CVE-2021-0249

EPSS 0.42%
Veröffentlicht 22.04.2021 20:15:09
Zuletzt bearbeitet 21.11.2024 05:42:18
Quelle sirt@juniper.net
Teams Watchlist Login
Unerledigt Login

On SRX Series devices configured with UTM services a buffer overflow vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS may allow an attacker to arbitrarily execute code or commands on the target to take over or otherwise impact the device by sending crafted packets to or through the device. This issue affects: Juniper Networks Junos OS on SRX Series: 15.1X49 versions prior to 15.1X49-D190; 17.4 versions prior to 17.4R2-S9; 17.4R3 and later versions prior to 18.1R3-S9; 18.2 versions prior to 18.2R3-S1; 18.3 versions prior to 18.3R2-S3, 18.3R3; 18.4 versions prior to 18.4R2-S3, 18.4R3; 19.1 versions prior to 19.1R1-S4, 19.1R2; 19.2 versions prior to 19.2R1-S1, 19.2R2. An indicator of compromise can be the following text in the UTM log: RT_UTM: AV_FILE_NOT_SCANNED_PASSED_MT:

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Juniper ≫ Junos Version15.1x49 Update-

   Juniper ≫ Srx1500 Version-
   Juniper ≫ Srx300 Version-
   Juniper ≫ Srx320 Version-
   Juniper ≫ Srx340 Version-
   Juniper ≫ Srx345 Version-
   Juniper ≫ Srx380 Version-
   Juniper ≫ Srx4100 Version-
   Juniper ≫ Srx4200 Version-
   Juniper ≫ Srx4600 Version-
   Juniper ≫ Srx5400 Version-
   Juniper ≫ Srx550 Version-
   Juniper ≫ Srx5600 Version-
   Juniper ≫ Srx5800 Version-

