Vulnerability-Lookup

CNVD-2022-06697

Vulnerability from cnvd - Published: 2022-01-24

Title

Juniper Networks Junos OS拒绝服务漏洞（CNVD-2022-06697）

Description

Junos OS是Juniper Networks硬件路由器中使用的基于FreeBSD的操作系统。它是Juniper网络路由，交换和安全设备中使用的操作系统。 Juniper Networks Junos OS SRX300系列、SRX500系列、SRX1500和SRX5000系列的流守护程序 (flowd) 存在拒绝服务漏洞。该漏洞源于程序未对异常数据包进行正确处理。攻击者可利用该漏洞造成flowd/srxpfe进程崩溃，导致拒绝服务。

Severity

中

Patch Name

Juniper Networks Junos OS拒绝服务漏洞（CNVD-2022-06697）的补丁

Patch Description

Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11226&cat=SIRT_1&actp=LIST。

Reference

https://nvd.nist.gov/vuln/detail/CVE-2021-31364

Impacted products

Name
['Juniper Networks Junos OS SRX1500 19.1', 'Juniper Networks Junos OS SRX1500 18.4', 'Juniper Networks Junos OS SRX1500 19.2', 'Juniper Networks Junos OS SRX1500 19.3', 'Juniper Networks Junos OS SRX1500 20.2', 'Juniper Networks Junos OS SRX1500 20.3', 'Juniper Networks Junos OS SRX1500 < 17.4R3-S5', 'Juniper Networks Junos OS SRX1500 20.4', 'Juniper Networks Junos OS SRX1500 20.1', 'Juniper Networks Junos OS SRX1500 19.4', 'Juniper Networks Junos OS SRX1500 18.3', 'Juniper Networks Junos OS SRX300 Series 19.1', 'Juniper Networks Junos OS SRX300 Series 18.4', 'Juniper Networks Junos OS SRX300 Series 19.2', 'Juniper Networks Junos OS SRX300 Series 19.3', 'Juniper Networks Junos OS SRX300 Series 20.2', 'Juniper Networks Junos OS SRX300 Series 20.3', 'Juniper Networks Junos OS SRX300 Series < 17.4R3-S5', 'Juniper Networks Junos OS SRX300 Series 20.4', 'Juniper Networks Junos OS SRX300 Series 20.1', 'Juniper Networks Junos OS SRX300 Series 19.4', 'Juniper Networks Junos OS SRX300 Series 18.3', 'Juniper Networks Junos OS SRX500 Series 19.1', 'Juniper Networks Junos OS SRX500 Series 18.4', 'Juniper Networks Junos OS SRX500 Series 19.2', 'Juniper Networks Junos OS SRX500 Series 19.3', 'Juniper Networks Junos OS SRX500 Series 20.2', 'Juniper Networks Junos OS SRX500 Series 20.3', 'Juniper Networks Junos OS SRX500 Series < 17.4R3-S5', 'Juniper Networks Junos OS SRX500 Series 20.4', 'Juniper Networks Junos OS SRX500 Series 20.1', 'Juniper Networks Junos OS SRX500 Series 19.4', 'Juniper Networks Junos OS SRX500 Series 18.3', 'Juniper Networks Junos OS SRX5000 Series with SPC2 19.1', 'Juniper Networks Junos OS SRX5000 Series with SPC2 18.4', 'Juniper Networks Junos OS SRX5000 Series with SPC2 19.2', 'Juniper Networks Junos OS SRX5000 Series with SPC2 19.3', 'Juniper Networks Junos OS SRX5000 Series with SPC2 20.2', 'Juniper Networks Junos OS SRX5000 Series with SPC2 20.3', 'Juniper Networks Junos OS SRX5000 Series with SPC2 < 17.4R3-S5', 'Juniper Networks Junos OS SRX5000 Series with SPC2 20.4', 'Juniper Networks Junos OS SRX5000 Series with SPC2 20.1', 'Juniper Networks Junos OS SRX5000 Series with SPC2 19.4', 'Juniper Networks Junos OS SRX5000 Series with SPC2 18.3']

