CVE-2021-0215

Junos OS: EX Series, QFX Series, SRX Branch Series, MX Series: Memory leak in packet forwarding engine due to 802.1X authenticator port interface flaps

State
Published
Severity
6.5 Medium
Published
Jan 15, 2021
Updated
Sep 16, 2024
Reserved
Oct 27, 2020

Read the record on cve.org

Description

On Juniper Networks Junos EX series, QFX Series, MX Series and SRX branch series devices, a memory leak occurs every time the 802.1X authenticator port interface flaps which can lead to other processes, such as the pfex process, responsible for packet forwarding, to crash and restart. An administrator can use the following CLI command to monitor the status of memory consumption: user@device> show task memory detail Please refer to https://kb.juniper.net/KB31522 for details. This issue affects Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D54; 15.1X49 versions prior to 15.1X49-D240 ; 15.1X53 versions prior to 15.1X53-D593; 16.1 versions prior to 16.1R7-S8; 17.2 versions prior to 17.2R3-S4; 17.3 versions prior to 17.3R3-S8; 17.4 versions prior to 17.4R2-S11, 17.4R3-S2; 18.1 versions prior to 18.1R3-S10 ; 18.2 versions prior to 18.2R2-S7, 18.2R3-S3; 18.3 versions prior to 18.3R2-S4, 18.3R3-S2; 18.4 versions prior to 18.4R1-S7, 18.4R2-S4, 18.4R3-S2; 19.1 versions prior to 19.1R1-S5, 19.1R2-S2, 19.1R3; 19.2 versions prior to 19.2R1-S5, 19.2R2; 19.3 versions prior to 19.3R2-S3, 19.3R3; 19.4 versions prior to 19.4R1-S2, 19.4R2. This issue does not affect Juniper Networks Junos OS 12.3, 15.1.

Scores

CVSSScoreVectorSource
3.16.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hjuniper

Weaknesses

  • CWE-400 Uncontrolled Resource Consumption

Affected Products

ProductVersions
Junos OSJuniper Networks
  • 12.3Not affected
  • 15.1Not affected
Junos OSJuniper Networks
  • 14.1X53 to before 14.1X53-D54Affected
Junos OSJuniper Networks
  • 15.1X49 to before 15.1X49-D240Affected
Junos OSJuniper Networks
  • 15.1X53 to before 15.1X53-D593Affected
Junos OSJuniper Networks
  • 16.1 to before 16.1R7-S8Affected
  • 17.2 to before 17.2R3-S4Affected
  • 17.3 to before 17.3R3-S8Affected
  • 17.4 to before 17.4R2-S11, 17.4R3-S2Affected
  • 18.1 to before 18.1R3-S10Affected
  • 18.2 to before 18.2R2-S7, 18.2R3-S3Affected
  • 18.3 to before 18.3R2-S4, 18.3R3-S2Affected
  • 18.4 to before 18.4R1-S7, 18.4R2-S4, 18.4R3-S2Affected
  • 19.1 to before 19.1R1-S5, 19.1R2-S2, 19.1R3Affected
  • 19.2 to before 19.2R1-S5, 19.2R2Affected
  • 19.3 to before 19.3R2-S3, 19.3R3Affected
  • 19.4 to before 19.4R1-S2, 19.4R2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.