Vulnerability · Published Apr 22, 2021 · Assigned by juniper
CVE-2021-0250Junos OS and Junos OS Evolved: An attacker sending a specific crafted BGP update message will crash RPD
High 7.5
In plain English
A high-severity security flaw in Junos OS from Juniper Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities).
Official description
In segment routing traffic engineering (SRTE) environments where the BGP Monitoring Protocol (BMP) feature is enable, a vulnerability in the Routing Protocol Daemon (RPD) process of Juniper Networks Junos OS allows an attacker to send a specific crafted BGP update message causing the RPD service to core, creating a Denial of Service (DoS) Condition. Continued receipt and processing of this update message will create a sustained Denial of Service (DoS) condition. This issue affects IPv4 and IPv6 environments. This issue affects: Juniper Networks Junos OS 17.4 versions 17.4R1 and above prior to 17.4R2-S6, 17.4R3; 18.1 versions prior to 18.1R3-S7; 18.2 versions prior to 18.2R2-S6, 18.2R3-S3; 18.3 versions prior to 18.3R1-S7, 18.3R2-S3, 18.3R3; 18.4 versions prior to 18.4R1-S5, 18.4R2-S3, 18.4R3; 19.1 versions prior to 19.1R1-S4, 19.1R2; 19.2 versions prior to 19.2R1-S3, 19.2R2, This issue does not affect Junos OS releases prior to 17.4R1. This issue affects: Juniper Networks Junos OS Evolved 19.2-EVO versions prior to 19.2R2-EVO.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Juniper Networks | Junos OS | 17.4R1 – before unspecified17.4 – before 17.4R2-S6, 17.4R318.1 – before 18.1R3-S718.2 – before 18.2R2-S6, 18.2R3-S318.3 – before 18.3R1-S7, 18.3R2-S3, 18.3R318.4 – before 18.4R1-S5, 18.4R2-S3, 18.4R319.1 – before 19.1R1-S4, 19.1R219.2 – before 19.2R1-S3, 19.2R2 |
| Juniper Networks | Junos OS Evolved | 19.2-EVO – before 19.2R2-EVO |
References
- https://kb.juniper.net/JSA11143 x_refsource_MISC