CVE-2021-0249

EPSS 1.84%
Veröffentlicht 22.04.2021 20:15:09
Zuletzt bearbeitet 21.11.2024 05:42:18
Erkennungen
Login

Junos OS: SRX Series: A remote attacker may be able to cause a PFE buffer overflow to arbitrarily remotely execute code or commands on the target device with UTM enabled.

On SRX Series devices configured with UTM services a buffer overflow vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS may allow an attacker to arbitrarily execute code or commands on the target to take over or otherwise impact the device by sending crafted packets to or through the device. This issue affects: Juniper Networks Junos OS on SRX Series: 15.1X49 versions prior to 15.1X49-D190; 17.4 versions prior to 17.4R2-S9; 17.4R3 and later versions prior to 18.1R3-S9; 18.2 versions prior to 18.2R3-S1; 18.3 versions prior to 18.3R2-S3, 18.3R3; 18.4 versions prior to 18.4R2-S3, 18.4R3; 19.1 versions prior to 19.1R1-S4, 19.1R2; 19.2 versions prior to 19.2R1-S1, 19.2R2. An indicator of compromise can be the following text in the UTM log: RT_UTM: AV_FILE_NOT_SCANNED_PASSED_MT:

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 4

NVD 114 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Juniper ≫ Junos Version 15.1x49 Update -

   Juniper ≫ Srx1500 Version -
   Juniper ≫ Srx300 Version -
   Juniper ≫ Srx320 Version -
   Juniper ≫ Srx340 Version -
   Juniper ≫ Srx345 Version -
   Juniper ≫ Srx380 Version -
   Juniper ≫ Srx4100 Version -
   Juniper ≫ Srx4200 Version -
   Juniper ≫ Srx4600 Version -
   Juniper ≫ Srx5400 Version -
   Juniper ≫ Srx550 Version -
   Juniper ≫ Srx5600 Version -
   Juniper ≫ Srx5800 Version -

