
Version 19.3 r2-s1
Version 19.3 r2-s2
Version 19.3 r2-s3
Version 19.3 r2-s4
Version 19.3 r2-s5
Version 19.3 r2-s6
Version 19.3 r2
Version 19.3 r3-s1
Version 19.3 r3-s2
Version 19.3 r3
Version 19.4 r1-s1
Version 19.4 r1-s2
Version 19.4 r1-s3
Version 19.4 r1-s4
Version 19.4 r1
Version 19.4 r2-s1
Version 19.4 r2-s2
Version 19.4 r2-s3
Version 19.4 r2-s4
Version 19.4 r2-s5
Version 19.4 r2
Version 19.4 r3-s1
Version 19.4 r3-s2
Version 19.4 r3-s3
Version 19.4 r3-s4
Version 19.4 r3
Version 20.1 r1-s1
Version 20.1 r1-s2
Version 20.1 r1-s3
Version 20.1 r1-s4
Version 20.1 r1
Version 20.1 r2-s1
Version 20.1 r2
Version 20.1 r3
Version 20.2 r1-s1
Version 20.2 r1-s2
Version 20.2 r1-s3
Version 20.2 r1
Version 20.2 r2-s1
Version 20.2 r2-s2
Version 20.2 r2-s3
Version 20.2 r2
Version 20.2 r3-s1
Version 20.2 r3
Version 20.3 r1-s1
Version 20.3 r1
Version 20.3 r2-s1
Version 20.3 r2
Version 20.4 r1-s1
Version 20.4 r1
Version 20.4 r2
Version 21.1 r1
Running on/withPlatform Versions
Juniper
Mx10
All versions
Juniper
Mx10000
All versions
Juniper
Mx10003
All versions
Juniper
Mx10008
All versions
Juniper
Mx10016
All versions
Juniper
Mx104
All versions
Juniper
Mx150
All versions
Juniper
Mx2008
All versions
Juniper
Mx2010
All versions
Juniper
Mx2020
All versions
Juniper
Mx204
All versions
Juniper
Mx240
All versions
Juniper
Mx40
All versions
Juniper
Mx480
All versions
Juniper
Mx5
All versions
Juniper
Mx80
All versions
Juniper
Mx960
All versions

References (2)

Source: sirt@juniper.net
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.