QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2021-0226

Back to search

CVE-2021-0226

Published: Apr 22, 2021

Modified: Sep 17, 2024

PUBLISHED

CVSS v3.1

7.1

HIGH

Description

On Juniper Networks Junos OS Evolved devices, receipt of a specific IPv6 packet may cause an established IPv6 BGP session to terminate, creating a Denial of Service (DoS) condition. Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue does not affect IPv4 BGP sessions. This issue affects IBGP or EBGP peer sessions with IPv6. This issue affects: Juniper Networks Junos OS Evolved: 19.4 versions prior to 19.4R2-S3-EVO; 20.1 versions prior to 20.1R2-S3-EVO; 20.2 versions prior to 20.2R2-S1-EVO; 20.3 versions prior to 20.3R2-EVO. This issue does not affect Juniper Networks Junos OS releases.

VendorProductVersions

Juniper Networks

Junos OS Evolved

affected
19.4-EVO - < 19.4R2-S3-EVO
affected
20.1-EVO - < 20.1R2-S3-EVO
affected
20.2-EVO - < 20.2R2-S1-EVO
affected
20.3-EVO - < 20.3R2-EVO

Weaknesses (CWE)

CWE-665

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

High

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now