Name

['Juniper Networks Junos OS SRX1500 19.1', 'Juniper Networks Junos OS SRX1500 18.4', 'Juniper Networks Junos OS SRX1500 19.2', 'Juniper Networks Junos OS SRX1500 19.3', 'Juniper Networks Junos OS SRX1500 20.2', 'Juniper Networks Junos OS SRX1500 20.3', 'Juniper Networks Junos OS SRX1500 < 17.4R3-S5', 'Juniper Networks Junos OS SRX1500 20.4', 'Juniper Networks Junos OS SRX1500 20.1', 'Juniper Networks Junos OS SRX1500 19.4', 'Juniper Networks Junos OS SRX1500 18.3', 'Juniper Networks Junos OS SRX300 Series 19.1', 'Juniper Networks Junos OS SRX300 Series 18.4', 'Juniper Networks Junos OS SRX300 Series 19.2', 'Juniper Networks Junos OS SRX300 Series 19.3', 'Juniper Networks Junos OS SRX300 Series 20.2', 'Juniper Networks Junos OS SRX300 Series 20.3', 'Juniper Networks Junos OS SRX300 Series < 17.4R3-S5', 'Juniper Networks Junos OS SRX300 Series 20.4', 'Juniper Networks Junos OS SRX300 Series 20.1', 'Juniper Networks Junos OS SRX300 Series 19.4', 'Juniper Networks Junos OS SRX300 Series 18.3', 'Juniper Networks Junos OS SRX500 Series 19.1', 'Juniper Networks Junos OS SRX500 Series 18.4', 'Juniper Networks Junos OS SRX500 Series 19.2', 'Juniper Networks Junos OS SRX500 Series 19.3', 'Juniper Networks Junos OS SRX500 Series 20.2', 'Juniper Networks Junos OS SRX500 Series 20.3', 'Juniper Networks Junos OS SRX500 Series < 17.4R3-S5', 'Juniper Networks Junos OS SRX500 Series 20.4', 'Juniper Networks Junos OS SRX500 Series 20.1', 'Juniper Networks Junos OS SRX500 Series 19.4', 'Juniper Networks Junos OS SRX500 Series 18.3', 'Juniper Networks Junos OS SRX5000 Series with SPC2 19.1', 'Juniper Networks Junos OS SRX5000 Series with SPC2 18.4', 'Juniper Networks Junos OS SRX5000 Series with SPC2 19.2', 'Juniper Networks Junos OS SRX5000 Series with SPC2 19.3', 'Juniper Networks Junos OS SRX5000 Series with SPC2 20.2', 'Juniper Networks Junos OS SRX5000 Series with SPC2 20.3', 'Juniper Networks Junos OS SRX5000 Series with SPC2 < 17.4R3-S5', 'Juniper Networks Junos OS SRX5000 Series with SPC2 20.4', 'Juniper Networks Junos OS SRX5000 Series with SPC2 20.1', 'Juniper Networks Junos OS SRX5000 Series with SPC2 19.4', 'Juniper Networks Junos OS SRX5000 Series with SPC2 18.3']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2021-31364",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2021-31364"
    }
  },
  "description": "Junos OS\u662fJuniper Networks\u786c\u4ef6\u8def\u7531\u5668\u4e2d\u4f7f\u7528\u7684\u57fa\u4e8eFreeBSD\u7684\u64cd\u4f5c\u7cfb\u7edf\u3002\u5b83\u662fJuniper\u7f51\u7edc\u8def\u7531\uff0c\u4ea4\u6362\u548c\u5b89\u5168\u8bbe\u5907\u4e2d\u4f7f\u7528\u7684\u64cd\u4f5c\u7cfb\u7edf\u3002\n\nJuniper Networks Junos OS SRX300\u7cfb\u5217\u3001SRX500\u7cfb\u5217\u3001SRX1500\u548cSRX5000\u7cfb\u5217\u7684\u6d41\u5b88\u62a4\u7a0b\u5e8f (flowd) \u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u5bf9\u5f02\u5e38\u6570\u636e\u5305\u8fdb\u884c\u6b63\u786e\u5904\u7406\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210flowd/srxpfe\u8fdb\u7a0b\u5d29\u6e83\uff0c\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11226\u0026cat=SIRT_1\u0026actp=LIST\u3002",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2022-06697",
  "openTime": "2022-01-24",
