Vulnerability-Lookup

BDU:2021-03226 (CVE-2021-0273)

Vulnerability from fstec – Published: 2021-06-23 – Updated: 2021-06-23 – View on bdu.fstec.ru Fixed

Title

Уязвимость конфигурации lt-интерфейса операционных систем Junos OS маршрутизаторов серии ACX5800, EX9200, MX10000, MX240, MX480 и MX960, позволяющая нарушителю вызвать отказ в обслуживании

Summary

Уязвимость конфигурации lt-интерфейса операционных систем Junos OS маршрутизаторов серии ACX5800, EX9200, MX10000, MX240, MX480 и MX960 связана с выполнением цикла с недоступным условием выхода. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании

Severity

5.0 (Medium) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:N/I:N/A:P

5.3 (Medium) CVSS 3.0


                      
                        CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Class

Architecture vulnerability

Status

Confirmed by the vendor

Exploitation

Resource exhaustion

Incidents

Being clarified

Remediation

Software update

CWE

CWE-670 - Реализация некорректного потока управления
CWE-835 - Выполнение цикла с недоступным условием выхода (бесконечный цикл)

Aliases

CVE-2021-0273

References

2 references

URL
https://kb.juniper.net/JSA11164
https://nvd.nist.gov/vuln/detail/CVE-2021-0273

Impacted products

1 product from 1 vendor

Vendors

Juniper Networks Inc.

Products

JunOS

Versions

от 17.2 до 17.2R3-S4 (JunOS), от 17.3 до 17.3R3-S8 (JunOS), от 17.4 до 17.4R3-S2 (JunOS), от 18.2 до 18.2R2-S7 (JunOS), от 18.2 до 18.2R3-S3 (JunOS), от 18.3 до 18.3R3-S2 (JunOS), до 16.1R7-S8 (JunOS), от 17.1 до 17.1R2-S12 (JunOS), от 17.4 до 17.4R2-S10 (JunOS), от 18.1 до 18.1R3-S10 (JunOS), от 18.3 до 18.3R1-S7 (JunOS), от 18.4 до 18.4R1-S7 (JunOS), от 18.4 до 18.4R2-S4 (JunOS), от 18.4 до 18.4R3-S2 (JunOS), от 19.1 до 19.1R1-S5 (JunOS), от 19.1 до 19.1R2-S1 (JunOS), от 19.1 до 19.1R3 (JunOS), от 19.2 до 19.2R1-S4 (JunOS), от 19.2 до 19.2R2 (JunOS), от 19.3 до 19.3R2-S3 (JunOS), от 19.3 до 19.3R3 (JunOS), от 19.4 до 19.4R1-S1 (JunOS), от 19.4 до 19.4R2 (JunOS)

