Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-31353

An Improper Handling of Exceptional Conditions vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows an attacker to inject a specific BGP update, causing the routing protocol daemon (RPD) to crash and restart, leading to a Denial of Service (DoS). Continued receipt and processing of the BGP update will create a sustained Denial of Service (DoS) condition. This issue affects very specific versions of Juniper Networks Junos OS: 19.3R3-S2; 19.4R3-S3; 20.2 versions 20.2R2-S3 and later, prior to 20.2R3-S2; 20.3 versions 20.3R2 and later, prior to 20.3R3; 20.4 versions 20.4R2 and later, prior to 20.4R3; 21.1 versions prior to 21.1R2. Juniper Networks Junos OS 20.1 is not affected by this issue. This issue also affects Juniper Networks Junos OS Evolved: All versions prior to 20.4R2-S3-EVO, 20.4R3-EVO; 21.1-EVO versions prior to 21.1R2-EVO; 21.2-EVO versions prior to 21.2R2-EVO.

Published

2021-10-19T19:15:08.720

Last Modified

2024-11-21T06:05:29.003

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-755
  • Type: Primary
    CWE-755
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System juniper junos 19.3 Yes
Operating System juniper junos 19.4 Yes
Operating System juniper junos 20.2 Yes
Operating System juniper junos 20.2 Yes
Operating System juniper junos 20.2 Yes
Operating System juniper junos 20.3 Yes
Operating System juniper junos 20.3 Yes
Operating System juniper junos 20.4 Yes
Operating System juniper junos 20.4 Yes
Operating System juniper junos 21.1 Yes
Operating System juniper junos 21.1 Yes
Operating System juniper junos_os_evolved ≤ 20.3 Yes
Operating System juniper junos_os_evolved 20.4 Yes
Operating System juniper junos_os_evolved 20.4 Yes
Operating System juniper junos_os_evolved 20.4 Yes
Operating System juniper junos_os_evolved 20.4 Yes
Operating System juniper junos_os_evolved 20.4 Yes
Operating System juniper junos_os_evolved 20.4 Yes
Operating System juniper junos_os_evolved 21.1 Yes
Operating System juniper junos_os_evolved 21.1 Yes
Operating System juniper junos_os_evolved 21.2 Yes
Operating System juniper junos_os_evolved 21.2 Yes
References