  "patchDescription": "Junos OS\u662fJuniper Networks\u786c\u4ef6\u8def\u7531\u5668\u4e2d\u4f7f\u7528\u7684\u57fa\u4e8eFreeBSD\u7684\u64cd\u4f5c\u7cfb\u7edf\u3002\u5b83\u662fJuniper\u7f51\u7edc\u8def\u7531\uff0c\u4ea4\u6362\u548c\u5b89\u5168\u8bbe\u5907\u4e2d\u4f7f\u7528\u7684\u64cd\u4f5c\u7cfb\u7edf\u3002\r\n\r\nJuniper Networks Junos OS SRX300\u7cfb\u5217\u3001SRX500\u7cfb\u5217\u3001SRX1500\u548cSRX5000\u7cfb\u5217\u7684\u6d41\u5b88\u62a4\u7a0b\u5e8f (flowd) \u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u5bf9\u5f02\u5e38\u6570\u636e\u5305\u8fdb\u884c\u6b63\u786e\u5904\u7406\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210flowd/srxpfe\u8fdb\u7a0b\u5d29\u6e83\uff0c\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Juniper Networks Junos OS\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2022-06697\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Juniper Networks Junos OS SRX1500 19.1",
      "Juniper Networks Junos OS SRX1500 18.4",
      "Juniper Networks Junos OS SRX1500 19.2",
      "Juniper Networks Junos OS SRX1500 19.3",
      "Juniper Networks Junos OS SRX1500 20.2",
      "Juniper Networks Junos OS SRX1500 20.3",
      "Juniper Networks Junos OS SRX1500 \u003c 17.4R3-S5",
      "Juniper Networks Junos OS SRX1500 20.4",
      "Juniper Networks Junos OS SRX1500 20.1",
      "Juniper Networks Junos OS SRX1500 19.4",
      "Juniper Networks Junos OS SRX1500 18.3",
      "Juniper Networks Junos OS SRX300 Series 19.1",
      "Juniper Networks Junos OS SRX300 Series 18.4",
      "Juniper Networks Junos OS SRX300 Series 19.2",
      "Juniper Networks Junos OS SRX300 Series 19.3",
      "Juniper Networks Junos OS SRX300 Series 20.2",
      "Juniper Networks Junos OS SRX300 Series 20.3",
      "Juniper Networks Junos OS SRX300 Series \u003c 17.4R3-S5",
      "Juniper Networks Junos OS SRX300 Series 20.4",
      "Juniper Networks Junos OS SRX300 Series 20.1",
      "Juniper Networks Junos OS SRX300 Series 19.4",
      "Juniper Networks Junos OS SRX300 Series 18.3",
      "Juniper Networks Junos OS SRX500 Series 19.1",
      "Juniper Networks Junos OS SRX500 Series 18.4",
      "Juniper Networks Junos OS SRX500 Series 19.2",
      "Juniper Networks Junos OS SRX500 Series 19.3",
      "Juniper Networks Junos OS SRX500 Series 20.2",
      "Juniper Networks Junos OS SRX500 Series 20.3",
      "Juniper Networks Junos OS SRX500 Series \u003c 17.4R3-S5",
      "Juniper Networks Junos OS SRX500 Series 20.4",
      "Juniper Networks Junos OS SRX500 Series 20.1",
      "Juniper Networks Junos OS SRX500 Series 19.4",
      "Juniper Networks Junos OS SRX500 Series 18.3",
      "Juniper Networks Junos OS SRX5000 Series with SPC2 19.1",
      "Juniper Networks Junos OS SRX5000 Series with SPC2 18.4",
      "Juniper Networks Junos OS SRX5000 Series with SPC2 19.2",
      "Juniper Networks Junos OS SRX5000 Series with SPC2 19.3",
      "Juniper Networks Junos OS SRX5000 Series with SPC2 20.2",
      "Juniper Networks Junos OS SRX5000 Series with SPC2 20.3",
      "Juniper Networks Junos OS SRX5000 Series with SPC2 \u003c 17.4R3-S5",
      "Juniper Networks Junos OS SRX5000 Series with SPC2 20.4",
      "Juniper Networks Junos OS SRX5000 Series with SPC2 20.1",
      "Juniper Networks Junos OS SRX5000 Series with SPC2 19.4",
      "Juniper Networks Junos OS SRX5000 Series with SPC2 18.3"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2021-31364",
  "serverity": "\u4e2d",
  "submitTime": "2021-10-21",
  "title": "Juniper Networks Junos OS\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2022-06697\uff09"
}

