CVE-2021-31361Improper Check for Unusual or Exceptional Conditions in Networks Junos OS

Severity
5.3MEDIUMNVD
EPSS
0.5%
top 35.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 19
Latest updateMay 24

Description

An Improper Check for Unusual or Exceptional Conditions vulnerability combined with Improper Handling of Exceptional Conditions in Juniper Networks Junos OS on QFX Series and PTX Series allows an unauthenticated network based attacker to cause increased FPC CPU utilization by sending specific IP packets which are being VXLAN encapsulated leading to a partial Denial of Service (DoS). Continued receipted of these specific traffic will create a sustained Denial of Service (DoS) condition. This issu

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

CVEListV5juniper_networks/junos_osunspecified17.3R3-S11+22
NVDjuniper/junos17 versions+16

Patches

🔴Vulnerability Details

2
GHSA
GHSA-7fwx-jjqr-3gxq: An Improper Check for Unusual or Exceptional Conditions vulnerability combined with Improper Handling of Exceptional Conditions in Juniper Networks Ju2022-05-24
CVEList
Junos OS: QFX Series and PTX Series: FPC resource usage increases when certain packets are processed which are being VXLAN encapsulated2021-10-19

📋Vendor Advisories

1
Juniper
CVE-2021-31361: An Improper Check for Unusual or Exceptional Conditions vulnerability combined with Improper Handling of Exceptional Conditions in Juniper Networks Ju2021-10-19
CVE-2021-31361 — Networks Junos OS vulnerability | cvebase