Product types

Operating system

Platforms

Juniper Networks Inc. JunOS от 17.2 до 17.2R3-S4 EX9200 Series, Juniper Networks Inc. JunOS от 17.3 до 17.3R3-S8 EX9200 Series, Juniper Networks Inc. JunOS от 17.4 до 17.4R3-S2 EX9200 Series, Juniper Networks Inc. JunOS от 18.2 до 18.2R2-S7 EX9200 Series, Juniper Networks Inc. JunOS от 18.2 до 18.2R3-S3 EX9200 Series, Juniper Networks Inc. JunOS от 18.3 до 18.3R3-S2 EX9200 Series, Juniper Networks Inc. JunOS до 16.1R7-S8 ACX5800, Juniper Networks Inc. JunOS до 16.1R7-S8 EX9200 Series, Juniper Networks Inc. JunOS до 16.1R7-S8 MX10000 Series, Juniper Networks Inc. JunOS до 16.1R7-S8 MX240, Juniper Networks Inc. JunOS до 16.1R7-S8 MX480, Juniper Networks Inc. JunOS до 16.1R7-S8 MX960, Juniper Networks Inc. JunOS от 17.1 до 17.1R2-S12 ACX5800, Juniper Networks Inc. JunOS от 17.1 до 17.1R2-S12 EX9200 Series, Juniper Networks Inc. JunOS от 17.1 до 17.1R2-S12 MX10000 Series, Juniper Networks Inc. JunOS от 17.1 до 17.1R2-S12 MX240, Juniper Networks Inc. JunOS от 17.1 до 17.1R2-S12 MX480, Juniper Networks Inc. JunOS от 17.1 до 17.1R2-S12 MX960, Juniper Networks Inc. JunOS от 17.2 до 17.2R3-S4 ACX5800, Juniper Networks Inc. JunOS от 17.2 до 17.2R3-S4 MX10000 Series, Juniper Networks Inc. JunOS от 17.2 до 17.2R3-S4 MX240, Juniper Networks Inc. JunOS от 17.2 до 17.2R3-S4 MX480, Juniper Networks Inc. JunOS от 17.2 до 17.2R3-S4 MX960, Juniper Networks Inc. JunOS от 17.3 до 17.3R3-S8 ACX5800, Juniper Networks Inc. JunOS от 17.3 до 17.3R3-S8 MX10000 Series, Juniper Networks Inc. JunOS от 17.3 до 17.3R3-S8 MX240, Juniper Networks Inc. JunOS от 17.3 до 17.3R3-S8 MX480, Juniper Networks Inc. JunOS от 17.3 до 17.3R3-S8 MX960, Juniper Networks Inc. JunOS от 17.4 до 17.4R2-S10 ACX5800, Juniper Networks Inc. JunOS от 17.4 до 17.4R2-S10 EX9200 Series, Juniper Networks Inc. JunOS от 17.4 до 17.4R2-S10 MX10000 Series, Juniper Networks Inc. JunOS от 17.4 до 17.4R2-S10 MX240, Juniper Networks Inc. JunOS от 17.4 до 17.4R2-S10 MX480, Juniper Networks Inc. JunOS от 17.4 до 17.4R2-S10 MX960, Juniper Networks Inc. JunOS от 17.4 до 17.4R3-S2 ACX5800, Juniper Networks Inc. JunOS от 17.4 до 17.4R3-S2 MX10000 Series, Juniper Networks Inc. JunOS от 17.4 до 17.4R3-S2 MX240, Juniper Networks Inc. JunOS от 17.4 до 17.4R3-S2 MX480, Juniper Networks Inc. JunOS от 17.4 до 17.4R3-S2 MX960, Juniper Networks Inc. JunOS от 18.1 до 18.1R3-S10 ACX5800, Juniper Networks Inc. JunOS от 18.1 до 18.1R3-S10 EX9200 Series, Juniper Networks Inc. JunOS от 18.1 до 18.1R3-S10 MX10000 Series, Juniper Networks Inc. JunOS от 18.1 до 18.1R3-S10 MX240, Juniper Networks Inc. JunOS от 18.1 до 18.1R3-S10 MX480, Juniper Networks Inc. JunOS от 18.1 до 18.1R3-S10 MX960, Juniper Networks Inc. JunOS от 18.2 до 18.2R2-S7 ACX5800, Juniper Networks Inc. JunOS от 18.2 до 18.2R2-S7 MX10000 Series, Juniper Networks Inc. JunOS от 18.2 до 18.2R2-S7 MX240, Juniper Networks Inc. JunOS от 18.2 до 18.2R2-S7 MX480, Juniper Networks Inc. JunOS от 18.2 до 18.2R2-S7 MX960, Juniper Networks Inc. JunOS от 18.2 до 18.2R3-S3 ACX5800, Juniper Networks Inc. JunOS от 18.2 до 18.2R3-S3 MX10000 Series, Juniper Networks Inc. JunOS от 18.2 до 18.2R3-S3 MX240, Juniper Networks Inc. JunOS от 18.2 до 18.2R3-S3 MX480, Juniper Networks Inc. JunOS от 18.2 до 18.2R3-S3 MX960, Juniper Networks Inc. JunOS от 18.3 до 18.3R1-S7 ACX5800, Juniper Networks Inc. JunOS от 18.3 до 18.3R1-S7 EX9200 Series, Juniper Networks Inc. JunOS от 18.3 до 18.3R1-S7 MX10000 Series, Juniper Networks Inc. JunOS от 18.3 до 18.3R1-S7 MX240, Juniper Networks Inc. JunOS от 18.3 до 18.3R1-S7 MX480, Juniper Networks Inc. JunOS от 18.3 до 18.3R1-S7 MX960, Juniper Networks Inc. JunOS от 18.3 до 18.3R3-S2 ACX5800, Juniper Networks Inc. JunOS от 18.3 до 18.3R3-S2 MX10000 Series, Juniper Networks Inc. JunOS от 18.3 до 18.3R3-S2 MX240, Juniper Networks Inc. JunOS от 18.3 до 18.3R3-S2 MX480, Juniper Networks Inc. JunOS от 18.3 до 18.3R3-S2 MX960, Juniper Networks Inc. JunOS от 18.4 до 18.4R1-S7 ACX5800, Juniper Networks Inc. JunOS от 18.4 до 18.4R1-S7 EX9200 Series, Juniper Networks Inc. JunOS от 18.4 до 18.4R1-S7 MX10000 Series, Juniper Networks Inc. JunOS от 18.4 до 18.4R1-S7 MX240, Juniper Networks Inc. JunOS от 18.4 до 18.4R1-S7 MX480, Juniper Networks Inc. JunOS от 18.4 до 18.4R1-S7 MX960, Juniper Networks Inc. JunOS от 18.4 до 18.4R2-S4 ACX5800, Juniper Networks Inc. JunOS от 18.4 до 18.4R2-S4 EX9200 Series, Juniper Networks Inc. JunOS от 18.4 до 18.4R2-S4 MX10000 Series, Juniper Networks Inc. JunOS от 18.4 до 18.4R2-S4 MX240, Juniper Networks Inc. JunOS от 18.4 до 18.4R2-S4 MX480, Juniper Networks Inc. JunOS от 18.4 до 18.4R2-S4 MX960, Juniper Networks Inc. JunOS от 18.4 до 18.4R3-S2 ACX5800, Juniper Networks Inc. JunOS от 18.4 до 18.4R3-S2 EX9200 Series, Juniper Networks Inc. JunOS от 18.4 до 18.4R3-S2 MX10000 Series, Juniper Networks Inc. JunOS от 18.4 до 18.4R3-S2 MX240, Juniper Networks Inc. JunOS от 18.4 до 18.4R3-S2 MX480, Juniper Networks Inc. JunOS от 18.4 до 18.4R3-S2 MX960, Juniper Networks Inc. JunOS от 19.1 до 19.1R1-S5 ACX5800, Juniper Networks Inc. JunOS от 19.1 до 19.1R1-S5 EX9200 Series, Juniper Networks Inc. JunOS от 19.1 до 19.1R1-S5 MX10000 Series, Juniper Networks Inc. JunOS от 19.1 до 19.1R1-S5 MX240, Juniper Networks Inc. JunOS от 19.1 до 19.1R1-S5 MX480, Juniper Networks Inc. JunOS от 19.1 до 19.1R1-S5 MX960, Juniper Networks Inc. JunOS от 19.1 до 19.1R2-S1 ACX5800, Juniper Networks Inc. JunOS от 19.1 до 19.1R2-S1 EX9200 Series, Juniper Networks Inc. JunOS от 19.1 до 19.1R2-S1 MX10000 Series, Juniper Networks Inc. JunOS от 19.1 до 19.1R2-S1 MX240, Juniper Networks Inc. JunOS от 19.1 до 19.1R2-S1 MX480, Juniper Networks Inc. JunOS от 19.1 до 19.1R2-S1 MX960, Juniper Networks Inc. JunOS от 19.1 до 19.1R3 ACX5800, Juniper Networks Inc. JunOS от 19.1 до 19.1R3 EX9200 Series, Juniper Networks Inc. JunOS от 19.1 до 19.1R3 MX10000 Series, Juniper Networks Inc. JunOS от 19.1 до 19.1R3 MX240, Juniper Networks Inc. JunOS от 19.1 до 19.1R3 MX480, Juniper Networks Inc. JunOS от 19.1 до 19.1R3 MX960, Juniper Networks Inc. JunOS от 19.2 до 19.2R1-S4 ACX5800, Juniper Networks Inc. JunOS от 19.2 до 19.2R1-S4 EX9200 Series, Juniper Networks Inc. JunOS от 19.2 до 19.2R1-S4 MX10000 Series, Juniper Networks Inc. JunOS от 19.2 до 19.2R1-S4 MX240, Juniper Networks Inc. JunOS от 19.2 до 19.2R1-S4 MX480, Juniper Networks Inc. JunOS от 19.2 до 19.2R1-S4 MX960, Juniper Networks Inc. JunOS от 19.2 до 19.2R2 ACX5800, Juniper Networks Inc. JunOS от 19.2 до 19.2R2 EX9200 Series, Juniper Networks Inc. JunOS от 19.2 до 19.2R2 MX10000 Series, Juniper Networks Inc. JunOS от 19.2 до 19.2R2 MX240, Juniper Networks Inc. JunOS от 19.2 до 19.2R2 MX480, Juniper Networks Inc. JunOS от 19.2 до 19.2R2 MX960, Juniper Networks Inc. JunOS от 19.3 до 19.3R2-S3 ACX5800, Juniper Networks Inc. JunOS от 19.3 до 19.3R2-S3 EX9200 Series, Juniper Networks Inc. JunOS от 19.3 до 19.3R2-S3 MX10000 Series, Juniper Networks Inc. JunOS от 19.3 до 19.3R2-S3 MX240, Juniper Networks Inc. JunOS от 19.3 до 19.3R2-S3 MX480, Juniper Networks Inc. JunOS от 19.3 до 19.3R2-S3 MX960, Juniper Networks Inc. JunOS от 19.3 до 19.3R3 ACX5800, Juniper Networks Inc. JunOS от 19.3 до 19.3R3 EX9200 Series, Juniper Networks Inc. JunOS от 19.3 до 19.3R3 MX10000 Series, Juniper Networks Inc. JunOS от 19.3 до 19.3R3 MX240, Juniper Networks Inc. JunOS от 19.3 до 19.3R3 MX480, Juniper Networks Inc. JunOS от 19.3 до 19.3R3 MX960, Juniper Networks Inc. JunOS от 19.4 до 19.4R1-S1 ACX5800, Juniper Networks Inc. JunOS от 19.4 до 19.4R1-S1 EX9200 Series, Juniper Networks Inc. JunOS от 19.4 до 19.4R1-S1 MX10000 Series, Juniper Networks Inc. JunOS от 19.4 до 19.4R1-S1 MX240, Juniper Networks Inc. JunOS от 19.4 до 19.4R1-S1 MX480, Juniper Networks Inc. JunOS от 19.4 до 19.4R1-S1 MX960, Juniper Networks Inc. JunOS от 19.4 до 19.4R2 ACX5800, Juniper Networks Inc. JunOS от 19.4 до 19.4R2 EX9200 Series, Juniper Networks Inc. JunOS от 19.4 до 19.4R2 MX10000 Series, Juniper Networks Inc. JunOS от 19.4 до 19.4R2 MX240, Juniper Networks Inc. JunOS от 19.4 до 19.4R2 MX480, Juniper Networks Inc. JunOS от 19.4 до 19.4R2 MX960