CVE-2021-31364 (GCVE-0-2021-31364)

Vulnerability from cvelistv5 – Published: 2021-10-19 18:16 – Updated: 2024-09-17 01:56

Title

Junos OS: SRX Series: The flowd process will crash if log session-close is configured and specific traffic is received

Summary

An Improper Check for Unusual or Exceptional Conditions vulnerability combined with a Race Condition in the flow daemon (flowd) of Juniper Networks Junos OS on SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2 allows an unauthenticated network based attacker sending specific traffic to cause a crash of the flowd/srxpfe process, responsible for traffic forwarding in SRX, which will cause a Denial of Service (DoS). Continued receipt and processing of this specific traffic will create a sustained Denial of Service (DoS) condition. This issue can only occur when specific packets are trying to create the same session and logging for session-close is configured as a policy action. Affected platforms are: SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2. Not affected platforms are: SRX4000 Series, SRX5000 Series with SPC3, and vSRX Series. This issue affects Juniper Networks Junos OS SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2: All versions prior to 17.4R3-S5; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R3-S9; 19.1 versions prior to 19.1R3-S6; 19.2 versions prior to 19.2R1-S7, 19.2R3-S2; 19.3 versions prior to 19.3R2-S6, 19.3R3-S2; 19.4 versions prior to 19.4R1-S4, 19.4R3-S3; 20.1 versions prior to 20.1R2-S2, 20.1R3; 20.2 versions prior to 20.2R3; 20.3 versions prior to 20.3R2-S1, 20.3R3; 20.4 versions prior to 20.4R2.

Severity ?

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-754 - Improper Check for Unusual or Exceptional Conditions
Denial of Service (DoS)
CWE-362 - Race Condition (Concurrent Execution using Shared Resource with Improper Synchronization)

Assigner

juniper

References

1 reference

URL	Tags
https://kb.juniper.net/JSA11226	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
Juniper Networks	Junos OS	Affected: unspecified , < 17.4R3-S5 (custom) Affected: 18.3 , < 18.3R3-S5 (custom) Affected: 18.4 , < 18.4R3-S9 (custom) Affected: 19.1 , < 19.1R3-S6 (custom) Affected: 19.2 , < 19.2R1-S7, 19.2R3-S2 (custom) Affected: 19.3 , < 19.3R2-S6, 19.3R3-S2 (custom) Affected: 19.4 , < 19.4R1-S4, 19.4R3-S3 (custom) Affected: 20.1 , < 20.1R2-S2, 20.1R3 (custom) Affected: 20.2 , < 20.2R3 (custom) Affected: 20.3 , < 20.3R2-S1, 20.3R3 (custom) Affected: 20.4 , < 20.4R2 (custom)

Date Public ?

