#VU52286 Improper Check for Unusual or Exceptional Conditions in Juniper Junos OS and Junos OS Evolved - CVE-2021-0236

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU52286

#VU52286 Improper Check for Unusual or Exceptional Conditions in Juniper Junos OS and Junos OS Evolved - CVE-2021-0236

Published: April 16, 2021


Vulnerability identifier: #VU52286
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2021-0236
CWE-ID: CWE-754
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
Juniper Junos OS
Junos OS Evolved
Software vendor:
Juniper Networks, Inc.

Description

The vulnerability allows a remote user to perform denial of service attack.

The vulnerability exists due to improper check for unusual or exceptional conditions within the Routing Protocol Daemon (RPD) service when handling BGP VPNv6 flowspec messages. A remote user attacker can send specific matching BGP packet, which meets a specific term in the flowspec configuration and crash the service.


Remediation

Install updates from vendor's website.

External links