Mitigations

Использование рекомендаций: https://kb.juniper.net/JSA11164

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
  "CVSS 3.0": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Juniper Networks Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u043e\u0442 17.2 \u0434\u043e 17.2R3-S4 (JunOS), \u043e\u0442 17.3 \u0434\u043e 17.3R3-S8 (JunOS), \u043e\u0442 17.4 \u0434\u043e 17.4R3-S2 (JunOS), \u043e\u0442 18.2 \u0434\u043e 18.2R2-S7 (JunOS), \u043e\u0442 18.2 \u0434\u043e 18.2R3-S3 (JunOS), \u043e\u0442 18.3 \u0434\u043e 18.3R3-S2 (JunOS), \u0434\u043e 16.1R7-S8 (JunOS), \u043e\u0442 17.1 \u0434\u043e 17.1R2-S12 (JunOS), \u043e\u0442 17.4 \u0434\u043e 17.4R2-S10 (JunOS), \u043e\u0442 18.1 \u0434\u043e 18.1R3-S10 (JunOS), \u043e\u0442 18.3 \u0434\u043e 18.3R1-S7 (JunOS), \u043e\u0442 18.4 \u0434\u043e 18.4R1-S7 (JunOS), \u043e\u0442 18.4 \u0434\u043e 18.4R2-S4 (JunOS), \u043e\u0442 18.4 \u0434\u043e 18.4R3-S2 (JunOS), \u043e\u0442 19.1 \u0434\u043e 19.1R1-S5 (JunOS), \u043e\u0442 19.1 \u0434\u043e 19.1R2-S1 (JunOS), \u043e\u0442 19.1 \u0434\u043e 19.1R3 (JunOS), \u043e\u0442 19.2 \u0434\u043e 19.2R1-S4 (JunOS), \u043e\u0442 19.2 \u0434\u043e 19.2R2 (JunOS), \u043e\u0442 19.3 \u0434\u043e 19.3R2-S3 (JunOS), \u043e\u0442 19.3 \u0434\u043e 19.3R3 (JunOS), \u043e\u0442 19.4 \u0434\u043e 19.4R1-S1 (JunOS), \u043e\u0442 19.4 \u0434\u043e 19.4R2 (JunOS)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://kb.juniper.net/JSA11164",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "14.04.2021",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "23.06.2021",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "23.06.2021",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2021-03226",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2021-0273",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "JunOS",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Juniper Networks Inc. JunOS \u043e\u0442 17.2 \u0434\u043e 17.2R3-S4 EX9200 Series, Juniper Networks Inc. JunOS \u043e\u0442 17.3 \u0434\u043e 17.3R3-S8 EX9200 Series, Juniper Networks Inc. JunOS \u043e\u0442 17.4 \u0434\u043e 17.4R3-S2 EX9200 Series, Juniper Networks Inc. JunOS \u043e\u0442 18.2 \u0434\u043e 18.2R2-S7 EX9200 Series, Juniper Networks Inc. JunOS \u043e\u0442 18.2 \u0434\u043e 18.2R3-S3 EX9200 Series, Juniper Networks Inc. JunOS \u043e\u0442 18.3 \u0434\u043e 18.3R3-S2 EX9200 Series, Juniper Networks Inc. JunOS \u0434\u043e 16.1R7-S8 ACX5800, Juniper Networks Inc. JunOS \u0434\u043e 16.1R7-S8 EX9200 Series, Juniper Networks Inc. JunOS \u0434\u043e 16.1R7-S8 MX10000 Series, Juniper Networks Inc. JunOS \u0434\u043e 16.1R7-S8 MX240, Juniper Networks Inc. JunOS \u0434\u043e 16.1R7-S8 MX480, Juniper Networks Inc. JunOS \u0434\u043e 16.1R7-S8 MX960, Juniper Networks Inc. JunOS \u043e\u0442 17.1 \u0434\u043e 17.1R2-S12 ACX5800, Juniper Networks Inc. JunOS \u043e\u0442 17.1 \u0434\u043e 17.1R2-S12 EX9200 Series, Juniper Networks Inc. JunOS \u043e\u0442 17.1 \u0434\u043e 17.1R2-S12 MX10000 Series, Juniper Networks Inc. JunOS \u043e\u0442 17.1 \u0434\u043e 17.1R2-S12 MX240, Juniper Networks Inc. JunOS \u043e\u0442 17.1 \u0434\u043e 17.1R2-S12 MX480, Juniper Networks Inc. JunOS \u043e\u0442 17.1 \u0434\u043e 17.1R2-S12 MX960, Juniper Networks Inc. JunOS \u043e\u0442 17.2 \u0434\u043e 17.2R3-S4 ACX5800, Juniper Networks Inc. JunOS \u043e\u0442 17.2 \u0434\u043e 17.2R3-S4 MX10000 Series, Juniper Networks Inc. JunOS \u043e\u0442 17.2 \u0434\u043e 17.2R3-S4 MX240, Juniper Networks Inc. JunOS \u043e\u0442 17.2 \u0434\u043e 17.2R3-S4 MX480, Juniper Networks Inc. JunOS \u043e\u0442 17.2 \u0434\u043e 17.2R3-S4 MX960, Juniper Networks Inc. JunOS \u043e\u0442 17.3 \u0434\u043e 17.3R3-S8 ACX5800, Juniper Networks Inc. JunOS \u043e\u0442 17.3 \u0434\u043e 17.3R3-S8 MX10000 Series, Juniper Networks Inc. JunOS \u043e\u0442 17.3 \u0434\u043e 17.3R3-S8 MX240, Juniper Networks Inc. JunOS \u043e\u0442 17.3 \u0434\u043e 17.3R3-S8 MX480, Juniper Networks Inc. JunOS \u043e\u0442 17.3 \u0434\u043e 17.3R3-S8 MX960, Juniper Networks Inc. JunOS \u043e\u0442 17.4 \u0434\u043e 17.4R2-S10 ACX5800, Juniper Networks Inc. JunOS \u043e\u0442 17.4 \u0434\u043e 17.4R2-S10 EX9200 Series, Juniper Networks Inc. JunOS \u043e\u0442 17.4 \u0434\u043e 17.4R2-S10 MX10000 Series, Juniper Networks Inc. JunOS \u043e\u0442 17.4 \u0434\u043e 17.4R2-S10 MX240, Juniper Networks Inc. JunOS \u043e\u0442 17.4 \u0434\u043e 17.4R2-S10 MX480, Juniper Networks Inc. JunOS \u043e\u0442 17.4 \u0434\u043e 17.4R2-S10 MX960, Juniper Networks Inc. JunOS \u043e\u0442 17.4 \u0434\u043e 17.4R3-S2 ACX5800, Juniper Networks Inc. JunOS \u043e\u0442 17.4 \u0434\u043e 17.4R3-S2 MX10000 Series, Juniper Networks Inc. JunOS \u043e\u0442 17.4 \u0434\u043e 17.4R3-S2 