CVE-2021-0289

EPSS 0.06%
Published 15.07.2021 20:15:10
Last modified 21.11.2024 05:42:24
Source sirt@juniper.net
Teams watchlist Login
Open Login

When user-defined ARP Policer is configured and applied on one or more Aggregated Ethernet (AE) interface units, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability between the Device Control Daemon (DCD) and firewall process (dfwd) daemons of Juniper Networks Junos OS allows an attacker to bypass the user-defined ARP Policer. In this particular case the User ARP policer is replaced with default ARP policer. To review the desired ARP Policers and actual state one can run the command "show interfaces <> extensive" and review the output. See further details below. An example output is: show interfaces extensive | match policer Policer: Input: __default_arp_policer__ <<< incorrect if user ARP Policer was applied on an AE interface and the default ARP Policer is displayed Policer: Input: jtac-arp-ae5.317-inet-arp <<< correct if user ARP Policer was applied on an AE interface For all platforms, except SRX Series: This issue affects Juniper Networks Junos OS: All versions 5.6R1 and all later versions prior to 18.4 versions prior to 18.4R2-S9, 18.4R3-S9 with the exception of 15.1 versions 15.1R7-S10 and later versions; 19.4 versions prior to 19.4R3-S3; 20.1 versions prior to 20.1R3; 20.2 versions prior to 20.2R3-S2; 20.3 version 20.3R1 and later versions; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2; This issue does not affect Juniper Networks Junos OS versions prior to 5.6R1. On SRX Series this issue affects Juniper Networks Junos OS: 18.4 versions prior to 18.4R2-S9, 18.4R3-S9; 19.4 versions prior to 19.4R3-S4; 20.1 versions prior to 20.1R3; 20.2 versions prior to 20.2R3-S2; 20.3 version 20.3R1 and later versions; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2. This issue does not affect 18.4 versions prior to 18.4R1 on SRX Series. This issue does not affect Junos OS Evolved.

Affected products Warnungen 0 Metrics 4 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Juniper ≫ Junos Version >= 5.7 < 15.1

