Log in Start free

Vulnerability · Published Apr 22, 2021 · Assigned by juniper

CVE-2021-0226Junos OS Evolved: The IPv6 BGP session will flap due to receipt of a specific IPv6 packet

High 7.1

In plain English

A high-severity security flaw in Junos OS Evolved from Juniper Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities).

Severity (CVSS 3.1)7.1High
Exploit odds (30 days)0.9%top 40.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

On Juniper Networks Junos OS Evolved devices, receipt of a specific IPv6 packet may cause an established IPv6 BGP session to terminate, creating a Denial of Service (DoS) condition. Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue does not affect IPv4 BGP sessions. This issue affects IBGP or EBGP peer sessions with IPv6. This issue affects: Juniper Networks Junos OS Evolved: 19.4 versions prior to 19.4R2-S3-EVO; 20.1 versions prior to 20.1R2-S3-EVO; 20.2 versions prior to 20.2R2-S1-EVO; 20.3 versions prior to 20.3R2-EVO. This issue does not affect Juniper Networks Junos OS releases.

Affected products (as reported)

VendorProductVersions
Juniper Networks Junos OS Evolved 19.4-EVO – before 19.4R2-S3-EVO20.1-EVO – before 20.1R2-S3-EVO20.2-EVO – before 20.2R2-S1-EVO20.3-EVO – before 20.3R2-EVO

Weakness: CWE-665 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

References