MX240, Juniper Networks Inc. JunOS \u043e\u0442 17.4 \u0434\u043e 17.4R3-S2 MX480, Juniper Networks Inc. JunOS \u043e\u0442 17.4 \u0434\u043e 17.4R3-S2 MX960, Juniper Networks Inc. JunOS \u043e\u0442 18.1 \u0434\u043e 18.1R3-S10 ACX5800, Juniper Networks Inc. JunOS \u043e\u0442 18.1 \u0434\u043e 18.1R3-S10 EX9200 Series, Juniper Networks Inc. JunOS \u043e\u0442 18.1 \u0434\u043e 18.1R3-S10 MX10000 Series, Juniper Networks Inc. JunOS \u043e\u0442 18.1 \u0434\u043e 18.1R3-S10 MX240, Juniper Networks Inc. JunOS \u043e\u0442 18.1 \u0434\u043e 18.1R3-S10 MX480, Juniper Networks Inc. JunOS \u043e\u0442 18.1 \u0434\u043e 18.1R3-S10 MX960, Juniper Networks Inc. JunOS \u043e\u0442 18.2 \u0434\u043e 18.2R2-S7 ACX5800, Juniper Networks Inc. JunOS \u043e\u0442 18.2 \u0434\u043e 18.2R2-S7 MX10000 Series, Juniper Networks Inc. JunOS \u043e\u0442 18.2 \u0434\u043e 18.2R2-S7 MX240, Juniper Networks Inc. JunOS \u043e\u0442 18.2 \u0434\u043e 18.2R2-S7 MX480, Juniper Networks Inc. JunOS \u043e\u0442 18.2 \u0434\u043e 18.2R2-S7 MX960, Juniper Networks Inc. JunOS \u043e\u0442 18.2 \u0434\u043e 18.2R3-S3 ACX5800, Juniper Networks Inc. JunOS \u043e\u0442 18.2 \u0434\u043e 18.2R3-S3 MX10000 Series, Juniper Networks Inc. JunOS \u043e\u0442 18.2 \u0434\u043e 18.2R3-S3 MX240, Juniper Networks Inc. JunOS \u043e\u0442 18.2 \u0434\u043e 18.2R3-S3 MX480, Juniper Networks Inc. JunOS \u043e\u0442 18.2 \u0434\u043e 18.2R3-S3 MX960, Juniper Networks Inc. JunOS \u043e\u0442 18.3 \u0434\u043e 18.3R1-S7 ACX5800, Juniper Networks Inc. JunOS \u043e\u0442 18.3 \u0434\u043e 18.3R1-S7 EX9200 Series, Juniper Networks Inc. JunOS \u043e\u0442 18.3 \u0434\u043e 18.3R1-S7 MX10000 Series, Juniper Networks Inc. JunOS \u043e\u0442 18.3 \u0434\u043e 18.3R1-S7 MX240, Juniper Networks Inc. JunOS \u043e\u0442 18.3 \u0434\u043e 18.3R1-S7 MX480, Juniper Networks Inc. JunOS \u043e\u0442 18.3 \u0434\u043e 18.3R1-S7 MX960, Juniper Networks Inc. JunOS \u043e\u0442 18.3 \u0434\u043e 18.3R3-S2 ACX5800, Juniper Networks Inc. JunOS \u043e\u0442 18.3 \u0434\u043e 18.3R3-S2 MX10000 Series, Juniper Networks Inc. JunOS \u043e\u0442 18.3 \u0434\u043e 18.3R3-S2 MX240, Juniper Networks Inc. JunOS \u043e\u0442 18.3 \u0434\u043e 18.3R3-S2 MX480, Juniper Networks Inc. JunOS \u043e\u0442 18.3 \u0434\u043e 18.3R3-S2 MX960, Juniper Networks Inc. JunOS \u043e\u0442 18.4 \u0434\u043e 18.4R1-S7 ACX5800, Juniper Networks Inc. JunOS \u043e\u0442 18.4 \u0434\u043e 18.4R1-S7 EX9200 Series, Juniper Networks Inc. JunOS \u043e\u0442 18.4 \u0434\u043e 18.4R1-S7 MX10000 Series, Juniper Networks Inc. JunOS \u043e\u0442 18.4 \u0434\u043e 18.4R1-S7 MX240, Juniper Networks Inc. JunOS \u043e\u0442 18.4 \u0434\u043e 18.4R1-S7 MX480, Juniper Networks Inc. JunOS \u043e\u0442 18.4 \u0434\u043e 18.4R1-S7 MX960, Juniper Networks Inc. JunOS \u043e\u0442 18.4 \u0434\u043e 18.4R2-S4 ACX5800, Juniper Networks Inc. JunOS \u043e\u0442 18.4 \u0434\u043e 18.4R2-S4 EX9200 Series, Juniper Networks Inc. JunOS \u043e\u0442 18.4 \u0434\u043e 18.4R2-S4 MX10000 Series, Juniper Networks Inc. JunOS \u043e\u0442 18.4 \u0434\u043e 18.4R2-S4 MX240, Juniper Networks Inc. JunOS \u043e\u0442 18.4 \u0434\u043e 18.4R2-S4 MX480, Juniper Networks Inc. JunOS \u043e\u0442 18.4 \u0434\u043e 18.4R2-S4 MX960, Juniper Networks Inc. JunOS \u043e\u0442 18.4 \u0434\u043e 18.4R3-S2 ACX5800, Juniper Networks Inc. JunOS \u043e\u0442 18.4 \u0434\u043e 18.4R3-S2 EX9200 Series, Juniper Networks Inc. JunOS \u043e\u0442 18.4 \u0434\u043e 18.4R3-S2 MX10000 Series, Juniper Networks Inc. JunOS \u043e\u0442 18.4 \u0434\u043e 18.4R3-S2 MX240, Juniper Networks Inc. JunOS \u043e\u0442 18.4 \u0434\u043e 18.4R3-S2 MX480, Juniper Networks Inc. JunOS \u043e\u0442 18.4 \u0434\u043e 18.4R3-S2 MX960, Juniper Networks Inc. JunOS \u043e\u0442 19.1 \u0434\u043e 19.1R1-S5 ACX5800, Juniper Networks Inc. JunOS \u043e\u0442 19.1 \u0434\u043e 19.1R1-S5 EX9200 Series, Juniper Networks Inc. JunOS \u043e\u0442 19.1 \u0434\u043e 19.1R1-S5 MX10000 Series, Juniper Networks Inc. JunOS \u043e\u0442 19.1 \u0434\u043e 19.1R1-S5 MX240, Juniper Networks Inc. JunOS \u043e\u0442 19.1 \u0434\u043e 19.1R1-S5 MX480, Juniper Networks Inc. JunOS \u043e\u0442 19.1 \u0434\u043e 19.1R1-S5 MX960, Juniper Networks Inc. JunOS \u043e\u0442 19.1 \u0434\u043e 19.1R2-S1 ACX5800, Juniper Networks Inc. JunOS \u043e\u0442 19.1 \u0434\u043e 19.1R2-S1 EX9200 Series, Juniper Networks Inc. JunOS \u043e\u0442 19.1 \u0434\u043e 19.1R2-S1 MX10000 Series, Juniper Networks Inc. JunOS \u043e\u0442 19.1 \u0434\u043e 19.1R2-S1 MX240, Juniper Networks Inc. JunOS \u043e\u0442 19.1 \u0434\u043e 19.1R2-S1 MX480, Juniper Networks Inc. JunOS \u043e\u0442 19.1 \u0434\u043e 19.1R2-S1 MX960, Juniper Networks Inc. JunOS \u043e\u0442 19.1 \u0434\u043e 19.1R3 ACX5800, Juniper Networks