2021-10-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T22:55:53.702Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kb.juniper.net/JSA11226"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2"
          ],
          "product": "Junos OS",
          "vendor": "Juniper Networks",
          "versions": [
            {
              "lessThan": "17.4R3-S5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "18.3R3-S5",
              "status": "affected",
              "version": "18.3",
              "versionType": "custom"
            },
            {
              "lessThan": "18.4R3-S9",
              "status": "affected",
              "version": "18.4",
              "versionType": "custom"
            },
            {
              "lessThan": "19.1R3-S6",
              "status": "affected",
              "version": "19.1",
              "versionType": "custom"
            },
            {
              "lessThan": "19.2R1-S7, 19.2R3-S2",
              "status": "affected",
              "version": "19.2",
              "versionType": "custom"
            },
            {
              "lessThan": "19.3R2-S6, 19.3R3-S2",
              "status": "affected",
              "version": "19.3",
              "versionType": "custom"
            },
            {
              "lessThan": "19.4R1-S4, 19.4R3-S3",
              "status": "affected",
              "version": "19.4",
              "versionType": "custom"
            },
            {
              "lessThan": "20.1R2-S2, 20.1R3",
              "status": "affected",
              "version": "20.1",
              "versionType": "custom"
            },
            {
              "lessThan": "20.2R3",
              "status": "affected",
              "version": "20.2",
              "versionType": "custom"
            },
            {
              "lessThan": "20.3R2-S1, 20.3R3",
              "status": "affected",
              "version": "20.3",
              "versionType": "custom"
            },
            {
              "lessThan": "20.4R2",
              "status": "affected",
              "version": "20.4",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "value": "This issue can only occur when logging for session-close is configured similar to the following example:\n\n  [security policies from-zone untrust to-zone trust policy policy_name then log session-close]"
        }
      ],
      "datePublic": "2021-10-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An Improper Check for Unusual or Exceptional Conditions vulnerability combined with a Race Condition in the flow daemon (flowd) of Juniper Networks Junos OS on SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2 allows an unauthenticated network based attacker sending specific traffic to cause a crash of the flowd/srxpfe process, responsible for traffic forwarding in SRX, which will cause a Denial of Service (DoS). Continued receipt and processing of this specific traffic will create a sustained Denial of Service (DoS) condition. This issue can only occur when specific packets are trying to create the same session and logging for session-close is configured as a policy action. Affected platforms are: SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2. Not affected platforms are: SRX4000 Series, SRX5000 Series with SPC3, and vSRX Series. This issue affects Juniper Networks Junos OS SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2: All versions prior to 17.4R3-S5; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R3-S9; 19.1 versions prior to 19.1R3-S6; 19.2 versions prior to 19.2R1-S7, 19.2R3-S2; 19.3 versions prior to 19.3R2-S6, 19.3R3-S2; 19.4 versions prior to 19.4R1-S4, 19.4R3-S3; 20.1 versions prior to 20.1R2-S2, 20.1R3; 20.2 versions prior to 20.2R3; 20.3 versions prior to 20.3R2-S1, 20.3R3; 20.4 versions prior to 20.4R2."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-754",
              "description": "CWE-754 Improper Check for Unusual or Exceptional Conditions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "description": "Denial of Service (DoS)",
              "lang": "en",
              "type": "text"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-362",
              "description": "CWE-362 Race Condition (Concurrent Execution using Shared Resource with Improper Synchronization)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-10-19T18:16:52.000Z",
        "orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
        "shortName": "juniper"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kb.juniper.net/JSA11226"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "The following software releases have been updated to resolve this specific issue: 17.4R3-S5, 18.3R3-S5, 18.4R3-S9, 19.1R3-S6, 19.2R1-S7, 19.2R3-S2, 19.3R2-S6, 19.3R3-S2, 19.4R1-S4, 19.4R3-S3, 20.1R2-S2, 20.1R3, 20.2R3, 20.3R2-S1, 20.3R3, 20.4R2, 21.1R1, and all subsequent releases."
        }
      ],
      "source": {
        "advisory": "JSA11226",
        "defect": [
          "1571354"
        ],
        "discovery": "USER"
      },
      "title": "Junos OS: SRX Series: The flowd process will crash if log session-close is configured and specific traffic is received",
      "workarounds": [
        {
          "lang": "en",
          "value": "Please remove the session-close log action from the policy actions of all policies."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "sirt@juniper.net",
          "DATE_PUBLIC": "2021-10-13T16:00:00.000Z",
          "ID": "CVE-2021-31364",
          "STATE": "PUBLIC",
          "TITLE": "Junos OS: SRX Series: The flowd process will crash if log session-close is configured and specific traffic is received"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Junos OS",
                      "version": {
                        "version_data": [
                          {
                            "platform": "SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2",
                            "version_affected": "\u003c",
                            "version_value": "17.4R3-S5"
                          },
                          {
                            "platform": "SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2",
                            "version_affected": "\u003c",
                            "version_name": "18.3",
                            "version_value": "18.3R3-S5"
                          },
                          {
                            "platform": "SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2",
