CVE-2021-0206
Last modified
CVE-2021-0206 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to send a specific packet causing the packet forwarding engine (PFE) to crash and restart, resulting in a Denial of Service (DoS). By continuously sending these specific packets, an attacker can repeatedly disable the PFE causing a sustained Denial of Service (DoS). EPSS estimates a 1.31% chance of exploitation in the next 30 days.
Description
A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to send a specific packet causing the packet forwarding engine (PFE) to crash and restart, resulting in a Denial of Service (DoS). By continuously sending these specific packets, an attacker can repeatedly disable the PFE causing a sustained Denial of Service (DoS). This issue only affects Juniper Networks NFX Series, SRX Series platforms when SSL Proxy is configured. This issue affects Juniper Networks Junos OS on NFX Series and SRX Series: 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R3-S1; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3; 19.2 versions prior to 19.2R1-S2, 19.2R2; 19.3 versions prior to 19.3R2. This issue does not affect Juniper Networks Junos OS versions on NFX Series and SRX Series prior to 18.3R1.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Juniper | Junos | 18.3 |
| Juniper | Junos | 18.4 |
| Juniper | Junos | 19.1 |
| Juniper | Junos | 19.2 |
| Juniper | Junos | 19.3 |
References
- https://kb.juniper.net/JSA11096Vendor Advisory
- https://kb.juniper.net/JSA11096Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-0206?
How severe is CVE-2021-0206?
How do I fix CVE-2021-0206?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-0199Improper input validation in the firmware for the Intel(R) E…4.4
- CVE-2021-0200Out-of-bounds write in the firmware for Intel(R) Ethernet 70…6.7
- CVE-2021-0202On Juniper Networks MX Series and EX9200 Series platforms wi…7.5
- CVE-2021-0203On Juniper Networks EX and QFX5K Series platforms configured…8.6
- CVE-2021-0204A sensitive information disclosure vulnerability in delta-ex…7.8
- CVE-2021-0205When the "Intrusion Detection Service" (IDS) feature is conf…5.8
- CVE-2021-0207An improper interpretation conflict of certain data between …7.5
- CVE-2021-0208An improper input validation vulnerability in the Routing Pr…8.8
- CVE-2021-0209In Juniper Networks Junos OS Evolved an attacker sending cer…6.5
- CVE-2021-0210An Information Exposure vulnerability in J-Web of Juniper Ne…6.8
- CVE-2021-0211An improper check for unusual or exceptional conditions in J…10
- CVE-2021-0212An Information Exposure vulnerability in Juniper Networks Co…5
Are you affected by CVE-2021-0206?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