Inc. JunOS \u043e\u0442 19.1 \u0434\u043e 19.1R3 EX9200 Series, Juniper Networks Inc. JunOS \u043e\u0442 19.1 \u0434\u043e 19.1R3 MX10000 Series, Juniper Networks Inc. JunOS \u043e\u0442 19.1 \u0434\u043e 19.1R3 MX240, Juniper Networks Inc. JunOS \u043e\u0442 19.1 \u0434\u043e 19.1R3 MX480, Juniper Networks Inc. JunOS \u043e\u0442 19.1 \u0434\u043e 19.1R3 MX960, Juniper Networks Inc. JunOS \u043e\u0442 19.2 \u0434\u043e 19.2R1-S4 ACX5800, Juniper Networks Inc. JunOS \u043e\u0442 19.2 \u0434\u043e 19.2R1-S4 EX9200 Series, Juniper Networks Inc. JunOS \u043e\u0442 19.2 \u0434\u043e 19.2R1-S4 MX10000 Series, Juniper Networks Inc. JunOS \u043e\u0442 19.2 \u0434\u043e 19.2R1-S4 MX240, Juniper Networks Inc. JunOS \u043e\u0442 19.2 \u0434\u043e 19.2R1-S4 MX480, Juniper Networks Inc. JunOS \u043e\u0442 19.2 \u0434\u043e 19.2R1-S4 MX960, Juniper Networks Inc. JunOS \u043e\u0442 19.2 \u0434\u043e 19.2R2 ACX5800, Juniper Networks Inc. JunOS \u043e\u0442 19.2 \u0434\u043e 19.2R2 EX9200 Series, Juniper Networks Inc. JunOS \u043e\u0442 19.2 \u0434\u043e 19.2R2 MX10000 Series, Juniper Networks Inc. JunOS \u043e\u0442 19.2 \u0434\u043e 19.2R2 MX240, Juniper Networks Inc. JunOS \u043e\u0442 19.2 \u0434\u043e 19.2R2 MX480, Juniper Networks Inc. JunOS \u043e\u0442 19.2 \u0434\u043e 19.2R2 MX960, Juniper Networks Inc. JunOS \u043e\u0442 19.3 \u0434\u043e 19.3R2-S3 ACX5800, Juniper Networks Inc. JunOS \u043e\u0442 19.3 \u0434\u043e 19.3R2-S3 EX9200 Series, Juniper Networks Inc. JunOS \u043e\u0442 19.3 \u0434\u043e 19.3R2-S3 MX10000 Series, Juniper Networks Inc. JunOS \u043e\u0442 19.3 \u0434\u043e 19.3R2-S3 MX240, Juniper Networks Inc. JunOS \u043e\u0442 19.3 \u0434\u043e 19.3R2-S3 MX480, Juniper Networks Inc. JunOS \u043e\u0442 19.3 \u0434\u043e 19.3R2-S3 MX960, Juniper Networks Inc. JunOS \u043e\u0442 19.3 \u0434\u043e 19.3R3 ACX5800, Juniper Networks Inc. JunOS \u043e\u0442 19.3 \u0434\u043e 19.3R3 EX9200 Series, Juniper Networks Inc. JunOS \u043e\u0442 19.3 \u0434\u043e 19.3R3 MX10000 Series, Juniper Networks Inc. JunOS \u043e\u0442 19.3 \u0434\u043e 19.3R3 MX240, Juniper Networks Inc. JunOS \u043e\u0442 19.3 \u0434\u043e 19.3R3 MX480, Juniper Networks Inc. JunOS \u043e\u0442 19.3 \u0434\u043e 19.3R3 MX960, Juniper Networks Inc. JunOS \u043e\u0442 19.4 \u0434\u043e 19.4R1-S1 ACX5800, Juniper Networks Inc. JunOS \u043e\u0442 19.4 \u0434\u043e 19.4R1-S1 EX9200 Series, Juniper Networks Inc. JunOS \u043e\u0442 19.4 \u0434\u043e 19.4R1-S1 MX10000 Series, Juniper Networks Inc. JunOS \u043e\u0442 19.4 \u0434\u043e 19.4R1-S1 MX240, Juniper Networks Inc. JunOS \u043e\u0442 19.4 \u0434\u043e 19.4R1-S1 MX480, Juniper Networks Inc. JunOS \u043e\u0442 19.4 \u0434\u043e 19.4R1-S1 MX960, Juniper Networks Inc. JunOS \u043e\u0442 19.4 \u0434\u043e 19.4R2 ACX5800, Juniper Networks Inc. JunOS \u043e\u0442 19.4 \u0434\u043e 19.4R2 EX9200 Series, Juniper Networks Inc. JunOS \u043e\u0442 19.4 \u0434\u043e 19.4R2 MX10000 Series, Juniper Networks Inc. JunOS \u043e\u0442 19.4 \u0434\u043e 19.4R2 MX240, Juniper Networks Inc. JunOS \u043e\u0442 19.4 \u0434\u043e 19.4R2 MX480, Juniper Networks Inc. JunOS \u043e\u0442 19.4 \u0434\u043e 19.4R2 MX960",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 lt-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Junos OS \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 \u0441\u0435\u0440\u0438\u0438 ACX5800, EX9200, MX10000, MX240, MX480 \u0438 MX960, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0420\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u043f\u043e\u0442\u043e\u043a\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (CWE-670), \u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0446\u0438\u043a\u043b\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0443\u0441\u043b\u043e\u0432\u0438\u0435\u043c \u0432\u044b\u0445\u043e\u0434\u0430 (\u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0439 \u0446\u0438\u043a\u043b) (CWE-835)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 lt-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Junos OS \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 \u0441\u0435\u0440\u0438\u0438 ACX5800, EX9200, MX10000, MX240, MX480 \u0438 MX960 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0446\u0438\u043a\u043b\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0443\u0441\u043b\u043e\u0432\u0438\u0435\u043c \u0432\u044b\u0445\u043e\u0434\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0418\u0441\u0447\u0435\u0440\u043f\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://kb.juniper.net/JSA11164\t\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-0273",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-670, CWE-835",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,3)"
}

