cbcvebase.
CVE-2021-0214
published 2021-04-22

CVE-2021-0214: A vulnerability in the distributed or centralized periodic packet management daemon (PPMD) of Juniper Networks Junos OS may cause receipt of a malformed packet…

PriorityP427medium6.5CVSS 3.1
AVAACLPRNUINSUCNINAH
EPSS
0.45%
36.5th percentile
A vulnerability in the distributed or centralized periodic packet management daemon (PPMD) of Juniper Networks Junos OS may cause receipt of a malformed packet to crash and restart the PPMD process, leading to network destabilization, service interruption, and a Denial of Service (DoS) condition. Continued receipt and processing of these malformed packets will repeatedly crash the PPMD process and sustain the Denial of Service (DoS) condition. Due to the nature of the specifically crafted packet, exploitation of this issue requires direct, adjacent connectivity to the vulnerable component. This issue affects Juniper Networks Junos OS: 17.3 versions prior to 17.3R3-S11; 17.4 versions prior to 17.4R2-S12, 17.4R3-S4; 18.1 versions prior to 18.1R3-S12; 18.2 versions prior to 18.2R2-S8, 18.2R3-S7; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R1-S8, 18.4R2-S7, 18.4R3-S6; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S4; 19.2 versions prior to 19.2R1-S5, 19.2R3-S1; 19.3 versions prior to 19.3R2-S5, 19.3R3-S1; 19.4 versions prior to 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R1-S2, 20.2R2.

Affected

25 ranges
VendorProductVersion rangeFixed in
juniperjunos
juniperjunos
juniperjunos
juniperjunos
juniperjunos
juniperjunos
juniperjunos
juniperjunos
juniperjunos
juniperjunos
juniperjunos
juniperjunos
juniperjunos_os
juniper_networksjunos_os>= 17.3 < 17.3R3-S1117.3R3-S11
juniper_networksjunos_os>= 17.4 < 17.4R2-S12, 17.4R3-S417.4R2-S12, 17.4R3-S4
juniper_networksjunos_os>= 18.1 < 18.1R3-S1218.1R3-S12
juniper_networksjunos_os>= 18.2 < 18.2R2-S8, 18.2R3-S718.2R2-S8, 18.2R3-S7
juniper_networksjunos_os>= 18.3 < 18.3R3-S418.3R3-S4
juniper_networksjunos_os>= 18.4 < 18.4R1-S8, 18.4R2-S7, 18.4R3-S618.4R1-S8, 18.4R2-S7, 18.4R3-S6
juniper_networksjunos_os>= 19.1 < 19.1R1-S6, 19.1R2-S2, 19.1R3-S419.1R1-S6, 19.1R2-S2, 19.1R3-S4
juniper_networksjunos_os>= 19.2 < 19.2R1-S5, 19.2R3-S119.2R1-S5, 19.2R3-S1
juniper_networksjunos_os>= 19.3 < 19.3R2-S5, 19.3R3-S119.3R2-S5, 19.3R3-S1
juniper_networksjunos_os>= 19.4 < 19.4R2-S2, 19.4R319.4R2-S2, 19.4R3
juniper_networksjunos_os>= 20.1 < 20.1R220.1R2
juniper_networksjunos_os>= 20.2 < 20.2R1-S2, 20.2R220.2R1-S2, 20.2R2

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.03.3LOWAV:A/AC:L/Au:N/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.