CVE-2021-0209
Last modified
CVE-2021-0209 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. In Juniper Networks Junos OS Evolved an attacker sending certain valid BGP update packets may cause Junos OS Evolved to access an uninitialized pointer causing RPD to core leading to a Denial of Service (DoS). Continued receipt of these types of valid BGP update packets will cause an extended Denial of Service condition. EPSS estimates a 0.44% chance of exploitation in the next 30 days.
Description
In Juniper Networks Junos OS Evolved an attacker sending certain valid BGP update packets may cause Junos OS Evolved to access an uninitialized pointer causing RPD to core leading to a Denial of Service (DoS). Continued receipt of these types of valid BGP update packets will cause an extended Denial of Service condition. RPD will require a restart to recover. An indicator of compromise is to see if the file rpd.re exists by issuing the command: show system core-dumps This issue affects: Juniper Networks Junos OS Evolved 19.4 versions prior to 19.4R2-S2-EVO; 20.1 versions prior to 20.1R1-S2-EVO, 20.1R2-S1-EVO. This issue does not affect Junos OS.
Metrics
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Juniper | Junos Os Evolved | 19.4 | R1 |
| Juniper | Junos Os Evolved | 20.1 | — |
References
- https://kb.juniper.net/JSA11099Vendor Advisory
- https://kb.juniper.net/JSA11099Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-0209?
How severe is CVE-2021-0209?
How do I fix CVE-2021-0209?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-0203On Juniper Networks EX and QFX5K Series platforms configured…8.6
- CVE-2021-0204A sensitive information disclosure vulnerability in delta-ex…7.8
- CVE-2021-0205When the "Intrusion Detection Service" (IDS) feature is conf…5.8
- CVE-2021-0206A NULL Pointer Dereference vulnerability in Juniper Networks…7.5
- CVE-2021-0207An improper interpretation conflict of certain data between …7.5
- CVE-2021-0208An improper input validation vulnerability in the Routing Pr…8.8
- CVE-2021-0210An Information Exposure vulnerability in J-Web of Juniper Ne…6.8
- CVE-2021-0211An improper check for unusual or exceptional conditions in J…10
- CVE-2021-0212An Information Exposure vulnerability in Juniper Networks Co…5
- CVE-2021-0214A vulnerability in the distributed or centralized periodic p…6.5
- CVE-2021-0215On Juniper Networks Junos EX series, QFX Series, MX Series a…6.5
- CVE-2021-0216A vulnerability in Juniper Networks Junos OS running on the …6.5
Are you affected by CVE-2021-0209?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