CVE-2021-0273 (GCVE-0-2021-0273)

Vulnerability from cvelistv5 – Published: 2021-04-22 19:37 – Updated: 2024-09-17 00:26

Title

Junos OS and Junos OS Evolved: Trio Chipset: Denial of Service due to packet destined to device's interfaces.

Summary

An always-incorrect control flow implementation in the implicit filter terms of Juniper Networks Junos OS and Junos OS Evolved on ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960 devices with affected Trio line cards allows an attacker to exploit an interdependency in the PFE UCODE microcode of the Trio chipset with various line cards to cause packets destined to the devices interfaces to cause a Denial of Service (DoS) condition by looping the packet with an unreachable exit condition ('Infinite Loop'). To break this loop once it begins one side of the affected LT interfaces will need to be disabled. Once disabled, the condition will clear and the disabled LT interface can be reenabled. Continued receipt and processing of these packets will create a sustained Denial of Service (DoS) condition. This issue only affects LT-LT interfaces. Any other interfaces are not affected by this issue. This issue affects the following cards: MPCE Type 3 3D MPC4E 3D 32XGE MPC4E 3D 2CGE+8XGE EX9200 32x10G SFP EX9200-2C-8XS FPC Type 5-3D FPC Type 5-LSR EX9200 4x40G QSFP An Indicator of Compromise (IoC) can be seen by examining the traffic of the LT-LT interfaces for excessive traffic using the following command: monitor interface traffic Before loop impact: Interface: lt-2/0/0, Enabled, Link is Up Encapsulation: Logical-tunnel, Speed: 100000mbps Traffic statistics: Current delta Input bytes: 3759900268942 (1456 bps) [0] <---------- LT interface utilization is low Output bytes: 3759900344309 (1456 bps) [0] <---------- LT interface utilization is low After loop impact: Interface: lt-2/0/0, Enabled, Link is Up Encapsulation: Logical-tunnel, Speed: 100000mbps Traffic statistics: Current delta Input bytes: 3765160313129 (2158268368 bps) [5260044187] <---------- LT interface utilization is very high Output bytes: 3765160399522 (2158266440 bps) [5260055213] <---------- LT interface utilization is very high This issue affects: Juniper Networks Junos OS on ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960. Versions 15.1F6, 16.1R1, and later versions prior to 16.1R7-S8; 17.1 versions prior to 17.1R2-S12; 17.2 versions prior to 17.2R3-S4; 17.3 versions prior to 17.3R3-S8; 17.4 versions prior to 17.4R2-S10, 17.4R3-S2; 18.1 versions prior to 18.1R3-S10; 18.2 versions prior to 18.2R2-S7, 18.2R3-S3; 18.3 versions prior to 18.3R1-S7, 18.3R3-S2; 18.4 versions prior to 18.4R1-S7, 18.4R2-S4, 18.4R3-S2; 19.1 versions prior to 19.1R1-S5, 19.1R2-S1, 19.1R3; 19.2 versions prior to 19.2R1-S4, 19.2R2; 19.3 versions prior to 19.3R2-S3, 19.3R3; 19.4 versions prior to 19.4R1-S1, 19.4R2. This issue does not affect the MX10001. This issue does not affect Juniper Networks Junos OS versions prior to 15.1F6, 16.1R1. Juniper Networks Junos OS Evolved on ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960 19.4 versions prior to 19.4R2-EVO. This issue does not affect the MX10001.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
CWE-670 - Always-Incorrect Control Flow Implementation
Denial of Service (DoS)

Assigner

juniper mitre root

References

1 reference

URL	Tags
https://kb.juniper.net/JSA11164	x_refsource_MISC

Impacted products

2 products

Vendor	Product	Version
Juniper Networks	Junos OS	Unaffected: unspecified , < 15.1F6, 16.1R1 (custom) Affected: 15.1F6 , < 15.1* (custom) Affected: 16.1R1 , < 16.1* (custom) Affected: 17.1 , < 17.1R2-S12 (custom) Affected: 17.2 , < 17.2R3-S4 (custom) Affected: 17.3 , < 17.3R3-S8 (custom) Affected: 17.4 , < 17.4R2-S10, 17.4R3-S2 (custom) Affected: 18.1 , < 18.1R3-S10 (custom) Affected: 18.2 , < 18.2R2-S7, 18.2R3-S3 (custom) Affected: 18.3 , < 18.3R1-S7, 18.3R3-S2 (custom) Affected: 18.4 , < 18.4R1-S7, 18.4R2-S4, 18.4R3-S2 (custom) Affected: 19.1 , < 19.1R1-S5, 19.1R2-S1, 19.1R3 (custom) Affected: 19.2 , < 19.2R1-S4, 19.2R2 (custom) Affected: 19.3 , < 19.3R2-S3, 19.3R3 (custom) Affected: 19.4 , < 19.4R1-S1, 19.4R2 (custom)
Juniper Networks	Junos OS Evolved	Affected: 19.4 , < 19.4R2-EVO (custom)

