CVE-2021-0250

Junos OS and Junos OS Evolved: An attacker sending a specific crafted BGP update message will crash RPD

Severity Score

7.5

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

In segment routing traffic engineering (SRTE) environments where the BGP Monitoring Protocol (BMP) feature is enable, a vulnerability in the Routing Protocol Daemon (RPD) process of Juniper Networks Junos OS allows an attacker to send a specific crafted BGP update message causing the RPD service to core, creating a Denial of Service (DoS) Condition. Continued receipt and processing of this update message will create a sustained Denial of Service (DoS) condition. This issue affects IPv4 and IPv6 environments. This issue affects: Juniper Networks Junos OS 17.4 versions 17.4R1 and above prior to 17.4R2-S6, 17.4R3; 18.1 versions prior to 18.1R3-S7; 18.2 versions prior to 18.2R2-S6, 18.2R3-S3; 18.3 versions prior to 18.3R1-S7, 18.3R2-S3, 18.3R3; 18.4 versions prior to 18.4R1-S5, 18.4R2-S3, 18.4R3; 19.1 versions prior to 19.1R1-S4, 19.1R2; 19.2 versions prior to 19.2R1-S3, 19.2R2, This issue does not affect Junos OS releases prior to 17.4R1. This issue affects: Juniper Networks Junos OS Evolved 19.2-EVO versions prior to 19.2R2-EVO.

En entornos segment routing traffic engineering (SRTE) donde la función BGP Monitoring Protocol (BMP) está habilitada, una vulnerabilidad en el proceso Routing Protocol Daemon (RPD) de Juniper Networks Junos OS, permite a un atacante enviar un mensaje de actualización de BGP específico que causa el Servicio RPD hacia el núcleo, creando una Condición de Denegación de Servicio (DoS). La recepción y el procesamiento continuo de este mensaje de actualización crearán una condición sostenida de Denegación de Servicio (DoS). Este problema afecta a los entornos IPv4 e IPv6. Este problema afecta a: Juniper Networks Junos OS versiones 17.4, 17.4R1 y superiores, versiones anteriores a 17.4R2-S6, 17.4R3; versiones 18.1 anteriores a 18.1R3-S7; versiones 18.2 anteriores a 18.2R2-S6, 18.2R3-S3; versiones 18.3 anteriores a 18.3R1-S7, 18.3R2-S3, 18.3R3; versiones 18.4 anteriores a 18.4R1-S5, 18.4R2-S3, 18.4R3; versiones 19.1 anteriores a 19.1R1-S4, 19.1R2; versiones 19. 2 anteriores a 19.2R1-S3, 19.2R2. Este problema no afecta Junos OS versiones anteriores a 17.4R1. Este problema afecta a: Juniper Networks Junos OS Evolved versiones 19.2-EVO anteriores a 19.2R2-EVO

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2020-10-27 CVE Reserved
2021-04-22 CVE Published
2024-01-06 EPSS Updated
2024-09-17 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://kb.juniper.net/JSA11143	2021-04-27

