CVE-2021-0264

A vulnerability in the processing of traffic matching a firewall filter containing a syslog action in Juniper Networks Junos OS on MX Series with MPC10/MPC11 cards installed, PTX10003 and PTX10008 Series devices, will cause the line card to crash and restart, creating a Denial of Service (DoS). Continued receipt and processing of packets matching the firewall filter can create a sustained Denial of Service (DoS) condition. When traffic hits the firewall filter, configured on lo0 or any physical interface on the line card, containing a term with a syslog action (e.g. 'term <name> then syslog'), the affected line card will crash and restart, impacting traffic processing through the ports of the line card. This issue only affects MX Series routers with MPC10 or MPC11 line cards, and PTX10003 or PTX10008 Series packet transport routers. No other platforms or models of line cards are affected by this issue. Note: This issue has also been identified and described in technical service bulletin TSB17931 (login required). This issue affects: Juniper Networks Junos OS on MX Series: 19.3 versions prior to 19.3R3-S2; 19.4 versions prior to 19.4R3-S2; 20.1 versions prior to 20.1R3; 20.2 versions prior to 20.2R2-S2, 20.2R3; 20.3 versions prior to 20.3R3; 20.4 versions prior to 20.4R2. Juniper Networks Junos OS Evolved on PTX10003, PTX10008: All versions prior to 20.4R2-EVO. This issue does not affect Juniper Networks Junos OS versions prior to 19.3R1.

• CWE-703
• CWE-755

• https://kb.juniper.net/JSA11155Vendor Advisory
• https://kb.juniper.net/TSB17931Permissions Required, Vendor Advisory
• https://kb.juniper.net/JSA11155Vendor Advisory
• https://kb.juniper.net/TSB17931Permissions Required, Vendor Advisory

Published

Apr 22, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-0258A vulnerability in the forwarding of transit TCPv6 packets r…5.9
• CVE-2021-0259Due to a vulnerability in DDoS protection in Juniper Network…7.4
• CVE-2021-0260An improper authorization vulnerability in the Simple Networ…7.3
• CVE-2021-0261A vulnerability in the HTTP/HTTPS service used by J-Web, Web…7.5
• CVE-2021-0262Through routine static code analysis of the Juniper Networks…6.5
• CVE-2021-0263A Data Processing vulnerability in the Multi-Service process…5.9
• CVE-2021-0265An unvalidated REST API in the AppFormix Agent of Juniper Ne…8.1
• CVE-2021-0266The use of multiple hard-coded cryptographic keys in cSRX Se…9.8
• CVE-2021-0267An Improper Input Validation vulnerability in the active-lea…6.5
• CVE-2021-0268An Improper Neutralization of CRLF Sequences in HTTP Headers…9.3
• CVE-2021-0269The improper handling of client-side parameters in J-Web of …8.8
• CVE-2021-0270On PTX Series and QFX10k Series devices with the "inline-jfl…5.9