CVE-2021-0208 — Junos OS and Junos OS Evolved: In bidirectional LSP configurations, on MPLS egress router RPD may core upon receipt of…

Description (CNA)

An improper input validation vulnerability in the Routing Protocol Daemon (RPD) service of Juniper Networks Junos OS allows an attacker to send a malformed RSVP packet when bidirectional LSPs are in use, which when received by an egress router crashes the RPD causing a Denial of Service (DoS) condition. Continued receipt of the packet will sustain the Denial of Service. This issue affects: Juniper Networks Junos OS: All versions prior to 17.3R3-S10 except 15.1X49-D240 for SRX series; 17.4 versions prior to 17.4R3-S2; 18.1 versions prior to 18.1R3-S10; 18.2 versions prior to 18.2R2-S7, 18.2R3-S4; 18.3 versions prior to 18.3R3-S2; 18.4 versions prior to 18.4R1-S8, 18.4R2-S6, 18.4R3-S2; 19.1 versions prior to 19.1R1-S5, 19.1R3-S3; 19.2 versions prior to 19.2R3; 19.3 versions prior to 19.3R2-S5, 19.3R3; 19.4 versions prior to 19.4R2-S2, 19.4R3-S1; 20.1 versions prior to 20.1R1-S4, 20.1R2; 15.1X49 versions prior to 15.1X49-D240 on SRX Series. Juniper Networks Junos OS Evolved: 19.3 versions prior to 19.3R2-S5-EVO; 19.4 versions prior to 19.4R2-S2-EVO; 20.1 versions prior to 20.1R1-S4-EVO.

Affected (CNA)

Vendor / product	Versions
Juniper Networks / Junos OS	affected unspecified before 17.3R3-S10; affected 17.4 before 17.4R3-S2; affected 18.1 before 18.1R3-S10; affected 18.2 before 18.2R2-S7, 18.2R3-S4; affected 18.3 before 18.3R3-S2; affected 18.4 before 18.4R1-S8, 18.4R2-S6, 18.4R3-S2; affected 19.1 before 19.1R1-S5, 19.1R3-S3; affected 19.2 before 19.2R3; affected 19.3 before 19.3R2-S5, 19.3R3; affected 19.4 before 19.4R2-S2, 19.4R3-S1; affected 20.1 before 20.1R1-S4, 20.1R2
Juniper Networks / Junos OS	affected 15.1X49 before 15.1X49-D240
Juniper Networks / Junos OS Evolved	affected 19.3 before 19.3R2-S5-EVO; affected 19.4 before 19.4R2-S2-EVO; affected 20.1 before 20.1R1-S4-EVO

CWE

CWE-20

References

ADP enrichment

CVE

No English description supplied.