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.4 Search vendor "Juniper" for product "Junos" and version "17.4"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.4 Search vendor "Juniper" for product "Junos" and version "17.4"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.4 Search vendor "Juniper" for product "Junos" and version "17.4"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.4 Search vendor "Juniper" for product "Junos" and version "17.4"		r1-s3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.4 Search vendor "Juniper" for product "Junos" and version "17.4"		r1-s4		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.4 Search vendor "Juniper" for product "Junos" and version "17.4"		r1-s5		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.4 Search vendor "Juniper" for product "Junos" and version "17.4"		r1-s6		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.4 Search vendor "Juniper" for product "Junos" and version "17.4"		r1-s7		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.4 Search vendor "Juniper" for product "Junos" and version "17.4"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.4 Search vendor "Juniper" for product "Junos" and version "17.4"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.4 Search vendor "Juniper" for product "Junos" and version "17.4"		r2-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.4 Search vendor "Juniper" for product "Junos" and version "17.4"		r2-s3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.4 Search vendor "Juniper" for product "Junos" and version "17.4"		r2-s4		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				17.4 Search vendor "Juniper" for product "Junos" and version "17.4"		r2-s5		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.1 Search vendor "Juniper" for product "Junos" and version "18.1"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.1 Search vendor "Juniper" for product "Junos" and version "18.1"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.1 Search vendor "Juniper" for product "Junos" and version "18.1"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.1 Search vendor "Juniper" for product "Junos" and version "18.1"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.1 Search vendor "Juniper" for product "Junos" and version "18.1"		r2-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.1 Search vendor "Juniper" for product "Junos" and version "18.1"		r2-s4		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.1 Search vendor "Juniper" for product "Junos" and version "18.1"		r3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.1 Search vendor "Juniper" for product "Junos" and version "18.1"		r3-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.1 Search vendor "Juniper" for product "Junos" and version "18.1"		r3-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.1 Search vendor "Juniper" for product "Junos" and version "18.1"		r3-s3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.1 Search vendor "Juniper" for product "Junos" and version "18.1"		r3-s4		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.1 Search vendor "Juniper" for product "Junos" and version "18.1"		r3-s5		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.1 Search vendor "Juniper" for product "Junos" and version "18.1"		r3-s6		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.2 Search vendor "Juniper" for product "Junos" and version "18.2"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.2 Search vendor "Juniper" for product "Junos" and version "18.2"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.2 Search vendor "Juniper" for product "Junos" and version "18.2"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.2 Search vendor "Juniper" for product "Junos" and version "18.2"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.2 Search vendor "Juniper" for product "Junos" and version "18.2"		r1-s3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.2 Search vendor "Juniper" for product "Junos" and version "18.2"		r1-s4		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.2 Search vendor "Juniper" for product "Junos" and version "18.2"		r1-s5		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.2 Search vendor "Juniper" for product "Junos" and version "18.2"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.2 Search vendor "Juniper" for product "Junos" and version "18.2"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.2 Search vendor "Juniper" for product "Junos" and version "18.2"		r2-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.2 Search vendor "Juniper" for product "Junos" and version "18.2"		r2-s3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.2 Search vendor "Juniper" for product "Junos" and version "18.2"		r2-s4		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.2 Search vendor "Juniper" for product "Junos" and version "18.2"		r2-s5		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.2 Search vendor "Juniper" for product "Junos" and version "18.2"		r3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.2 Search vendor "Juniper" for product "Junos" and version "18.2"		r3-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.2 Search vendor "Juniper" for product "Junos" and version "18.2"		r3-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.3 Search vendor "Juniper" for product "Junos" and version "18.3"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.3 Search vendor "Juniper" for product "Junos" and version "18.3"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.3 Search vendor "Juniper" for product "Junos" and version "18.3"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.3 Search vendor "Juniper" for product "Junos" and version "18.3"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.3 Search vendor "Juniper" for product "Junos" and version "18.3"		r1-s3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.3 Search vendor "Juniper" for product "Junos" and version "18.3"		r1-s4		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.3 Search vendor "Juniper" for product "Junos" and version "18.3"		r1-s5		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.3 Search vendor "Juniper" for product "Junos" and version "18.3"		r1-s6		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.3 Search vendor "Juniper" for product "Junos" and version "18.3"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.3 Search vendor "Juniper" for product "Junos" and version "18.3"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.3 Search vendor "Juniper" for product "Junos" and version "18.3"		r2-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.4 Search vendor "Juniper" for product "Junos" and version "18.4"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.4 Search vendor "Juniper" for product "Junos" and version "18.4"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.4 Search vendor "Juniper" for product "Junos" and version "18.4"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.4 Search vendor "Juniper" for product "Junos" and version "18.4"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.4 Search vendor "Juniper" for product "Junos" and version "18.4"		r1-s3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.4 Search vendor "Juniper" for product "Junos" and version "18.4"		r1-s4		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.4 Search vendor "Juniper" for product "Junos" and version "18.4"		r2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.4 Search vendor "Juniper" for product "Junos" and version "18.4"		r2-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				18.4 Search vendor "Juniper" for product "Junos" and version "18.4"		r2-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.1 Search vendor "Juniper" for product "Junos" and version "19.1"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.1 Search vendor "Juniper" for product "Junos" and version "19.1"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.1 Search vendor "Juniper" for product "Junos" and version "19.1"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.1 Search vendor "Juniper" for product "Junos" and version "19.1"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.1 Search vendor "Juniper" for product "Junos" and version "19.1"		r1-s3		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.2 Search vendor "Juniper" for product "Junos" and version "19.2"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.2 Search vendor "Juniper" for product "Junos" and version "19.2"		r1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.2 Search vendor "Juniper" for product "Junos" and version "19.2"		r1-s1		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				19.2 Search vendor "Juniper" for product "Junos" and version "19.2"		r1-s2		Affected
Juniper Search vendor "Juniper"		Junos Os Evolved Search vendor "Juniper" for product "Junos Os Evolved"				19.2 Search vendor "Juniper" for product "Junos Os Evolved" and version "19.2"		r1		Affected