CVE-2021-0282

On Juniper Networks Junos OS devices with Multipath or add-path feature enabled, processing a specific BGP UPDATE can lead to a routing process daemon (RPD) crash and restart, causing a Denial of Service (DoS). Continued receipt and processing of this UPDATE message will create a sustained Denial of Service (DoS) condition. This BGP UPDATE message can propagate to other BGP peers with vulnerable Junos versions on which Multipath or add-path feature is enabled, and cause RPD to crash and restart. This issue affects both IBGP and EBGP deployments in IPv4 or IPv6 network. Junos OS devices that do not have the BGP Multipath or add-path feature enabled are not affected by this issue. This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S18; 15.1 versions prior to 15.1R7-S9; 17.3 versions prior to 17.3R3-S11; 17.4 versions prior to 17.4R2-S13, 17.4R3-S4; 18.1 versions prior to 18.1R3-S12; 18.2 versions prior to 18.2R3-S7; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R2-S6, 18.4R3-S6; 19.1 versions prior to 19.1R3-S3;

• CWE-754
• CWE-754

• https://kb.juniper.net/JSA11186Vendor Advisory
• https://kb.juniper.net/JSA11186Vendor Advisory

Published

Jul 15, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-0276A stack-based Buffer Overflow vulnerability in Juniper Netwo…9.8
• CVE-2021-0277An Out-of-bounds Read vulnerability in the processing of spe…8.8
• CVE-2021-0278An Improper Input Validation vulnerability in J-Web of Junip…7.8
• CVE-2021-0279Juniper Networks Contrail Cloud (CC) releases prior to 13.6.…5.5
• CVE-2021-0280Due to an Improper Initialization vulnerability in Juniper N…7.5
• CVE-2021-0281On Juniper Networks Junos OS devices configured with BGP ori…7.5
• CVE-2021-0283A buffer overflow vulnerability in the TCP/IP stack of Junip…7.5
• CVE-2021-0284A buffer overflow vulnerability in the TCP/IP stack of Junip…7.5
• CVE-2021-0285An uncontrolled resource consumption vulnerability in Junipe…7.5
• CVE-2021-0286A vulnerability in the handling of exceptional conditions in…7.5
• CVE-2021-0287In a Segment Routing ISIS (SR-ISIS)/MPLS environment, on Jun…6.5
• CVE-2021-0288A vulnerability in the processing of specific MPLS packets i…6.5