CVE-2021-0299

Junos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet

State: Published
Severity: 7.5 High
Published: Oct 19, 2021
Updated: Sep 16, 2024
Reserved: Oct 27, 2020

Description

An Improper Handling of Exceptional Conditions vulnerability in the processing of a transit or directly received malformed IPv6 packet in Juniper Networks Junos OS results in a kernel crash, causing the device to restart, leading to a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue only affects systems with IPv6 configured. Devices with only IPv4 configured are not vulnerable to this issue. This issue affects Juniper Networks Junos OS: 19.4 versions prior to 19.4R3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R1-S1, 20.2R2. This issue does not affect Juniper Networks Junos OS versions prior to 19.4R1.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	juniper

Weaknesses

CWE-755 Improper Handling of Exceptional Conditions

Affected Products

Product	Versions
Junos OSJuniper Networks	before 19.4R1Not affected 19.4 to before 19.4R3Affected 20.1 to before 20.1R2Affected 20.2 to before 20.2R1-S1, 20.2R2Affected

References

https://kb.juniper.net/JSA11213

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.