   Juniper ≫ Acx1000 Version-
   Juniper ≫ Acx1100 Version-
   Juniper ≫ Acx2000 Version-
   Juniper ≫ Acx2100 Version-
   Juniper ≫ Acx2200 Version-
   Juniper ≫ Acx4000 Version-
   Juniper ≫ Acx500 Version-
   Juniper ≫ Acx5000 Version-
   Juniper ≫ Acx5048 Version-
   Juniper ≫ Acx5096 Version-
   Juniper ≫ Acx5400 Version-
   Juniper ≫ Acx5448 Version-
   Juniper ≫ Acx5800 Version-
   Juniper ≫ Acx6300 Version-
   Juniper ≫ Acx6360 Version-
   Juniper ≫ Acx710 Version-
   Juniper ≫ Atp400 Version-
   Juniper ≫ Atp700 Version-
   Juniper ≫ Csrx Version-
   Juniper ≫ Ctp150 Version-
   Juniper ≫ Ctp2008 Version-
   Juniper ≫ Ctp2024 Version-
   Juniper ≫ Ctp2056 Version-
   Juniper ≫ Dx Version-
   Juniper ≫ Dx Version5.1
   Juniper ≫ Ex Rps Version-
   Juniper ≫ Ex2200 Version-
   Juniper ≫ Ex2200-c Version-
   Juniper ≫ Ex2200-vc Version-
   Juniper ≫ Ex2300 Version-
   Juniper ≫ Ex2300-c Version-
   Juniper ≫ Ex2300m Version-
   Juniper ≫ Ex3200 Version-
   Juniper ≫ Ex3300 Version-
   Juniper ≫ Ex3300-vc Version-
   Juniper ≫ Ex3400 Version-
   Juniper ≫ Ex4200 Version-
   Juniper ≫ Ex4200-vc Version-
   Juniper ≫ Ex4300 Version-
   Juniper ≫ Ex4300-24p Version-
   Juniper ≫ Ex4300-24p-s Version-
   Juniper ≫ Ex4300-24t Version-
   Juniper ≫ Ex4300-24t-s Version-
   Juniper ≫ Ex4300-32f Version-
   Juniper ≫ Ex4300-32f-dc Version-
   Juniper ≫ Ex4300-32f-s Version-
   Juniper ≫ Ex4300-48mp Version-
   Juniper ≫ Ex4300-48mp-s Version-
   Juniper ≫ Ex4300-48p Version-
   Juniper ≫ Ex4300-48p-s Version-
   Juniper ≫ Ex4300-48t Version-
   Juniper ≫ Ex4300-48t-afi Version-
   Juniper ≫ Ex4300-48t-dc Version-
   Juniper ≫ Ex4300-48t-dc-afi Version-
   Juniper ≫ Ex4300-48t-s Version-
   Juniper ≫ Ex4300-48tafi Version-
   Juniper ≫ Ex4300-48tdc Version-
   Juniper ≫ Ex4300-48tdc-afi Version-
   Juniper ≫ Ex4300-mp Version-
   Juniper ≫ Ex4300-vc Version-
   Juniper ≫ Ex4300m Version-
   Juniper ≫ Ex4400 Version-
   Juniper ≫ Ex4500 Version-
   Juniper ≫ Ex4500-vc Version-
   Juniper ≫ Ex4550 Version-
   Juniper ≫ Ex4550-vc Version-
   Juniper ≫ Ex4550/vc Version-
   Juniper ≫ Ex4600 Version-
   Juniper ≫ Ex4600-vc Version-
   Juniper ≫ Ex4650 Version-
   Juniper ≫ Ex6200 Version-
   Juniper ≫ Ex6210 Version-
   Juniper ≫ Ex8200 Version-
   Juniper ≫ Ex8200-vc Version-
   Juniper ≫ Ex8208 Version-
   Juniper ≫ Ex8216 Version-
   Juniper ≫ Ex9200 Version-
   Juniper ≫ Ex9204 Version-
   Juniper ≫ Ex9208 Version-
   Juniper ≫ Ex9214 Version-
   Juniper ≫ Ex9250 Version-
   Juniper ≫ Ex9251 Version-
   Juniper ≫ Ex9253 Version-
   Juniper ≫ Fips Infranet Controller 6500 Version-
   Juniper ≫ Fips Secure Access 4000 Version-
   Juniper ≫ Fips Secure Access 4500 Version-
   Juniper ≫ Fips Secure Access 6000 Version-
   Juniper ≫ Fips Secure Access 6500 Version-
   Juniper ≫ Gfx3600 Version-
   Juniper ≫ Idp250 Version-
   Juniper ≫ Idp75 Version-
   Juniper ≫ Idp800 Version-
   Juniper ≫ Idp8200 Version-
   Juniper ≫ Infranet Controller 4000 Version-
   Juniper ≫ Infranet Controller 4500 Version-
   Juniper ≫ Infranet Controller 6000 Version-
   Juniper ≫ Infranet Controller 6500 Version-
   Juniper ≫ Jatp Version400
   Juniper ≫ Jatp Version700
   Juniper ≫ Junos Version-
   Juniper ≫ Junos Space Ja1500 Appliance Version-
   Juniper ≫ Junos Space Ja2500 Appliance Version-
   Juniper ≫ Ln1000 Version-
