CVE-2021-0234

Due to an improper Initialization vulnerability on Juniper Networks Junos OS QFX5100-96S devices with QFX 5e Series image installed, ddos-protection configuration changes will not take effect beyond the default DDoS (Distributed Denial of Service) settings when configured from the CLI. The DDoS protection (jddosd) daemon allows the device to continue to function while protecting the packet forwarding engine (PFE) during the DDoS attack. When this issue occurs, the default DDoS settings within the PFE apply, as CPU bound packets will be throttled and dropped in the PFE when the limits are exceeded. To check if the device has this issue, the administrator can execute the following command to monitor the status of DDoS protection: user@device> show ddos-protection protocols error: the ddos-protection subsystem is not running This issue affects only QFX5100-96S devices. No other products or platforms are affected by this issue. This issue affects: Juniper Networks Junos OS on QFX5100-96S: 17.3 versions prior to 17.3R3-S10; 17.4 versions prior to 17.4R3-S4; 18.1 versions prior to 18.1R3-S10; 18.2 versions prior to 18.2R3-S3; 18.3 versions prior to 18.3R3-S2; 18.4 versions prior to 18.4R2-S4, 18.4R3-S1; 19.1 versions prior to 19.1R3, 19.1R3-S4; 19.2 versions prior to 19.2R2; 19.3 versions prior to 19.3R3; 19.4 versions prior to 19.4R2;

• CWE-665
• CWE-665

• https://kb.juniper.net/JSA11129Vendor Advisory
• https://kb.juniper.net/JSA11129Vendor Advisory

Published

Apr 22, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-0228An improper check for unusual or exceptional conditions vuln…6.5
• CVE-2021-0229An uncontrolled resource consumption vulnerability in Messag…5.3
• CVE-2021-0230On Juniper Networks SRX Series devices with link aggregation…7.5
• CVE-2021-0231A path traversal vulnerability in the Juniper Networks SRX a…6.5
• CVE-2021-0232An authentication bypass vulnerability in the Juniper Networ…7.4
• CVE-2021-0233A vulnerability in Juniper Networks Junos OS ACX500 Series, …7.5
• CVE-2021-0235On SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with S…7.3
• CVE-2021-0236Due to an improper check for unusual or exceptional conditio…6.5
• CVE-2021-0237On Juniper Networks EX4300-MP Series, EX4600 Series, EX4650 …6.5
• CVE-2021-0238When a MX Series is configured as a Broadband Network Gatewa…5.5
• CVE-2021-0239In Juniper Networks Junos OS Evolved, receipt of a stream of…6.5
• CVE-2021-0240On Juniper Networks Junos OS platforms configured as DHCPv6 …6.5