CVE-2021-0236: Due to an improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved the Routing Protocol Daemon (RPD) service…

PriorityP434medium6.5CVSS 3.1

AVNACLPRLUINSUCNINAH

EPSS

0.85%

54.0th percentile

Due to an improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved the Routing Protocol Daemon (RPD) service, upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, crashes and restarts causing a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue affects only Multiprotocol BGP (MP-BGP) VPNv6 FlowSpec deployments. This issue affects: Juniper Networks Junos OS: 18.4 versions prior to 18.4R1-S8, 18.4R2-S7, 18.4R3-S7; 19.1 versions prior to 19.1R2-S2, 19.1R3-S4; 19.2 versions prior to 19.2R1-S6, 19.2R3-S2; 19.3 versions prior to 19.3R3-S2; 19.4 versions prior to 19.4R2-S4, 19.4R3-S1; 20.1 versions prior to 20.1R2, 20.1R3; 20.2 versions prior to 20.2R2, 20.2R3; 20.3 versions prior to 20.3R1-S1, 20.3R2. Juniper Networks Junos OS Evolved: All versions after 18.4R1-EVO prior to 20.3R2-EVO. This issue does not affect: Juniper Networks Junos OS versions prior to 18.4R1. Juniper Networks Junos OS Evolved versions prior to 18.4R1-EVO.

Affected

22 ranges

Vendor	Product	Version range	Fixed in
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos	—	—
juniper	junos_os	—	—
juniper	junos_os_evolved	—	—
juniper	junos_os_evolved	—	—
juniper	junos_os_evolved	—	—
juniper	junos_os_evolved	—	—
juniper_networks	junos_os	>= 18.4 < 18.4R1-S8, 18.4R2-S7, 18.4R3-S7	18.4R1-S8, 18.4R2-S7, 18.4R3-S7
juniper_networks	junos_os	>= 19.1 < 19.1R2-S2, 19.1R3-S4	19.1R2-S2, 19.1R3-S4
juniper_networks	junos_os	>= 19.2 < 19.2R1-S6, 19.2R3-S2	19.2R1-S6, 19.2R3-S2
juniper_networks	junos_os	>= 19.3 < 19.3R3-S2	19.3R3-S2
juniper_networks	junos_os	>= 19.4 < 19.4R2-S4, 19.4R3-S1	19.4R2-S4, 19.4R3-S1
juniper_networks	junos_os	>= 20.1 < 20.1R2, 20.1R3, 20.1R3-EVO	20.1R2, 20.1R3, 20.1R3-EVO
juniper_networks	junos_os	>= 20.2 < 20.2R2, 20.2R3, 20.2R3-EVO	20.2R2, 20.2R3, 20.2R3-EVO
juniper_networks	junos_os	>= 20.3 < 20.3R1-S1, 20.3R2, 20.3R2-EVO	20.3R1-S1, 20.3R2, 20.3R2-EVO
juniper_networks	junos_os_evolved	>= 20.3-EVO < 20.3R2-EVO	20.3R2-EVO

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

nvdv2.06.8MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.