CVE-2021-31367
Summary
| CVE | CVE-2021-31367 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-10-19 19:15:00 UTC |
| Updated | 2021-10-25 15:00:00 UTC |
| Description | A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on PTX Series allows an adjacent attacker to cause a Denial of Service (DoS) by sending genuine BGP flowspec packets which cause an FPC heap memory leak. Once having run out of memory the FPC will crash and restart along with a core dump. Continued receipted of these packets will create a sustained Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS All versions prior to 18.4R3-S9; 19.1 versions prior to 19.1R3-S7; 19.2 versions prior to 19.2R1-S7, 19.2R3-S3; 19.3 versions prior to 19.3R2-S6, 19.3R3-S3; 19.4 versions prior to 19.4R1-S4, 19.4R3-S6; 20.1 versions prior to 20.1R2-S2, 20.1R3; 20.2 versions prior to 20.2R3-S1; 20.3 versions prior to 20.3R3; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2. Juniper Networks Junos Evolved is not affected. |
Risk And Classification
Problem Types: CWE-401
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Juniper | Junos | 18.4 | - | All | All |
| Operating System | Juniper | Junos | 18.4 | r1 | All | All |
| Operating System | Juniper | Junos | 18.4 | r1-s1 | All | All |
| Operating System | Juniper | Junos | 18.4 | r1-s2 | All | All |
| Operating System | Juniper | Junos | 18.4 | r1-s3 | All | All |
| Operating System | Juniper | Junos | 18.4 | r1-s4 | All | All |
| Operating System | Juniper | Junos | 18.4 | r1-s5 | All | All |
| Operating System | Juniper | Junos | 18.4 | r1-s6 | All | All |
| Operating System | Juniper | Junos | 18.4 | r1-s7 | All | All |
| Operating System | Juniper | Junos | 18.4 | r2 | All | All |
| Operating System | Juniper | Junos | 18.4 | r2-s1 | All | All |
| Operating System | Juniper | Junos | 18.4 | r2-s2 | All | All |
| Operating System | Juniper | Junos | 18.4 | r2-s3 | All | All |
| Operating System | Juniper | Junos | 18.4 | r2-s4 | All | All |
| Operating System | Juniper | Junos | 18.4 | r2-s5 | All | All |
| Operating System | Juniper | Junos | 18.4 | r2-s6 | All | All |
| Operating System | Juniper | Junos | 18.4 | r2-s7 | All | All |
| Operating System | Juniper | Junos | 18.4 | r2-s8 | All | All |
| Operating System | Juniper | Junos | 18.4 | r3 | All | All |
| Operating System | Juniper | Junos | 18.4 | r3-s1 | All | All |
| Operating System | Juniper | Junos | 18.4 | r3-s2 | All | All |
| Operating System | Juniper | Junos | 18.4 | r3-s3 | All | All |
| Operating System | Juniper | Junos | 18.4 | r3-s4 | All | All |
| Operating System | Juniper | Junos | 18.4 | r3-s5 | All | All |
| Operating System | Juniper | Junos | 18.4 | r3-s6 | All | All |
| Operating System | Juniper | Junos | 18.4 | r3-s7 | All | All |
| Operating System | Juniper | Junos | 18.4 | r3-s8 | All | All |
| Operating System | Juniper | Junos | 19.1 | - | All | All |
| Operating System | Juniper | Junos | 19.1 | r1 | All | All |
| Operating System | Juniper | Junos | 19.1 | r1-s1 | All | All |
| Operating System | Juniper | Junos | 19.1 | r1-s2 | All | All |
| Operating System | Juniper | Junos | 19.1 | r1-s3 | All | All |
| Operating System | Juniper | Junos | 19.1 | r1-s4 | All | All |
| Operating System | Juniper | Junos | 19.1 | r1-s5 | All | All |
| Operating System | Juniper | Junos | 19.1 | r1-s6 | All | All |
| Operating System | Juniper | Junos | 19.1 | r2 | All | All |
| Operating System | Juniper | Junos | 19.1 | r2-s1 | All | All |
| Operating System | Juniper | Junos | 19.1 | r2-s2 | All | All |
| Operating System | Juniper | Junos | 19.1 | r3 | All | All |
| Operating System | Juniper | Junos | 19.1 | r3-s1 | All | All |
| Operating System | Juniper | Junos | 19.1 | r3-s2 | All | All |
| Operating System | Juniper | Junos | 19.1 | r3-s3 | All | All |
| Operating System | Juniper | Junos | 19.1 | r3-s4 | All | All |
| Operating System | Juniper | Junos | 19.1 | r3-s5 | All | All |
| Operating System | Juniper | Junos | 19.1 | r3-s6 | All | All |
| Operating System | Juniper | Junos | 19.2 | - | All | All |
| Operating System | Juniper | Junos | 19.2 | r1 | All | All |
| Operating System | Juniper | Junos | 19.2 | r1-s1 | All | All |
| Operating System | Juniper | Junos | 19.2 | r1-s2 | All | All |
| Operating System | Juniper | Junos | 19.2 | r1-s3 | All | All |
| Operating System | Juniper | Junos | 19.2 | r1-s4 | All | All |
