« Volver al listado

CVE-2021-0226

Estado: ModificadaAlta (7.5)—

On Juniper Networks Junos OS Evolved devices, receipt of a specific IPv6 packet may cause an established IPv6 BGP session to terminate, creating a Denial of Service (DoS) condition. Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue does not affect IPv4 BGP sessions. This issue affects IBGP or EBGP peer sessions with IPv6. This issue affects: Juniper Networks Junos OS Evolved: 19.4 versions prior to 19.4R2-S3-EVO; 20.1 versions prior to 20.1R2-S3-EVO; 20.2 versions prior to 20.2R2-S1-EVO; 20.3 versions prior to 20.3R2-EVO. This issue does not affect Juniper Networks Junos OS releases.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Juniper — Junos OS Evolved

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-0226",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "sirt@juniper.net",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.1,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 4.2,
        "exploitabilityScore": 2.8
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "sirt@juniper.net",
      "affectedData": [
        {
          "vendor": "Juniper Networks",
          "product": "Junos OS Evolved",
          "versions": [
            {
              "status": "affected",
              "version": "19.4-EVO",
              "lessThan": "19.4R2-S3-EVO",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "20.1-EVO",
              "lessThan": "20.1R2-S3-EVO",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "20.2-EVO",
              "lessThan": "20.2R2-S1-EVO",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "20.3-EVO",
              "lessThan": "20.3R2-EVO",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-04-22T20:15:08.497",
  "references": [
    {
      "url": "https://kb.juniper.net/JSA11121",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "sirt@juniper.net"
    },
    {
      "url": "https://kb.juniper.net/JSA11121",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "sirt@juniper.net",
      "description": [
        {
          "lang": "en",
          "value": "CWE-665"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-665"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "On Juniper Networks Junos OS Evolved devices, receipt of a specific IPv6 packet may cause an established IPv6 BGP session to terminate, creating a Denial of Service (DoS) condition. Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue does not affect IPv4 BGP sessions. This issue affects IBGP or EBGP peer sessions with IPv6. This issue affects: Juniper Networks Junos OS Evolved: 19.4 versions prior to 19.4R2-S3-EVO; 20.1 versions prior to 20.1R2-S3-EVO; 20.2 versions prior to 20.2R2-S1-EVO; 20.3 versions prior to 20.3R2-EVO. This issue does not affect Juniper Networks Junos OS releases."
    },
    {
      "lang": "es",
      "value": "En los dispositivos Junos OS Evolved de Juniper Networks, la recepción de un paquete IPv6 específico puede causar la finalización de una sesión BGP IPv6 establecida, creando una condición de Denegación de Servicio (DoS). La recepción y el procesamiento continuo de este paquete creará una condición sostenida de Denegación de Servicio (DoS). Este problema no afecta a las sesiones de IPv4 BGP. Este problema afecta a las sesiones de peer IBGP o EBGP con IPv6. Este problema afecta a: Juniper Networks Junos OS Evolved: versiones 19.4 anteriores a 19.4R2-S3-EVO; versiones 20.1 anteriores a 20.1R2-S3-EVO; versiones 20.2 anteriores a 20.2R2-S1-EVO; versiones 20.3 anteriores a 20.3R2-EVO. Este problema no afecta versiones Juniper Networks Junos OS"
    }
  ],
  "lastModified": "2026-06-17T03:29:32.327",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.1:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F64FBB4B-7CBF-499B-A523-804857DEFAFA"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.1:r1-s1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EEBE159F-5D94-4C18-B922-331586BEA2CA"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.1:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A38EBFC9-ECBD-4362-82B2-04C02009E85C"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.1:r2-s1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0DF7C3A8-1279-4F38-9548-85AC7D6290FD"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.1:r2-s2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "50D38F97-81B0-4952-A1E3-0A9AA4D34820"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.2:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FCA8D4D2-D49D-4F91-95E2-2A0E8599338A"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.2:r1-s1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FF37C911-1904-475A-86F7-F92F34A1A88F"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.2:r2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DDFFE53D-202D-4396-A470-0A09F3320375"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.3:r1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4AFB91E3-CAAC-429F-A869-DDD40FB0F84D"
            },
            {
              "criteria": "cpe:2.3:o:juniper:junos_os_evolved:20.3:r1-s1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0A9CA997-2DDA-4808-B2AE-8804FEB798B2"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "sirt@juniper.net"
}