                            "version_affected": "\u003c",
                            "version_name": "18.4",
                            "version_value": "18.4R3-S9"
                          },
                          {
                            "platform": "SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2",
                            "version_affected": "\u003c",
                            "version_name": "19.1",
                            "version_value": "19.1R3-S6"
                          },
                          {
                            "platform": "SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2",
                            "version_affected": "\u003c",
                            "version_name": "19.2",
                            "version_value": "19.2R1-S7, 19.2R3-S2"
                          },
                          {
                            "platform": "SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2",
                            "version_affected": "\u003c",
                            "version_name": "19.3",
                            "version_value": "19.3R2-S6, 19.3R3-S2"
                          },
                          {
                            "platform": "SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2",
                            "version_affected": "\u003c",
                            "version_name": "19.4",
                            "version_value": "19.4R1-S4, 19.4R3-S3"
                          },
                          {
                            "platform": "SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2",
                            "version_affected": "\u003c",
                            "version_name": "20.1",
                            "version_value": "20.1R2-S2, 20.1R3"
                          },
                          {
                            "platform": "SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2",
                            "version_affected": "\u003c",
                            "version_name": "20.2",
                            "version_value": "20.2R3"
                          },
                          {
                            "platform": "SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2",
                            "version_affected": "\u003c",
                            "version_name": "20.3",
                            "version_value": "20.3R2-S1, 20.3R3"
                          },
                          {
                            "platform": "SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2",
                            "version_affected": "\u003c",
                            "version_name": "20.4",
                            "version_value": "20.4R2"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Juniper Networks"
              }
            ]
          }
        },
        "configuration": [
          {
            "lang": "en",
            "value": "This issue can only occur when logging for session-close is configured similar to the following example:\n\n  [security policies from-zone untrust to-zone trust policy policy_name then log session-close]"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An Improper Check for Unusual or Exceptional Conditions vulnerability combined with a Race Condition in the flow daemon (flowd) of Juniper Networks Junos OS on SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2 allows an unauthenticated network based attacker sending specific traffic to cause a crash of the flowd/srxpfe process, responsible for traffic forwarding in SRX, which will cause a Denial of Service (DoS). Continued receipt and processing of this specific traffic will create a sustained Denial of Service (DoS) condition. This issue can only occur when specific packets are trying to create the same session and logging for session-close is configured as a policy action. Affected platforms are: SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2. Not affected platforms are: SRX4000 Series, SRX5000 Series with SPC3, and vSRX Series. This issue affects Juniper Networks Junos OS SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2: All versions prior to 17.4R3-S5; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R3-S9; 19.1 versions prior to 19.1R3-S6; 19.2 versions prior to 19.2R1-S7, 19.2R3-S2; 19.3 versions prior to 19.3R2-S6, 19.3R3-S2; 19.4 versions prior to 19.4R1-S4, 19.4R3-S3; 20.1 versions prior to 20.1R2-S2, 20.1R3; 20.2 versions prior to 20.2R3; 20.3 versions prior to 20.3R2-S1, 20.3R3; 20.4 versions prior to 20.4R2."
            }
          ]
        },
        "exploit": [
          {
            "lang": "en",
            "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
          }
        ],
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-754 Improper Check for Unusual or Exceptional Conditions"
                }
              ]
            },
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Denial of Service (DoS)"
                }
              ]
            },
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-362 Race Condition (Concurrent Execution using Shared Resource with Improper Synchronization)"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://kb.juniper.net/JSA11226",
              "refsource": "CONFIRM",
              "url": "https://kb.juniper.net/JSA11226"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "The following software releases have been updated to resolve this specific issue: 17.4R3-S5, 18.3R3-S5, 18.4R3-S9, 19.1R3-S6, 19.2R1-S7, 19.2R3-S2, 19.3R2-S6, 19.3R3-S2, 19.4R1-S4, 19.4R3-S3, 20.1R2-S2, 20.1R3, 20.2R3, 20.3R2-S1, 20.3R3, 20.4R2, 21.1R1, and all subsequent releases."
          }
        ],
        "source": {
          "advisory": "JSA11226",
          "defect": [
            "1571354"
          ],
          "discovery": "USER"
        },
        "work_around": [
          {
            "lang": "en",
            "value": "Please remove the session-close log action from the policy actions of all policies."
          }
        ]
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
    "assignerShortName": "juniper",
    "cveId": "CVE-2021-31364",
    "datePublished": "2021-10-19T18:16:52.279Z",
    "dateReserved": "2021-04-15T00:00:00.000Z",
    "dateUpdated": "2024-09-17T01:56:30.666Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2022-06697

CVE-2021-31364 (GCVE-0-2021-31364)

Tags

Sightings

Nomenclature