   Juniper ≫ Ln2600 Version-
   Juniper ≫ M10i Version-
   Juniper ≫ M120 Version-
   Juniper ≫ M320 Version-
   Juniper ≫ M7i Version-
   Juniper ≫ Mag2600 Gateway Version-
   Juniper ≫ Mag4610 Gateway Version-
   Juniper ≫ Mag6610 Gateway Version-
   Juniper ≫ Mag6611 Gateway Version-
   Juniper ≫ Mx Version-
   Juniper ≫ Mx10 Version-
   Juniper ≫ Mx10000 Version-
   Juniper ≫ Mx10003 Version-
   Juniper ≫ Mx10008 Version-
   Juniper ≫ Mx10016 Version-
   Juniper ≫ Mx104 Version-
   Juniper ≫ Mx150 Version-
   Juniper ≫ Mx2008 Version-
   Juniper ≫ Mx2010 Version-
   Juniper ≫ Mx2020 Version-
   Juniper ≫ Mx204 Version-
   Juniper ≫ Mx240 Version-
   Juniper ≫ Mx40 Version-
   Juniper ≫ Mx480 Version-
   Juniper ≫ Mx5 Version-
   Juniper ≫ Mx80 Version-
   Juniper ≫ Mx960 Version-
   Juniper ≫ Netscreen-5200 Version-
   Juniper ≫ Netscreen-5400 Version-
   Juniper ≫ Netscreen-5gt Version-
   Juniper ≫ Netscreen-5gt Version5.0
   Juniper ≫ Netscreen-idp Version3.0
   Juniper ≫ Netscreen-idp Version3.0r1
   Juniper ≫ Netscreen-idp Version3.0r2
   Juniper ≫ Netscreen-idp 10 Version-
   Juniper ≫ Netscreen-idp 100 Version-
   Juniper ≫ Netscreen-idp 1000 Version-
   Juniper ≫ Netscreen-idp 500 Version-
   Juniper ≫ Nfx Version-
   Juniper ≫ Nfx150 Version-
   Juniper ≫ Nfx250 Version-
   Juniper ≫ Nfx350 Version-
   Juniper ≫ Nsm3000 Version-
   Juniper ≫ Nsmexpress Version-
   Juniper ≫ Ocx1100 Version-
   Juniper ≫ Ptx1000 Version-
   Juniper ≫ Ptx1000-72q Version-
   Juniper ≫ Ptx10000 Version-
   Juniper ≫ Ptx10001 Version-
   Juniper ≫ Ptx10001-36mr Version-
   Juniper ≫ Ptx100016 Version-
   Juniper ≫ Ptx10002 Version-
   Juniper ≫ Ptx10002-60c Version-
   Juniper ≫ Ptx10003 Version-
   Juniper ≫ Ptx10003 160c Version-
   Juniper ≫ Ptx10003 80c Version-
   Juniper ≫ Ptx10003 81cd Version-
   Juniper ≫ Ptx10004 Version-
   Juniper ≫ Ptx10008 Version-
   Juniper ≫ Ptx10016 Version-
   Juniper ≫ Ptx3000 Version-
   Juniper ≫ Ptx5000 Version-
   Juniper ≫ Qfx10000 Version-
   Juniper ≫ Qfx10002 Version-
   Juniper ≫ Qfx10002-32q Version-
   Juniper ≫ Qfx10002-60c Version-
   Juniper ≫ Qfx10002-72q Version-
   Juniper ≫ Qfx10008 Version-
   Juniper ≫ Qfx10016 Version-
   Juniper ≫ Qfx3000-g Version-
   Juniper ≫ Qfx3000-m Version-
   Juniper ≫ Qfx3008-i Version-
   Juniper ≫ Qfx3100 Version-
   Juniper ≫ Qfx3500 Version-
   Juniper ≫ Qfx3600 Version-
   Juniper ≫ Qfx3600-i Version-
   Juniper ≫ Qfx5100 Version-
   Juniper ≫ Qfx5100-96s Version-
   Juniper ≫ Qfx5110 Version-
   Juniper ≫ Qfx5120 Version-
   Juniper ≫ Qfx5130 Version-
   Juniper ≫ Qfx5200 Version-
   Juniper ≫ Qfx5200-32c Version-
   Juniper ≫ Qfx5200-48y Version-
   Juniper ≫ Qfx5210 Version-
   Juniper ≫ Qfx5210-64c Version-
   Juniper ≫ Qfx5220 Version-
   Juniper ≫ Router M10 Version-
   Juniper ≫ Router M16 Version-
   Juniper ≫ Router M20 Version-
   Juniper ≫ Router M40 Version-
   Juniper ≫ Router M5 Version-
   Juniper ≫ Secure Access 2000 Version-
   Juniper ≫ Secure Access 2500 Version-
   Juniper ≫ Secure Access 4000 Version-
   Juniper ≫ Secure Access 4500 Version-
   Juniper ≫ Secure Access 6000 Version-
   Juniper ≫ Secure Access 6500 Version-
   Juniper ≫ Secure Access 700 Version-
   Juniper ≫ T1600 Version-
   Juniper ≫ T320 Version-
   Juniper ≫ T4000 Version-
   Juniper ≫ T640 Version-
   Juniper ≫ Xre200 Version-

