Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-0263

A Data Processing vulnerability in the Multi-Service process (multi-svcs) on the FPC of Juniper Networks Junos OS on the PTX Series routers may lead to the process becoming unresponsive, ultimately affecting traffic forwarding, allowing an attacker to cause a Denial of Service (DoS) condition . The Multi-Service Process running on the FPC is responsible for handling sampling-related operations when a J-Flow configuration is activated. This can occur during periods of heavy route churn, causing the Multi-Service Process to stop processing updates, without consuming any further updates from kernel. This back pressure towards the kernel affects further dynamic updates from other processes in the system, including RPD, causing a KRT-STUCK condition and traffic forwarding issues. An administrator can monitor the following command to check if there is the KRT queue is stuck: user@device > show krt state ... Number of async queue entries: 65007 <--- this value keep on increasing. The following logs/alarms will be observed when this condition exists: user@junos> show chassis alarms 2 alarms currently active Alarm time Class Description 2020-10-11 04:33:45 PDT Minor Potential slow peers are: MSP(FPC1-PIC0) MSP(FPC3-PIC0) MSP(FPC4-PIC0) Logs: Oct 11 04:33:44.672 2020 test /kernel: rts_peer_cp_recv_timeout : Bit set for msp8 as it is stuck Oct 11 04:35:56.000 2020 test-lab fpc4 user.err gldfpc-multi-svcs.elf: Error in parsing composite nexthop Oct 11 04:35:56.000 2020 test-lab fpc4 user.err gldfpc-multi-svcs.elf: composite nexthop parsing error Oct 11 04:43:05 2020 test /kernel: rt_pfe_veto: Possible slowest client is msp38. States processed - 65865741. States to be processed - 0 Oct 11 04:55:55 2020 test /kernel: rt_pfe_veto: Memory usage of M_RTNEXTHOP type = (0) Max size possible for M_RTNEXTHOP type = (8311787520) Current delayed unref = (60000), Current unique delayed unref = (10896), Max delayed unref on this platform = (40000) Current delayed weight unref = (71426) Max delayed weight unref on this platform= (400000) curproc = rpd Oct 11 04:56:00 2020 test /kernel: rt_pfe_veto: Too many delayed route/nexthop unrefs. Op 2 err 55, rtsm_id 5:-1, msg type 2 This issue only affects PTX Series devices. No other products or platforms are affected by this vulnerability. This issue affects Juniper Networks Junos OS on PTX Series: 18.2 versions prior to 18.2R3-S7; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R2-S8, 18.4R3-S7; 19.1 versions prior to 19.1R3-S4; 19.2 versions prior to 19.2R3-S1; 19.3 versions prior to 19.3R3-S1; 19.4 versions prior to 19.4R2-S4, 19.4R3-S1; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R2; 20.3 versions prior to 20.3R1-S2, 20.3R2. This issue does not affect Juniper Networks Junos OS versions prior to 18.2R1.

Security Impact Summary

This vulnerability carries a MEDIUM severity rating with a CVSS v3.1 score of 5.9, indicating it can be exploited remotely over the network but requires specific conditions to be met without requiring user interaction and does not require pre-existing privileges . The vulnerability impacts and availability (service disruption) for affected systems. Impacting 10 products from juniper, from juniper, from juniper and 7 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2021, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.

Published

2021-04-22T20:15:09.773

Last Modified

2024-11-21T05:42:20.980

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.9 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

