CVE-2021-0292

{"id": "CVE-2021-0292", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.3, "accessVector": "ADJACENT_NETWORK", "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.5, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "sirt@juniper.net", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2021-07-15T20:15:11.090", "references": [{"url": "https://kb.juniper.net/JSA11194", "tags": ["Vendor Advisory"], "source": "sirt@juniper.net"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-400"}]}, {"type": "Secondary", "source": "sirt@juniper.net", "description": [{"lang": "en", "value": "CWE-400"}]}], "descriptions": [{"lang": "en", "value": "An Uncontrolled Resource Consumption vulnerability in the ARP daemon (arpd) and Network Discovery Protocol (ndp) process of Juniper Networks Junos OS Evolved allows a malicious attacker on the local network to consume memory resources, ultimately resulting in a Denial of Service (DoS) condition. Link-layer functions such as IPv4 and/or IPv6 address resolution may be impacted, leading to traffic loss. The processes do not recover on their own and must be manually restarted. Changes in memory usage can be monitored using the following shell commands (header shown for clarity): user@router:/var/log# ps aux | grep arpd USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 31418 59.0 0.7 *5702564* 247952 ? xxx /usr/sbin/arpd --app-name arpd -I object_select --shared-objects-mode 3 user@router:/var/log# ps aux | grep arpd USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 31418 49.1 1.0 *5813156* 351184 ? xxx /usr/sbin/arpd --app-name arpd -I object_select --shared-objects-mode 3 Memory usage can be monitored for the ndp process in a similar fashion: user@router:/var/log# ps aux | grep ndp USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 14935 0.0 0.1 *5614052* 27256 ? Ssl Jun15 0:17 /usr/sbin/ndp -I no_tab_chk,object_select --app-name ndp --shared-obje user@router:/var/log# ps aux | grep ndp USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 14935 0.0 0.1 *5725164* 27256 ? Ssl Jun15 0:17 /usr/sbin/ndp -I no_tab_chk,object_select --app-name ndp --shared-obje This issue affects Juniper Networks Junos OS Evolved: 19.4 versions prior to 19.4R2-S3-EVO; 20.1 versions prior to 20.1R2-S4-EVO; all versions of 20.2-EVO. This issue does not affect Juniper Networks Junos OS Evolved versions prior to 19.4R2-EVO."}, {"lang": "es", "value": "Una vulnerabilidad de Consumo No Controlado de Recursos en el demonio ARP (arpd) y el proceso Network Discovery Protocol (ndp) de Juniper Networks Junos OS Evolved permite a un atacante malicioso en la red local consumir recursos de memoria, Resultando \u00faltimamente en una condici\u00f3n de Denegaci\u00f3n de Servicio (DoS). Unas funciones de la capa de enlace, como la resoluci\u00f3n de direcciones IPv4 y/o IPv6, pueden estar impactadas, conllevando a una p\u00e9rdida de tr\u00e1fico. Los procesos no se recuperan por s\u00ed solos y deben ser reiniciados manualmente. Los cambios en el uso de la memoria pueden ser monitoreados usando los siguientes comandos del shell (se muestra el encabezado para mayor claridad): user@router:/var/log# ps aux | grep arpd USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 31418 59. 0 0.7 *5702564* 247952 ? xxx /usr/sbin/arpd --app-name arpd -I object_select --shared-objects-mode 3 user@router:/var/log# ps aux | grep arpd USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 31418 49. 1 1.0 *5813156* 351184 ? xxx /usr/sbin/arpd --app-name arpd -I object_select --shared-objects-mode 3 El uso de la memoria puede monitorizarse para el proceso ndp de forma similar: user@router:/var/log# ps aux | grep ndp USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 14935 0.0 0.1 *5614052* 27256 ? Ssl Jun15 0:17 /usr/sbin/ndp -I no_tab_chk,object_select --app-name ndp --shared-obje user@router:/var/log# ps aux | grep ndp USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 14935 0.0 0.1 *5725164* 27256 ? Ssl Jun15 0:17 /usr/sbin/ndp -I no_tab_chk,object_select --app-name ndp --shared-obje Este problema afecta a Juniper Networks Junos OS Evolved: Las versiones 19.4 anteriores a 19.4R2-S3-EVO; las versiones 20.1 anteriores a 20.1R2-S4-EVO; todas las versiones de 20.2-EVO. Este problema no afecta a las versiones de Juniper Networks Junos OS Evolved anteriores a 19.4R2-EVO"}], "lastModified": "2021-10-25T15:20:20.817", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:juniper:junos_os_evolved:19.4:r1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83447F3F-79A3-41DF-8FD1-31DCFCBE40A4"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:19.4:r2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2B14CED1-BEAF-4343-A05D-FB1E2B6AC955"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:19.4:r2-s1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ABB91C38-8C70-436A-83DB-42B8DF81D7D8"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:19.4:r2-s2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "746CB668-8185-44D4-A690-B62F417BECB1"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.1:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AED25FB6-E3FA-4543-90B2-50068D683D50"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.1:r1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F64FBB4B-7CBF-499B-A523-804857DEFAFA"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.1:r1-s1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EEBE159F-5D94-4C18-B922-331586BEA2CA"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.1:r2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A38EBFC9-ECBD-4362-82B2-04C02009E85C"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.1:r2-s1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0DF7C3A8-1279-4F38-9548-85AC7D6290FD"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.1:r2-s2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "50D38F97-81B0-4952-A1E3-0A9AA4D34820"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.1:r2-s3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB827018-2009-483D-8D53-5BFCE8409BF4"}, {"criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.2:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "487A82C9-7B7E-4ACA-BABF-65B8504079AD"}], "operator": "OR"}]}], "sourceIdentifier": "sirt@juniper.net"}