Juniper ≫ Junos Version >= 15.2 < 18.4

Juniper ≫ Junos Version5.6 Updater1

Juniper ≫ Junos Version18.4 Update-

Juniper ≫ Junos Version18.4 Updater1

Juniper ≫ Junos Version18.4 Updater1-s1

Juniper ≫ Junos Version18.4 Updater1-s2

Juniper ≫ Junos Version18.4 Updater1-s3

Juniper ≫ Junos Version18.4 Updater1-s4

Juniper ≫ Junos Version18.4 Updater1-s5

Juniper ≫ Junos Version18.4 Updater1-s6

Juniper ≫ Junos Version18.4 Updater1-s7

Juniper ≫ Junos Version18.4 Updater2

Juniper ≫ Junos Version18.4 Updater2-s1

Juniper ≫ Junos Version18.4 Updater2-s2

Juniper ≫ Junos Version18.4 Updater2-s3

Juniper ≫ Junos Version18.4 Updater2-s4

Juniper ≫ Junos Version18.4 Updater2-s5

Juniper ≫ Junos Version18.4 Updater2-s6

Juniper ≫ Junos Version18.4 Updater2-s7

Juniper ≫ Junos Version18.4 Updater2-s8

Juniper ≫ Junos Version18.4 Updater3

Juniper ≫ Junos Version18.4 Updater3-s1

Juniper ≫ Junos Version18.4 Updater3-s2

Juniper ≫ Junos Version18.4 Updater3-s3

Juniper ≫ Junos Version18.4 Updater3-s4

Juniper ≫ Junos Version18.4 Updater3-s5

Juniper ≫ Junos Version18.4 Updater3-s6

Juniper ≫ Junos Version18.4 Updater3-s7

Juniper ≫ Junos Version18.4 Updater3-s8

Juniper ≫ Junos Version19.4 Updater1

Juniper ≫ Junos Version19.4 Updater1-s1

Juniper ≫ Junos Version19.4 Updater1-s2

Juniper ≫ Junos Version19.4 Updater1-s3

Juniper ≫ Junos Version19.4 Updater2

Juniper ≫ Junos Version19.4 Updater2-s1

Juniper ≫ Junos Version19.4 Updater2-s2

Juniper ≫ Junos Version19.4 Updater2-s3

Juniper ≫ Junos Version19.4 Updater3

Juniper ≫ Junos Version19.4 Updater3-s1

Juniper ≫ Junos Version19.4 Updater3-s2

Juniper ≫ Junos Version20.1 Updater1

Juniper ≫ Junos Version20.1 Updater1-s1

Juniper ≫ Junos Version20.1 Updater1-s2

Juniper ≫ Junos Version20.1 Updater1-s3

Juniper ≫ Junos Version20.1 Updater1-s4

Juniper ≫ Junos Version20.1 Updater2

Juniper ≫ Junos Version20.1 Updater2-s1

Juniper ≫ Junos Version20.2 Updater1

Juniper ≫ Junos Version20.2 Updater1-s1

Juniper ≫ Junos Version20.2 Updater1-s2

Juniper ≫ Junos Version20.2 Updater1-s3

Juniper ≫ Junos Version20.2 Updater2

Juniper ≫ Junos Version20.2 Updater2-s1

Juniper ≫ Junos Version20.2 Updater2-s2

Juniper ≫ Junos Version20.2 Updater2-s3

Juniper ≫ Junos Version20.2 Updater3

Juniper ≫ Junos Version20.2 Updater3-s1

Juniper ≫ Junos Version20.4 Updater1

Juniper ≫ Junos Version20.4 Updater1-s1

Juniper ≫ Junos Version20.4 Updater2

Juniper ≫ Junos Version20.4 Updater2-s1

Juniper ≫ Junos Version21.1 Updater1

Juniper ≫ Junos Version18.4 Update-

   Juniper ≫ Srx100 Version-
   Juniper ≫ Srx110 Version-
   Juniper ≫ Srx1400 Version-
   Juniper ≫ Srx1500 Version-
   Juniper ≫ Srx210 Version-
   Juniper ≫ Srx220 Version-
   Juniper ≫ Srx240 Version-
   Juniper ≫ Srx240h2 Version-
   Juniper ≫ Srx300 Version-
   Juniper ≫ Srx320 Version-
   Juniper ≫ Srx340 Version-
   Juniper ≫ Srx3400 Version-
   Juniper ≫ Srx345 Version-
   Juniper ≫ Srx3600 Version-
   Juniper ≫ Srx380 Version-
   Juniper ≫ Srx4000 Version-
   Juniper ≫ Srx4100 Version-
   Juniper ≫ Srx4200 Version-
   Juniper ≫ Srx4600 Version-
   Juniper ≫ Srx5000 Version-
   Juniper ≫ Srx5400 Version-
   Juniper ≫ Srx550 Version-
   Juniper ≫ Srx550 Hm Version-
   Juniper ≫ Srx550m Version-
   Juniper ≫ Srx5600 Version-
   Juniper ≫ Srx5800 Version-
   Juniper ≫ Srx650 Version-

