CVE-2021-0239

In Juniper Networks Junos OS Evolved, receipt of a stream of specific genuine Layer 2 frames may cause the Advanced Forwarding Toolkit (AFT) manager process (Evo-aftmand), responsible for handling Route, Class-of-Service (CoS), Firewall operations within the packet forwarding engine (PFE) to crash and restart, leading to a Denial of Service (DoS) condition. By continuously sending this specific stream of genuine Layer 2 frames, an attacker can repeatedly crash the PFE, causing a sustained Denial of Service (DoS). This issue affects Juniper Networks Junos OS Evolved: All versions prior to 20.4R1-EVO. This issue does not affect Junos OS versions.

• CWE-754
• CWE-754

• https://kb.juniper.net/JSA11134Vendor Advisory
• https://kb.juniper.net/JSA11134Vendor Advisory

Published

Apr 22, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-0233A vulnerability in Juniper Networks Junos OS ACX500 Series, …7.5
• CVE-2021-0234Due to an improper Initialization vulnerability on Juniper N…5.8
• CVE-2021-0235On SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with S…7.3
• CVE-2021-0236Due to an improper check for unusual or exceptional conditio…6.5
• CVE-2021-0237On Juniper Networks EX4300-MP Series, EX4600 Series, EX4650 …6.5
• CVE-2021-0238When a MX Series is configured as a Broadband Network Gatewa…5.5
• CVE-2021-0240On Juniper Networks Junos OS platforms configured as DHCPv6 …6.5
• CVE-2021-0241On Juniper Networks Junos OS platforms configured as DHCPv6 …6.5
• CVE-2021-0242A vulnerability due to the improper handling of direct memor…6.5
• CVE-2021-0243Improper Handling of Unexpected Data in the firewall policer…4.7
• CVE-2021-0244A signal handler race condition exists in the Layer 2 Addres…7.4
• CVE-2021-0245A Use of Hard-coded Credentials vulnerability in Juniper Net…7.8