Date Public

2021-04-14 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T15:32:10.507Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://kb.juniper.net/JSA11164"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960"
          ],
          "product": "Junos OS",
          "vendor": "Juniper Networks",
          "versions": [
            {
              "lessThan": "15.1F6, 16.1R1",
              "status": "unaffected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "15.1*",
              "status": "affected",
              "version": "15.1F6",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "16.1R7-S8",
                  "status": "unaffected"
                }
              ],
              "lessThan": "16.1*",
              "status": "affected",
              "version": "16.1R1",
              "versionType": "custom"
            },
            {
              "lessThan": "17.1R2-S12",
              "status": "affected",
              "version": "17.1",
              "versionType": "custom"
            },
            {
              "lessThan": "17.2R3-S4",
              "status": "affected",
              "version": "17.2",
              "versionType": "custom"
            },
            {
              "lessThan": "17.3R3-S8",
              "status": "affected",
              "version": "17.3",
              "versionType": "custom"
            },
            {
              "lessThan": "17.4R2-S10, 17.4R3-S2",
              "status": "affected",
              "version": "17.4",
              "versionType": "custom"
            },
            {
              "lessThan": "18.1R3-S10",
              "status": "affected",
              "version": "18.1",
              "versionType": "custom"
            },
            {
              "lessThan": "18.2R2-S7, 18.2R3-S3",
              "status": "affected",
              "version": "18.2",
              "versionType": "custom"
            },
            {
              "lessThan": "18.3R1-S7, 18.3R3-S2",
              "status": "affected",
              "version": "18.3",
              "versionType": "custom"
            },
            {
              "lessThan": "18.4R1-S7, 18.4R2-S4, 18.4R3-S2",
              "status": "affected",
              "version": "18.4",
              "versionType": "custom"
            },
            {
              "lessThan": "19.1R1-S5, 19.1R2-S1, 19.1R3",
              "status": "affected",
              "version": "19.1",
              "versionType": "custom"
            },
            {
              "lessThan": "19.2R1-S4, 19.2R2",
              "status": "affected",
              "version": "19.2",
              "versionType": "custom"
            },
            {
              "lessThan": "19.3R2-S3, 19.3R3",
              "status": "affected",
              "version": "19.3",
              "versionType": "custom"
            },
            {
              "lessThan": "19.4R1-S1, 19.4R2",
              "status": "affected",
              "version": "19.4",
              "versionType": "custom"
            }
          ]
        },
        {
          "platforms": [
            "ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960"
          ],
          "product": "Junos OS Evolved",
          "vendor": "Juniper Networks",
          "versions": [
            {
              "lessThan": "19.4R2-EVO",
              "status": "affected",
              "version": "19.4",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "value": "An example of an affected configuration is one where a Trio chipset line card is in use with a logical-tunnel interface set up to communicate to a second logical tunnel (LT-to-LT) interface."
        }
      ],
      "datePublic": "2021-04-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An always-incorrect control flow implementation in the implicit filter terms of Juniper Networks Junos OS and Junos OS Evolved on ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960 devices with affected Trio line cards allows an attacker to exploit an interdependency in the PFE UCODE microcode of the Trio chipset with various line cards to cause packets destined to the devices interfaces to cause a Denial of Service (DoS) condition by looping the packet with an unreachable exit condition (\u0027Infinite Loop\u0027). To break this loop once it begins one side of the affected LT interfaces will need to be disabled. Once disabled, the condition will clear and the disabled LT interface can be reenabled. Continued receipt and processing of these packets will create a sustained Denial of Service (DoS) condition. This issue only affects LT-LT interfaces. Any other interfaces are not affected by this issue. This issue affects the following cards: MPCE Type 3 3D MPC4E 3D 32XGE MPC4E 3D 2CGE+8XGE EX9200 32x10G SFP EX9200-2C-8XS FPC Type 5-3D FPC Type 5-LSR EX9200 4x40G QSFP An Indicator of Compromise (IoC) can be seen by examining the traffic of the LT-LT interfaces for excessive traffic using the following command: monitor interface traffic Before loop impact: Interface: lt-2/0/0, Enabled, Link is Up Encapsulation: Logical-tunnel, Speed: 100000mbps Traffic statistics: Current delta Input bytes: 3759900268942 (1456 bps) [0] \u003c---------- LT interface utilization is low Output bytes: 3759900344309 (1456 bps) [0] \u003c---------- LT interface utilization is low After loop impact: Interface: lt-2/0/0, Enabled, Link is Up Encapsulation: Logical-tunnel, Speed: 100000mbps Traffic statistics: Current delta Input bytes: 3765160313129 (2158268368 bps) [5260044187] \u003c---------- LT interface utilization is very high Output bytes: 3765160399522 (2158266440 bps) [5260055213] \u003c---------- LT interface utilization is very high This issue affects: Juniper Networks Junos OS on ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960. Versions 15.1F6, 16.1R1, and later versions prior to 16.1R7-S8; 17.1 versions prior to 17.1R2-S12; 17.2 versions prior to 17.2R3-S4; 17.3 versions prior to 17.3R3-S8; 17.4 versions prior to 17.4R2-S10, 17.4R3-S2; 18.1 versions prior to 18.1R3-S10; 18.2 versions prior to 18.2R2-S7, 18.2R3-S3; 18.3 versions prior to 18.3R1-S7, 18.3R3-S2; 18.4 versions prior to 18.4R1-S7, 18.4R2-S4, 18.4R3-S2; 19.1 versions prior to 19.1R1-S5, 19.1R2-S1, 19.1R3; 19.2 versions prior to 19.2R1-S4, 19.2R2; 19.3 versions prior to 19.3R2-S3, 19.3R3; 19.4 versions prior to 19.4R1-S1, 19.4R2. This issue does not affect the MX10001. This issue does not affect Juniper Networks Junos OS versions prior to 15.1F6, 16.1R1. Juniper Networks Junos OS Evolved on ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960 19.4 versions prior to 19.4R2-EVO. This issue does not affect the MX10001."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-835",
              "description": "CWE-835: Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-670",
              "description": "CWE-670: Always-Incorrect Control Flow Implementation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "description": "Denial of Service (DoS)",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-04-22T19:37:28.000Z",
        "orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
        "shortName": "juniper"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://kb.juniper.net/JSA11164"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "The following software releases have been updated to resolve this specific issue:\n\nJunos OS: 16.1R7-S8, 17.1R2-S12, 17.2R3-S4, 17.3R3-S8, 17.4R2-S10, 17.4R3-S2, 18.1R3-S10, 18.2R2-S7, 18.2R3-S3, 18.3R1-S7, 18.3R3-S2, 18.4R1-S7, 18.4R2-S4, 18.4R3-S2, 19.1R1-S5, 19.1R2-S1, 19.1R3, 19.2R1-S4, 19.2R2, 19.3R2-S3, 19.3R3, 19.4R1-S1, 19.4R2, 20.1R1, and all subsequent releases.\n\nJunos OS Evolved: 19.4R2-EVO, 20.1R1-EVO, and all subsequent releases."
        }
      ],
      "source": {
        "advisory": "JSA11164",
        "defect": [
          "1478759"
        ],
        "discovery": "USER"
      },
      "title": "Junos OS and Junos OS Evolved: Trio Chipset: Denial of Service due to packet destined to device\u0027s interfaces.",
      "workarounds": [
        {
          "lang": "en",
          "value": "There are no available workarounds for this issue."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "sirt@juniper.net",
          "DATE_PUBLIC": "2021-04-14T16:00:00.000Z",
          "ID": "CVE-2021-0273",
          "STATE": "PUBLIC",
          "TITLE": "Junos OS and Junos OS Evolved: Trio Chipset: Denial of Service due to packet destined to device\u0027s interfaces."
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Junos OS",
                      "version": {
                        "version_data": [
                          {
                            "platform": "ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960",
                            "version_affected": "\u003e=",
                            "version_name": "15.1",
                            "version_value": "15.1F6"
                          },
                          {
                            "platform": "ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960",
                            "version_affected": "\u003e=",
                            "version_name": "16.1",
                            "version_value": "16.1R1"
                          },
                          {
                            "platform": "ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960",
                            "version_affected": "\u003c",
                            "version_name": "16.1",
                            "version_value": "16.1R7-S8"
                          },
                          {
                            "platform": "ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960",
