In Point to MultiPoint (P2MP) scenarios within established sessions between network or adjacent neighbors the improper use of a source to destination copy write operation combined with a Stack-based Buffer Overflow on certain specific packets processed by the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved sent by a remote unauthenticated network attacker causes the RPD to crash causing a Denial of Service (DoS). Continued receipt and processing of these packets will create a sustained Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS 19.2 versions prior to 19.2R3-S2; 19.3 versions prior to 19.3R2-S6, 19.3R3-S2; 19.4 versions prior to 19.4R1-S4, 19.4R2-S4, 19.4R3-S3; 20.1 versions prior to 20.1R2-S2, 20.1R3; 20.2 versions prior to 20.2R2-S3, 20.2R3; 20.3 versions prior to 20.3R2. This issue does not affect Juniper Networks Junos OS versions prior to 19.2R1. Juniper Networks Junos OS Evolved 20.1 versions prior to 20.1R3-EVO; 20.2 versions prior to 20.2R3-EVO; 20.3 versions prior to 20.3R2-EVO.
References
| Link | Resource |
|---|---|
| https://kb.juniper.net/JSA11251 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
25 Oct 2021, 17:01
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:* cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:* cpe:2.3:o:juniper:junos_os_evolved:20.1:r1:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.2:r1-s6:*:*:*:*:*:* cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:* cpe:2.3:o:juniper:junos_os_evolved:20.1:r2-s3:*:*:*:*:*:* cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:* cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:* cpe:2.3:o:juniper:junos:20.1:r2-s1:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:* cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:* cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:* cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:* cpe:2.3:o:juniper:junos_os_evolved:20.1:r2-s1:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:* cpe:2.3:o:juniper:junos_os_evolved:20.1:-:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.2:r3-s1:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.4:r3-s2:*:*:*:*:*:* cpe:2.3:o:juniper:junos_os_evolved:20.1:r2-s5:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:* cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:* cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:* cpe:2.3:o:juniper:junos_os_evolved:20.2:r1:*:*:*:*:*:* cpe:2.3:o:juniper:junos_os_evolved:20.3:r1:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:* cpe:2.3:o:juniper:junos_os_evolved:20.2:r1-s1:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:* cpe:2.3:o:juniper:junos_os_evolved:20.1:r1-s1:*:*:*:*:*:* cpe:2.3:o:juniper:junos_os_evolved:20.2:-:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:* cpe:2.3:o:juniper:junos_os_evolved:20.3:-:*:*:*:*:*:* cpe:2.3:o:juniper:junos_os_evolved:20.1:r2-s2:*:*:*:*:*:* cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:* cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:* cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:* cpe:2.3:o:juniper:junos_os_evolved:20.3:r1-s2:*:*:*:*:*:* cpe:2.3:o:juniper:junos_os_evolved:20.2:r2:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:* cpe:2.3:o:juniper:junos:20.1:r2:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:* cpe:2.3:o:juniper:junos_os_evolved:20.3:r1-s3:*:*:*:*:*:* cpe:2.3:o:juniper:junos_os_evolved:20.1:r2-s4:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.3:r3-s1:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:* cpe:2.3:o:juniper:junos_os_evolved:20.1:r2:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:* cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:* cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:* cpe:2.3:o:juniper:junos_os_evolved:20.3:r1-s1:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:* cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:* cpe:2.3:o:juniper:junos_os_evolved:20.2:r2-s1:*:*:*:*:*:* |
|
| References | (CONFIRM) https://kb.juniper.net/JSA11251 - Vendor Advisory | |
| CWE | CWE-787 | |
| CVSS |
v2 : v3 : |
v2 : 4.3
v3 : 7.5 |
19 Oct 2021, 19:22
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-10-19 19:15
Updated : 2023-12-10 14:09
NVD link : CVE-2021-31383
Mitre link : CVE-2021-31383
CVE.ORG link : CVE-2021-31383
JSON object : View
Products Affected
juniper
- junos_os_evolved
- junos