| Operating System | Juniper | Junos | 19.2 | r1-s5 | All | All |
| Operating System | Juniper | Junos | 19.2 | r1-s6 | All | All |
| Operating System | Juniper | Junos | 19.2 | r2 | All | All |
| Operating System | Juniper | Junos | 19.2 | r2-s1 | All | All |
| Operating System | Juniper | Junos | 19.2 | r3 | All | All |
| Operating System | Juniper | Junos | 19.2 | r3-s1 | All | All |
| Operating System | Juniper | Junos | 19.2 | r3-s2 | All | All |
| Operating System | Juniper | Junos | 19.3 | - | All | All |
| Operating System | Juniper | Junos | 19.3 | r1 | All | All |
| Operating System | Juniper | Junos | 19.3 | r1-s1 | All | All |
| Operating System | Juniper | Junos | 19.3 | r2 | All | All |
| Operating System | Juniper | Junos | 19.3 | r2-s1 | All | All |
| Operating System | Juniper | Junos | 19.3 | r2-s2 | All | All |
| Operating System | Juniper | Junos | 19.3 | r2-s3 | All | All |
| Operating System | Juniper | Junos | 19.3 | r2-s4 | All | All |
| Operating System | Juniper | Junos | 19.3 | r2-s5 | All | All |
| Operating System | Juniper | Junos | 19.3 | r3 | All | All |
| Operating System | Juniper | Junos | 19.3 | r3-s1 | All | All |
| Operating System | Juniper | Junos | 19.3 | r3-s2 | All | All |
| Operating System | Juniper | Junos | 19.4 | r1 | All | All |
| Operating System | Juniper | Junos | 19.4 | r1-s1 | All | All |
| Operating System | Juniper | Junos | 19.4 | r1-s2 | All | All |
| Operating System | Juniper | Junos | 19.4 | r1-s3 | All | All |
| Operating System | Juniper | Junos | 19.4 | r3 | All | All |
| Operating System | Juniper | Junos | 19.4 | r3-s1 | All | All |
| Operating System | Juniper | Junos | 19.4 | r3-s2 | All | All |
| Operating System | Juniper | Junos | 19.4 | r3-s3 | All | All |
| Operating System | Juniper | Junos | 19.4 | r3-s4 | All | All |
| Operating System | Juniper | Junos | 19.4 | r3-s5 | All | All |
| Operating System | Juniper | Junos | 20.1 | r1 | All | All |
| Operating System | Juniper | Junos | 20.1 | r1-s1 | All | All |
| Operating System | Juniper | Junos | 20.1 | r1-s2 | All | All |
| Operating System | Juniper | Junos | 20.1 | r1-s3 | All | All |
| Operating System | Juniper | Junos | 20.1 | r1-s4 | All | All |
| Operating System | Juniper | Junos | 20.1 | r2 | All | All |
| Operating System | Juniper | Junos | 20.1 | r2-s1 | All | All |
| Operating System | Juniper | Junos | 20.2 | r1 | All | All |
| Operating System | Juniper | Junos | 20.2 | r1-s1 | All | All |
| Operating System | Juniper | Junos | 20.2 | r1-s2 | All | All |
| Operating System | Juniper | Junos | 20.2 | r1-s3 | All | All |
| Operating System | Juniper | Junos | 20.2 | r2 | All | All |
| Operating System | Juniper | Junos | 20.2 | r2-s1 | All | All |
| Operating System | Juniper | Junos | 20.2 | r2-s2 | All | All |
| Operating System | Juniper | Junos | 20.2 | r2-s3 | All | All |
| Operating System | Juniper | Junos | 20.2 | r3 | All | All |
| Operating System | Juniper | Junos | 20.3 | r1 | All | All |
| Operating System | Juniper | Junos | 20.3 | r1-s1 | All | All |
| Operating System | Juniper | Junos | 20.3 | r2 | All | All |
| Operating System | Juniper | Junos | 20.3 | r2-s1 | All | All |
| Operating System | Juniper | Junos | 20.4 | r1 | All | All |
| Operating System | Juniper | Junos | 20.4 | r1-s1 | All | All |
| Operating System | Juniper | Junos | 20.4 | r2 | All | All |
| Operating System | Juniper | Junos | 20.4 | r2-s1 | All | All |
| Operating System | Juniper | Junos | 21.1 | r1 | All | All |
| Operating System | Juniper | Junos | 21.1 | r1-s1 | All | All |
| Hardware | Juniper | Ptx1000 | - | All | All | All |
| Hardware | Juniper | Ptx10001-36mr | - | All | All | All |
| Hardware | Juniper | Ptx10002 | - | All | All | All |
| Hardware | Juniper | Ptx10003 | - | All | All | All |
| Hardware | Juniper | Ptx10004 | - | All | All | All |
| Hardware | Juniper | Ptx10008 | - | All | All | All |
| Hardware | Juniper | Ptx10016 | - | All | All | All |
| Hardware | Juniper | Ptx3000 | - | All | All | All |
| Hardware | Juniper | Ptx5000 | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| 2021-10 Security Bulletin: Junos OS: PTX Series: An FPC heap memory leak will be triggered by certain Flowspec route operations which can lead to an FPC crash (CVE-2021-31367) - Juniper Networks | CONFIRM | kb.juniper.net | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.