CVE-2021-0227 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Networks Junos OS

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer7 documents5 sources

Severity

7.5HIGHNVD

EPSS

1.2%

top 21.17%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Juniper Networks Junos OS Juniper Junos

Timeline

PublishedApr 22

Latest updateMay 24

Description

An improper restriction of operations within the bounds of a memory buffer vulnerability in Juniper Networks Junos OS J-Web on SRX Series devices allows an attacker to cause Denial of Service (DoS) by sending certain crafted HTTP packets. Continued receipt and processing of these packets will create a sustained Denial of Service (DoS) condition. When this issue occurs, web-management, NTP daemon (ntpd) and Layer 2 Control Protocol process (L2CPD) daemons might crash. This issue affects Juniper N…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5juniper_networks/junos_os17.3 — 17.3R3-S9+9

▶NVDjuniper/junos10 versions+9

🔴Vulnerability Details

GHSA

GHSA-gg8j-57h5-7f75: An improper restriction of operations within the bounds of a memory buffer vulnerability in Juniper Networks Junos OS J-Web on SRX Series devices allo↗2022-05-24

▶

CVEList

Junos OS: SRX Series: Denial of Service in J-Web upon receipt of crafted HTTP packets↗2021-04-22

▶

📋Vendor Advisories

Oracle

Oracle Oracle Financial Services Applications Risk Matrix: Bills And Collections (Apache Axis) — CVE-2019-0227↗2021-10-15

▶

Juniper

CVE-2021-0227: An improper restriction of operations within the bounds of a memory buffer vulnerability in Juniper Networks Junos OS J-Web on SRX Series devices allo↗2021-04-22

▶

Oracle

Oracle Oracle Siebel CRM Risk Matrix: SWSE Server (Apache Axis) — CVE-2019-0227↗2021-04-15

▶

Oracle

Oracle Oracle Fusion Middleware Risk Matrix: Platform Installation (Apache Axis) — CVE-2019-0227↗2021-01-15

▶