Juniper ≫ Junos Version 15.1x49 Update d10

Juniper ≫ Junos Version 15.1x49 Update d100

Juniper ≫ Junos Version 15.1x49 Update d110

Juniper ≫ Junos Version 15.1x49 Update d120

Juniper ≫ Junos Version 15.1x49 Update d130

Juniper ≫ Junos Version 15.1x49 Update d131

Juniper ≫ Junos Version 15.1x49 Update d140

Juniper ≫ Junos Version 15.1x49 Update d15

Juniper ≫ Junos Version 15.1x49 Update d150

Juniper ≫ Junos Version 15.1x49 Update d160

Juniper ≫ Junos Version 15.1x49 Update d170

Juniper ≫ Junos Version 15.1x49 Update d180

Juniper ≫ Junos Version 15.1x49 Update d190

Juniper ≫ Junos Version 15.1x49 Update d20

Juniper ≫ Junos Version 15.1x49 Update d25

Juniper ≫ Junos Version 15.1x49 Update d30

Juniper ≫ Junos Version 15.1x49 Update d35

Juniper ≫ Junos Version 15.1x49 Update d40

Juniper ≫ Junos Version 15.1x49 Update d45

Juniper ≫ Junos Version 15.1x49 Update d50

Juniper ≫ Junos Version 15.1x49 Update d55

Juniper ≫ Junos Version 15.1x49 Update d60

Juniper ≫ Junos Version 15.1x49 Update d65

Juniper ≫ Junos Version 15.1x49 Update d70

Juniper ≫ Junos Version 15.1x49 Update d75

Juniper ≫ Junos Version 15.1x49 Update d80

Juniper ≫ Junos Version 15.1x49 Update d90

Juniper ≫ Junos Version 17.4 Update -

Juniper ≫ Junos Version 17.4 Update r1

Juniper ≫ Junos Version 17.4 Update r1-s1

Juniper ≫ Junos Version 17.4 Update r1-s2

Juniper ≫ Junos Version 17.4 Update r1-s3

Juniper ≫ Junos Version 17.4 Update r1-s4

Juniper ≫ Junos Version 17.4 Update r1-s5

Juniper ≫ Junos Version 17.4 Update r1-s6

Juniper ≫ Junos Version 17.4 Update r1-s7

Juniper ≫ Junos Version 17.4 Update r2

Juniper ≫ Junos Version 17.4 Update r2-s1

Juniper ≫ Junos Version 17.4 Update r2-s2

Juniper ≫ Junos Version 17.4 Update r2-s3

Juniper ≫ Junos Version 17.4 Update r2-s4

Juniper ≫ Junos Version 17.4 Update r2-s5

Juniper ≫ Junos Version 17.4 Update r2-s6

Juniper ≫ Junos Version 17.4 Update r2-s7

Juniper ≫ Junos Version 17.4 Update r2-s8

Juniper ≫ Junos Version 17.4 Update r3

Juniper ≫ Junos Version 17.4 Update r3-s1

Juniper ≫ Junos Version 17.4 Update r3-s2

Juniper ≫ Junos Version 17.4 Update r3-s3

Juniper ≫ Junos Version 17.4 Update r3-s4

Juniper ≫ Junos Version 18.1 Update -

Juniper ≫ Junos Version 18.1 Update r1

Juniper ≫ Junos Version 18.1 Update r2

Juniper ≫ Junos Version 18.1 Update r2-s1

Juniper ≫ Junos Version 18.1 Update r2-s2

Juniper ≫ Junos Version 18.1 Update r2-s4

Juniper ≫ Junos Version 18.1 Update r3

Juniper ≫ Junos Version 18.1 Update r3-s1

Juniper ≫ Junos Version 18.1 Update r3-s10

Juniper ≫ Junos Version 18.1 Update r3-s11

Juniper ≫ Junos Version 18.1 Update r3-s2

Juniper ≫ Junos Version 18.1 Update r3-s3

Juniper ≫ Junos Version 18.1 Update r3-s4

Juniper ≫ Junos Version 18.1 Update r3-s5

Juniper ≫ Junos Version 18.1 Update r3-s6

Juniper ≫ Junos Version 18.1 Update r3-s7

Juniper ≫ Junos Version 18.1 Update r3-s8

Juniper ≫ Junos Version 18.2 Update -

Juniper ≫ Junos Version 18.2 Update r1

Juniper ≫ Junos Version 18.2 Update r1 Edition -

Juniper ≫ Junos Version 18.2 Update r1-s2

Juniper ≫ Junos Version 18.2 Update r1-s3

Juniper ≫ Junos Version 18.2 Update r1-s4

Juniper ≫ Junos Version 18.2 Update r1-s5

Juniper ≫ Junos Version 18.2 Update r2

Juniper ≫ Junos Version 18.2 Update r2-s1

Juniper ≫ Junos Version 18.2 Update r2-s2

Juniper ≫ Junos Version 18.2 Update r2-s3

Juniper ≫ Junos Version 18.2 Update r2-s4

Juniper ≫ Junos Version 18.2 Update r2-s5

Juniper ≫ Junos Version 18.2 Update r2-s6

Juniper ≫ Junos Version 18.2 Update r2-s7

Juniper ≫ Junos Version 18.2 Update r3

Juniper ≫ Junos Version 18.3 Update -

Juniper ≫ Junos Version 18.3 Update r1

Juniper ≫ Junos Version 18.3 Update r1-s1

Juniper ≫ Junos Version 18.3 Update r1-s2

Juniper ≫ Junos Version 18.3 Update r1-s3

Juniper ≫ Junos Version 18.3 Update r1-s4

Juniper ≫ Junos Version 18.3 Update r1-s5

Juniper ≫ Junos Version 18.3 Update r1-s6

Juniper ≫ Junos Version 18.3 Update r2

Juniper ≫ Junos Version 18.3 Update r2-s1

Juniper ≫ Junos Version 18.3 Update r2-s2

Juniper ≫ Junos Version 18.4 Update -

Juniper ≫ Junos Version 18.4 Update r1

Juniper ≫ Junos Version 18.4 Update r1-s1

Juniper ≫ Junos Version 18.4 Update r1-s2

Juniper ≫ Junos Version 18.4 Update r1-s3

Juniper ≫ Junos Version 18.4 Update r1-s4

Juniper ≫ Junos Version 18.4 Update r1-s5

Juniper ≫ Junos Version 18.4 Update r1-s6

Juniper ≫ Junos Version 18.4 Update r1-s7

Juniper ≫ Junos Version 18.4 Update r2

Juniper ≫ Junos Version 18.4 Update r2-s1

Juniper ≫ Junos Version 18.4 Update r2-s2

Juniper ≫ Junos Version 19.1 Update -

Juniper ≫ Junos Version 19.1 Update r1

Juniper ≫ Junos Version 19.1 Update r1-s1

Juniper ≫ Junos Version 19.1 Update r1-s2

Juniper ≫ Junos Version 19.1 Update r1-s3

Juniper ≫ Junos Version 19.2 Update -

Juniper ≫ Junos Version 19.2 Update r1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.84%	0.762

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C
Juniper	8.1	2.2	5.9	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://kb.juniper.net/JSA11142

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-0249

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-0249

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-0249

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2021-0249