CVE-2021-0277

An Out-of-bounds Read vulnerability in the processing of specially crafted LLDP frames by the Layer 2 Control Protocol Daemon (l2cpd) of Juniper Networks Junos OS and Junos OS Evolved may allow an attacker to cause a Denial of Service (DoS), or may lead to remote code execution (RCE). Continued receipt and processing of these frames, sent from the local broadcast domain, will repeatedly crash the l2cpd process and sustain the Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS: 12.3 versions prior to 12.3R12-S18; 15.1 versions prior to 15.1R7-S9; 17.3 versions prior to 17.3R3-S12; 17.4 versions prior to 17.4R2-S13, 17.4R3-S5; 18.1 versions prior to 18.1R3-S13; 18.2 versions prior to 18.2R3-S8; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R2-S8, 18.4R3-S8; 19.1 versions prior to 19.1R3-S5; 19.2 versions prior to 19.2R3-S3; 19.3 versions prior to 19.3R2-S6, 19.3R3-S2; 19.4 versions prior to 19.4R1-S4, 19.4R2-S4, 19.4R3-S3; 20.1 versions prior to 20.1R2-S2, 20.1R3; 20.2 versions prior to 20.2R3-S1; 20.3 versions prior to 20.3R2-S1, 20.3R3; 20.4 versions prior to 20.4R2. Juniper Networks Junos OS Evolved versions prior to 20.4R2-EVO.

• CWE-125
• CWE-125

• https://kb.juniper.net/JSA11181Vendor Advisory
• https://kb.juniper.net/JSA11181Vendor Advisory

Published

Jul 15, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-0270On PTX Series and QFX10k Series devices with the "inline-jfl…5.9
• CVE-2021-0271A Double Free vulnerability in the software forwarding inter…6.5
• CVE-2021-0272A kernel memory leak in QFX10002-32Q, QFX10002-60C, QFX10002…6.5
• CVE-2021-0273An always-incorrect control flow implementation in the impli…5.3
• CVE-2021-0275A Cross-site Scripting (XSS) vulnerability in J-Web on Junip…8.8
• CVE-2021-0276A stack-based Buffer Overflow vulnerability in Juniper Netwo…9.8
• CVE-2021-0278An Improper Input Validation vulnerability in J-Web of Junip…7.8
• CVE-2021-0279Juniper Networks Contrail Cloud (CC) releases prior to 13.6.…5.5
• CVE-2021-0280Due to an Improper Initialization vulnerability in Juniper N…7.5
• CVE-2021-0281On Juniper Networks Junos OS devices configured with BGP ori…7.5
• CVE-2021-0282On Juniper Networks Junos OS devices with Multipath or add-p…7.5
• CVE-2021-0283A buffer overflow vulnerability in the TCP/IP stack of Junip…7.5