CVE-2021-0215

On Juniper Networks Junos EX series, QFX Series, MX Series and SRX branch series devices, a memory leak occurs every time the 802.1X authenticator port interface flaps which can lead to other processes, such as the pfex process, responsible for packet forwarding, to crash and restart. An administrator can use the following CLI command to monitor the status of memory consumption: user@device> show task memory detail Please refer to https://kb.juniper.net/KB31522 for details. This issue affects Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D54; 15.1X49 versions prior to 15.1X49-D240 ; 15.1X53 versions prior to 15.1X53-D593; 16.1 versions prior to 16.1R7-S8; 17.2 versions prior to 17.2R3-S4; 17.3 versions prior to 17.3R3-S8; 17.4 versions prior to 17.4R2-S11, 17.4R3-S2; 18.1 versions prior to 18.1R3-S10 ; 18.2 versions prior to 18.2R2-S7, 18.2R3-S3; 18.3 versions prior to 18.3R2-S4, 18.3R3-S2; 18.4 versions prior to 18.4R1-S7, 18.4R2-S4, 18.4R3-S2; 19.1 versions prior to 19.1R1-S5, 19.1R2-S2, 19.1R3; 19.2 versions prior to 19.2R1-S5, 19.2R2; 19.3 versions prior to 19.3R2-S3, 19.3R3; 19.4 versions prior to 19.4R1-S2, 19.4R2. This issue does not affect Juniper Networks Junos OS 12.3, 15.1.

• CWE-400
• CWE-401

• https://kb.juniper.net/JSA11105Exploit, Vendor Advisory
• https://kb.juniper.net/JSA11105Exploit, Vendor Advisory

Published

Jan 15, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-0208An improper input validation vulnerability in the Routing Pr…8.8
• CVE-2021-0209In Juniper Networks Junos OS Evolved an attacker sending cer…6.5
• CVE-2021-0210An Information Exposure vulnerability in J-Web of Juniper Ne…6.8
• CVE-2021-0211An improper check for unusual or exceptional conditions in J…10
• CVE-2021-0212An Information Exposure vulnerability in Juniper Networks Co…5
• CVE-2021-0214A vulnerability in the distributed or centralized periodic p…6.5
• CVE-2021-0216A vulnerability in Juniper Networks Junos OS running on the …6.5
• CVE-2021-0217A vulnerability in processing of certain DHCP packets from a…7.4
• CVE-2021-0218A command injection vulnerability in the license-check daemo…7.8
• CVE-2021-0219A command injection vulnerability in install package validat…6.7
• CVE-2021-0220The Junos Space Network Management Platform has been found t…6.8
• CVE-2021-0221In an EVPN/VXLAN scenario, if an IRB interface with a virtua…6.5