                            "version_affected": "\u003c",
                            "version_name": "17.1",
                            "version_value": "17.1R2-S12"
                          },
                          {
                            "platform": "ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960",
                            "version_affected": "\u003c",
                            "version_name": "17.2",
                            "version_value": "17.2R3-S4"
                          },
                          {
                            "platform": "ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960",
                            "version_affected": "\u003c",
                            "version_name": "17.3",
                            "version_value": "17.3R3-S8"
                          },
                          {
                            "platform": "ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960",
                            "version_affected": "\u003c",
                            "version_name": "17.4",
                            "version_value": "17.4R2-S10, 17.4R3-S2"
                          },
                          {
                            "platform": "ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960",
                            "version_affected": "\u003c",
                            "version_name": "18.1",
                            "version_value": "18.1R3-S10"
                          },
                          {
                            "platform": "ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960",
                            "version_affected": "\u003c",
                            "version_name": "18.2",
                            "version_value": "18.2R2-S7, 18.2R3-S3"
                          },
                          {
                            "platform": "ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960",
                            "version_affected": "\u003c",
                            "version_name": "18.3",
                            "version_value": "18.3R1-S7, 18.3R3-S2"
                          },
                          {
                            "platform": "ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960",
                            "version_affected": "\u003c",
                            "version_name": "18.4",
                            "version_value": "18.4R1-S7, 18.4R2-S4, 18.4R3-S2"
                          },
                          {
                            "platform": "ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960",
                            "version_affected": "\u003c",
                            "version_name": "19.1",
                            "version_value": "19.1R1-S5, 19.1R2-S1, 19.1R3"
                          },
                          {
                            "platform": "ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960",
                            "version_affected": "\u003c",
                            "version_name": "19.2",
                            "version_value": "19.2R1-S4, 19.2R2"
                          },
                          {
                            "platform": "ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960",
                            "version_affected": "\u003c",
                            "version_name": "19.3",
                            "version_value": "19.3R2-S3, 19.3R3"
                          },
                          {
                            "platform": "ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960",
                            "version_affected": "\u003c",
                            "version_name": "19.4",
                            "version_value": "19.4R1-S1, 19.4R2"
                          },
                          {
                            "platform": "ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960",
                            "version_affected": "!\u003c",
                            "version_value": "15.1F6, 16.1R1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Junos OS Evolved",
                      "version": {
                        "version_data": [
                          {
                            "platform": "ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960",
                            "version_affected": "\u003c",
                            "version_name": "19.4",
                            "version_value": "19.4R2-EVO"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Juniper Networks"
              }
            ]
          }
        },
        "configuration": [
          {
            "lang": "en",
            "value": "An example of an affected configuration is one where a Trio chipset line card is in use with a logical-tunnel interface set up to communicate to a second logical tunnel (LT-to-LT) interface."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An always-incorrect control flow implementation in the implicit filter terms of Juniper Networks Junos OS and Junos OS Evolved on ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960 devices with affected Trio line cards allows an attacker to exploit an interdependency in the PFE UCODE microcode of the Trio chipset with various line cards to cause packets destined to the devices interfaces to cause a Denial of Service (DoS) condition by looping the packet with an unreachable exit condition (\u0027Infinite Loop\u0027). To break this loop once it begins one side of the affected LT interfaces will need to be disabled. Once disabled, the condition will clear and the disabled LT interface can be reenabled. Continued receipt and processing of these packets will create a sustained Denial of Service (DoS) condition. This issue only affects LT-LT interfaces. Any other interfaces are not affected by this issue. This issue affects the following cards: MPCE Type 3 3D MPC4E 3D 32XGE MPC4E 3D 2CGE+8XGE EX9200 32x10G SFP EX9200-2C-8XS FPC Type 5-3D FPC Type 5-LSR EX9200 4x40G QSFP An Indicator of Compromise (IoC) can be seen by examining the traffic of the LT-LT interfaces for excessive traffic using the following command: monitor interface traffic Before loop impact: Interface: lt-2/0/0, Enabled, Link is Up Encapsulation: Logical-tunnel, Speed: 100000mbps Traffic statistics: Current delta Input bytes: 3759900268942 (1456 bps) [0] \u003c---------- LT interface utilization is low Output bytes: 3759900344309 (1456 bps) [0] \u003c---------- LT interface utilization is low After loop impact: Interface: lt-2/0/0, Enabled, Link is Up Encapsulation: Logical-tunnel, Speed: 100000mbps Traffic statistics: Current delta Input bytes: 3765160313129 (2158268368 bps) [5260044187] \u003c---------- LT interface utilization is very high Output bytes: 3765160399522 (2158266440 bps) [5260055213] \u003c---------- LT interface utilization is very high This issue affects: Juniper Networks Junos OS on ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960. Versions 15.1F6, 16.1R1, and later versions prior to 16.1R7-S8; 17.1 versions prior to 17.1R2-S12; 17.2 versions prior to 17.2R3-S4; 17.3 versions prior to 17.3R3-S8; 17.4 versions prior to 17.4R2-S10, 17.4R3-S2; 18.1 versions prior to 18.1R3-S10; 18.2 versions prior to 18.2R2-S7, 18.2R3-S3; 18.3 versions prior to 18.3R1-S7, 18.3R3-S2; 18.4 versions prior to 18.4R1-S7, 18.4R2-S4, 18.4R3-S2; 19.1 versions prior to 19.1R1-S5, 19.1R2-S1, 19.1R3; 19.2 versions prior to 19.2R1-S4, 19.2R2; 19.3 versions prior to 19.3R2-S3, 19.3R3; 19.4 versions prior to 19.4R1-S1, 19.4R2. This issue does not affect the MX10001. This issue does not affect Juniper Networks Junos OS versions prior to 15.1F6, 16.1R1. Juniper Networks Junos OS Evolved on ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960 19.4 versions prior to 19.4R2-EVO. This issue does not affect the MX10001."
            }
          ]
        },
        "exploit": [
          {
            "lang": "en",
            "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
          }
        ],
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-835: Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
                }
              ]
            },
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-670: Always-Incorrect Control Flow Implementation"
                }
              ]
            },
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Denial of Service (DoS)"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://kb.juniper.net/JSA11164",
              "refsource": "MISC",
              "url": "https://kb.juniper.net/JSA11164"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "The following software releases have been updated to resolve this specific issue:\n\nJunos OS: 16.1R7-S8, 17.1R2-S12, 17.2R3-S4, 17.3R3-S8, 17.4R2-S10, 17.4R3-S2, 18.1R3-S10, 18.2R2-S7, 18.2R3-S3, 18.3R1-S7, 18.3R3-S2, 18.4R1-S7, 18.4R2-S4, 18.4R3-S2, 19.1R1-S5, 19.1R2-S1, 19.1R3, 19.2R1-S4, 19.2R2, 19.3R2-S3, 19.3R3, 19.4R1-S1, 19.4R2, 20.1R1, and all subsequent releases.\n\nJunos OS Evolved: 19.4R2-EVO, 20.1R1-EVO, and all subsequent releases."
          }
        ],
        "source": {
          "advisory": "JSA11164",
          "defect": [
            "1478759"
          ],
          "discovery": "USER"
        },
        "work_around": [
          {
            "lang": "en",
            "value": "There are no available workarounds for this issue."
          }
        ]
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
    "assignerShortName": "juniper",
    "cveId": "CVE-2021-0273",
    "datePublished": "2021-04-22T19:37:28.349Z",
    "dateReserved": "2020-10-27T00:00:00.000Z",
    "dateUpdated": "2024-09-17T00:26:18.087Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.