Juniper ≫ Junos Version18.4 Updater1

Juniper ≫ Junos Version18.4 Updater1-s1

Juniper ≫ Junos Version18.4 Updater1-s2

Juniper ≫ Junos Version18.4 Updater1-s3

Juniper ≫ Junos Version18.4 Updater1-s4

Juniper ≫ Junos Version18.4 Updater1-s5

Juniper ≫ Junos Version18.4 Updater1-s6

Juniper ≫ Junos Version18.4 Updater1-s7

Juniper ≫ Junos Version18.4 Updater2

Juniper ≫ Junos Version18.4 Updater2-s1

Juniper ≫ Junos Version18.4 Updater2-s2

Juniper ≫ Junos Version18.4 Updater2-s3

Juniper ≫ Junos Version18.4 Updater2-s4

Juniper ≫ Junos Version18.4 Updater2-s5

Juniper ≫ Junos Version18.4 Updater2-s6

Juniper ≫ Junos Version18.4 Updater2-s7

Juniper ≫ Junos Version18.4 Updater2-s8

Juniper ≫ Junos Version18.4 Updater3

Juniper ≫ Junos Version18.4 Updater3-s1

Juniper ≫ Junos Version18.4 Updater3-s2

Juniper ≫ Junos Version18.4 Updater3-s3

Juniper ≫ Junos Version18.4 Updater3-s4

Juniper ≫ Junos Version18.4 Updater3-s5

Juniper ≫ Junos Version18.4 Updater3-s6

Juniper ≫ Junos Version18.4 Updater3-s7

Juniper ≫ Junos Version18.4 Updater3-s8

Juniper ≫ Junos Version19.4 Updater1

Juniper ≫ Junos Version19.4 Updater1-s1

Juniper ≫ Junos Version19.4 Updater1-s2

Juniper ≫ Junos Version19.4 Updater1-s3

Juniper ≫ Junos Version19.4 Updater2

Juniper ≫ Junos Version19.4 Updater2-s1

Juniper ≫ Junos Version19.4 Updater2-s2

Juniper ≫ Junos Version19.4 Updater2-s3

Juniper ≫ Junos Version19.4 Updater3

Juniper ≫ Junos Version19.4 Updater3-s1

Juniper ≫ Junos Version19.4 Updater3-s2

Juniper ≫ Junos Version19.4 Updater3-s3

Juniper ≫ Junos Version20.1 Updater1

Juniper ≫ Junos Version20.1 Updater1-s1

Juniper ≫ Junos Version20.1 Updater1-s2

Juniper ≫ Junos Version20.1 Updater1-s3

Juniper ≫ Junos Version20.1 Updater1-s4

Juniper ≫ Junos Version20.1 Updater2

Juniper ≫ Junos Version20.1 Updater2-s1

Juniper ≫ Junos Version20.2 Updater1

Juniper ≫ Junos Version20.2 Updater1-s1

Juniper ≫ Junos Version20.2 Updater1-s2

Juniper ≫ Junos Version20.2 Updater1-s3

Juniper ≫ Junos Version20.2 Updater2

Juniper ≫ Junos Version20.2 Updater2-s1

Juniper ≫ Junos Version20.2 Updater2-s2

Juniper ≫ Junos Version20.2 Updater2-s3

Juniper ≫ Junos Version20.2 Updater3

Juniper ≫ Junos Version20.2 Updater3-s1

Juniper ≫ Junos Version20.3 Updater1

Juniper ≫ Junos Version20.3 Updater1-s1

Juniper ≫ Junos Version20.3 Updater2

Juniper ≫ Junos Version20.4 Updater1

Juniper ≫ Junos Version20.4 Updater1-s1

Juniper ≫ Junos Version21.1 Updater1-s1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.06%	0.164

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.3	1.6	3.6	CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	2.9	5.5	2.9	AV:A/AC:M/Au:N/C:N/I:N/A:P
sirt@juniper.net	6.5	2.8	3.6	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition

The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state.

https://kb.juniper.net/JSA11191

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-0289

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-0289

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-0289

EUVD