Juniper ≫ Junos Version15.1x49 Updated10

Juniper ≫ Junos Version15.1x49 Updated100

Juniper ≫ Junos Version15.1x49 Updated110

Juniper ≫ Junos Version15.1x49 Updated120

Juniper ≫ Junos Version15.1x49 Updated130

Juniper ≫ Junos Version15.1x49 Updated131

Juniper ≫ Junos Version15.1x49 Updated140

Juniper ≫ Junos Version15.1x49 Updated15

Juniper ≫ Junos Version15.1x49 Updated150

Juniper ≫ Junos Version15.1x49 Updated160

Juniper ≫ Junos Version15.1x49 Updated170

Juniper ≫ Junos Version15.1x49 Updated180

Juniper ≫ Junos Version15.1x49 Updated190

Juniper ≫ Junos Version15.1x49 Updated20

Juniper ≫ Junos Version15.1x49 Updated25

Juniper ≫ Junos Version15.1x49 Updated30

Juniper ≫ Junos Version15.1x49 Updated35

Juniper ≫ Junos Version15.1x49 Updated40

Juniper ≫ Junos Version15.1x49 Updated45

Juniper ≫ Junos Version15.1x49 Updated50

Juniper ≫ Junos Version15.1x49 Updated55

Juniper ≫ Junos Version15.1x49 Updated60

Juniper ≫ Junos Version15.1x49 Updated65

Juniper ≫ Junos Version15.1x49 Updated70

Juniper ≫ Junos Version15.1x49 Updated75

Juniper ≫ Junos Version15.1x49 Updated80

Juniper ≫ Junos Version15.1x49 Updated90

Juniper ≫ Junos Version17.4 Update-

Juniper ≫ Junos Version17.4 Updater1

Juniper ≫ Junos Version17.4 Updater1-s1

Juniper ≫ Junos Version17.4 Updater1-s2

Juniper ≫ Junos Version17.4 Updater1-s3

Juniper ≫ Junos Version17.4 Updater1-s4

Juniper ≫ Junos Version17.4 Updater1-s5

Juniper ≫ Junos Version17.4 Updater1-s6

Juniper ≫ Junos Version17.4 Updater1-s7

Juniper ≫ Junos Version17.4 Updater2

Juniper ≫ Junos Version17.4 Updater2-s1

Juniper ≫ Junos Version17.4 Updater2-s2

Juniper ≫ Junos Version17.4 Updater2-s3

Juniper ≫ Junos Version17.4 Updater2-s4

Juniper ≫ Junos Version17.4 Updater2-s5

Juniper ≫ Junos Version17.4 Updater2-s6

Juniper ≫ Junos Version17.4 Updater2-s7

Juniper ≫ Junos Version17.4 Updater2-s8

Juniper ≫ Junos Version17.4 Updater3

Juniper ≫ Junos Version17.4 Updater3-s1

Juniper ≫ Junos Version17.4 Updater3-s2

Juniper ≫ Junos Version17.4 Updater3-s3

Juniper ≫ Junos Version17.4 Updater3-s4

Juniper ≫ Junos Version18.1 Update-

Juniper ≫ Junos Version18.1 Updater1

Juniper ≫ Junos Version18.1 Updater2

Juniper ≫ Junos Version18.1 Updater2-s1

Juniper ≫ Junos Version18.1 Updater2-s2

Juniper ≫ Junos Version18.1 Updater2-s4

Juniper ≫ Junos Version18.1 Updater3

Juniper ≫ Junos Version18.1 Updater3-s1

Juniper ≫ Junos Version18.1 Updater3-s10

Juniper ≫ Junos Version18.1 Updater3-s11

Juniper ≫ Junos Version18.1 Updater3-s2

Juniper ≫ Junos Version18.1 Updater3-s3

Juniper ≫ Junos Version18.1 Updater3-s4

Juniper ≫ Junos Version18.1 Updater3-s5

Juniper ≫ Junos Version18.1 Updater3-s6

Juniper ≫ Junos Version18.1 Updater3-s7

Juniper ≫ Junos Version18.1 Updater3-s8

Juniper ≫ Junos Version18.2 Update-

Juniper ≫ Junos Version18.2 Updater1

Juniper ≫ Junos Version18.2 Updater1 Edition-

Juniper ≫ Junos Version18.2 Updater1-s2

Juniper ≫ Junos Version18.2 Updater1-s3

Juniper ≫ Junos Version18.2 Updater1-s4

Juniper ≫ Junos Version18.2 Updater1-s5

Juniper ≫ Junos Version18.2 Updater2

Juniper ≫ Junos Version18.2 Updater2-s1

Juniper ≫ Junos Version18.2 Updater2-s2

Juniper ≫ Junos Version18.2 Updater2-s3

Juniper ≫ Junos Version18.2 Updater2-s4

Juniper ≫ Junos Version18.2 Updater2-s5

Juniper ≫ Junos Version18.2 Updater2-s6

Juniper ≫ Junos Version18.2 Updater2-s7

Juniper ≫ Junos Version18.2 Updater3

Juniper ≫ Junos Version18.3 Update-

Juniper ≫ Junos Version18.3 Updater1

Juniper ≫ Junos Version18.3 Updater1-s1

Juniper ≫ Junos Version18.3 Updater1-s2

Juniper ≫ Junos Version18.3 Updater1-s3

Juniper ≫ Junos Version18.3 Updater1-s4

Juniper ≫ Junos Version18.3 Updater1-s5

Juniper ≫ Junos Version18.3 Updater1-s6

Juniper ≫ Junos Version18.3 Updater2

Juniper ≫ Junos Version18.3 Updater2-s1

Juniper ≫ Junos Version18.3 Updater2-s2

Juniper ≫ Junos Version18.4 Update-

Juniper ≫ Junos Version18.4 Updater1

Juniper ≫ Junos Version18.4 Updater1-s1

Juniper ≫ Junos Version18.4 Updater1-s2

Juniper ≫ Junos Version18.4 Updater1-s3

Juniper ≫ Junos Version18.4 Updater1-s4

Juniper ≫ Junos Version18.4 Updater1-s5

Juniper ≫ Junos Version18.4 Updater1-s6

Juniper ≫ Junos Version18.4 Updater1-s7

Juniper ≫ Junos Version18.4 Updater2

Juniper ≫ Junos Version18.4 Updater2-s1

Juniper ≫ Junos Version18.4 Updater2-s2

Juniper ≫ Junos Version19.1 Update-

Juniper ≫ Junos Version19.1 Updater1

Juniper ≫ Junos Version19.1 Updater1-s1

Juniper ≫ Junos Version19.1 Updater1-s2

Juniper ≫ Junos Version19.1 Updater1-s3

Juniper ≫ Junos Version19.2 Update-

Juniper ≫ Junos Version19.2 Updater1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.42%	0.592

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C
sirt@juniper.net	8.1	2.2	5.9	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

https://kb.juniper.net/JSA11142

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-0249

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-0249

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-0249

EUVD