8.6

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-19
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System juniper junos 18.2 Yes
Operating System juniper junos 18.2 Yes
Operating System juniper junos 18.2 Yes
Operating System juniper junos 18.2 Yes
Operating System juniper junos 18.2 Yes
Operating System juniper junos 18.2 Yes
Operating System juniper junos 18.2 Yes
Operating System juniper junos 18.2 Yes
Operating System juniper junos 18.2 Yes
Operating System juniper junos 18.2 Yes
Operating System juniper junos 18.2 Yes
Operating System juniper junos 18.2 Yes
Operating System juniper junos 18.2 Yes
Operating System juniper junos 18.2 Yes
Operating System juniper junos 18.2 Yes
Operating System juniper junos 18.2 Yes
Operating System juniper junos 18.2 Yes
Operating System juniper junos 18.2 Yes
Operating System juniper junos 18.2 Yes
Operating System juniper junos 18.2 Yes
Operating System juniper junos 18.2 Yes
Operating System juniper junos 18.2 Yes
Operating System juniper junos 18.3 Yes
Operating System juniper junos 18.3 Yes
Operating System juniper junos 18.3 Yes
Operating System juniper junos 18.3 Yes
Operating System juniper junos 18.3 Yes
Operating System juniper junos 18.3 Yes
Operating System juniper junos 18.3 Yes
Operating System juniper junos 18.3 Yes
Operating System juniper junos 18.3 Yes
Operating System juniper junos 18.3 Yes
Operating System juniper junos 18.3 Yes
Operating System juniper junos 18.3 Yes
Operating System juniper junos 18.3 Yes
Operating System juniper junos 18.3 Yes
Operating System juniper junos 18.3 Yes
Operating System juniper junos 18.3 Yes
Operating System juniper junos 18.3 Yes
Operating System juniper junos 18.4 Yes
Operating System juniper junos 18.4 Yes
Operating System juniper junos 18.4 Yes
Operating System juniper junos 18.4 Yes
Operating System juniper junos 18.4 Yes
Operating System juniper junos 18.4 Yes
Operating System juniper junos 18.4 Yes
Operating System juniper junos 18.4 Yes
Operating System juniper junos 18.4 Yes
Operating System juniper junos 18.4 Yes
Operating System juniper junos 18.4 Yes
Operating System juniper junos 18.4 Yes
Operating System juniper junos 18.4 Yes
Operating System juniper junos 18.4 Yes
Operating System juniper junos 18.4 Yes
Operating System juniper junos 18.4 Yes
Operating System juniper junos 18.4 Yes
Operating System juniper junos 18.4 Yes
Operating System juniper junos 18.4 Yes
Operating System juniper junos 18.4 Yes
Operating System juniper junos 18.4 Yes
Operating System juniper junos 18.4 Yes
Operating System juniper junos 18.4 Yes
Operating System juniper junos 18.4 Yes
Operating System juniper junos 19.1 Yes
Operating System juniper junos 19.1 Yes
Operating System juniper junos 19.1 Yes
Operating System juniper junos 19.1 Yes
Operating System juniper junos 19.1 Yes
Operating System juniper junos 19.1 Yes
Operating System juniper junos 19.1 Yes
Operating System juniper junos 19.1 Yes
Operating System juniper junos 19.1 Yes
Operating System juniper junos 19.1 Yes
Operating System juniper junos 19.1 Yes
Operating System juniper junos 19.1 Yes
Operating System juniper junos 19.1 Yes
Operating System juniper junos 19.2 Yes
Operating System juniper junos 19.2 Yes
Operating System juniper junos 19.2 Yes
Operating System juniper junos 19.2 Yes
Operating System juniper junos 19.2 Yes
Operating System juniper junos 19.2 Yes
Operating System juniper junos 19.2 Yes
Operating System juniper junos 19.2 Yes
Operating System juniper junos 19.2 Yes
Operating System juniper junos 19.2 Yes
Operating System juniper junos 19.3 Yes
Operating System juniper junos 19.3 Yes
Operating System juniper junos 19.3 Yes
Operating System juniper junos 19.3 Yes
Operating System juniper junos 19.3 Yes
Operating System juniper junos 19.3 Yes
Operating System juniper junos 19.3 Yes
Operating System juniper junos 19.3 Yes
Operating System juniper junos 19.3 Yes
Operating System juniper junos 19.3 Yes
Operating System juniper junos 19.4 Yes
Operating System juniper junos 19.4 Yes
Operating System juniper junos 19.4 Yes
Operating System juniper junos 19.4 Yes
Operating System juniper junos 19.4 Yes
Operating System juniper junos 19.4 Yes
Operating System juniper junos 19.4 Yes
Operating System juniper junos 19.4 Yes
Operating System juniper junos 20.1 Yes
Operating System juniper junos 20.1 Yes
Operating System juniper junos 20.1 Yes
Operating System juniper junos 20.1 Yes
Operating System juniper junos 20.1 Yes
Operating System juniper junos 20.2 Yes
Operating System juniper junos 20.2 Yes
Operating System juniper junos 20.2 Yes
Operating System juniper junos 20.2 Yes
Operating System juniper junos 20.3 Yes
Operating System juniper junos 20.3 Yes
Hardware juniper ptx1000 - No
Hardware juniper ptx10001-36mr - No
Hardware juniper ptx10002 - No
Hardware juniper ptx10003 - No
Hardware juniper ptx10004 - No
Hardware juniper ptx10008 - No
Hardware juniper ptx10016 - No
Hardware juniper ptx3000 - No
Hardware juniper ptx5000 - No
References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For juniper's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.