Improper Check for Unusual or Exceptional Conditions in Juniper Junos OS and Junos OS Evolved - CVE-2021-0236
Published: April 16, 2021
Vulnerability identifier: #VU52286
CSH Severity: Medium
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2021-0236
CWE-ID: CWE-754
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: Juniper Networks, Inc.
Affected software:
Juniper Junos OS
Junos OS Evolved
Juniper Junos OS
Junos OS Evolved
Detailed vulnerability description
The vulnerability allows a remote user to perform denial of service attack.
The vulnerability exists due to improper check for unusual or exceptional conditions within the Routing Protocol Daemon (RPD) service when handling BGP VPNv6 flowspec messages. A remote user attacker can send specific matching BGP packet, which meets a specific term in the flowspec configuration and crash the service.
How to mitigate CVE-2021-0236
Install updates from vendor's website.