CVE-2026-21920

EPSS 0.45%
Veröffentlicht 15.01.2026 20:28:10
Zuletzt bearbeitet 23.01.2026 18:51:59
Erkennungen
Login

Junos OS: SRX Series: If a specific request is processed by the DNS subsystem flowd will crash

An Unchecked Return Value vulnerability in the DNS module of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).




If an SRX Series device configured for DNS processing, receives a specifically formatted DNS request flowd will crash and restart, which causes a service interruption until the process has recovered.

This issue affects Junos OS on SRX Series:



  *  23.4 versions before 23.4R2-S5,
  *  24.2 versions before 24.2R2-S1,
  *  24.4 versions before 24.4R2.






This issue does not affect Junos OS versions before 23.4R1.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

NVD 18 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Juniper ≫ Junos Version 23.4 Update -

   Juniper ≫ Srx1500 Version -
   Juniper ≫ Srx1600 Version -
   Juniper ≫ Srx2300 Version -
   Juniper ≫ Srx300 Version -
   Juniper ≫ Srx320 Version -
   Juniper ≫ Srx340 Version -
   Juniper ≫ Srx345 Version -
   Juniper ≫ Srx380 Version -
   Juniper ≫ Srx4100 Version -
   Juniper ≫ Srx4120 Version -
   Juniper ≫ Srx4200 Version -
   Juniper ≫ Srx4300 Version -
   Juniper ≫ Srx4600 Version -
   Juniper ≫ Srx4700 Version -
   Juniper ≫ Srx5400 Version -
   Juniper ≫ Srx5600 Version -
   Juniper ≫ Srx5800 Version -

Juniper ≫ Junos Version 23.4 Update r1

Juniper ≫ Junos Version 23.4 Update r1-s1

Juniper ≫ Junos Version 23.4 Update r1-s2

Juniper ≫ Junos Version 23.4 Update r2

Juniper ≫ Junos Version 23.4 Update r2-s1

Juniper ≫ Junos Version 23.4 Update r2-s2

Juniper ≫ Junos Version 23.4 Update r2-s3

Juniper ≫ Junos Version 23.4 Update r2-s4

Juniper ≫ Junos Version 24.2 Update -

Juniper ≫ Junos Version 24.2 Update r1

Juniper ≫ Junos Version 24.2 Update r1-s1

Juniper ≫ Junos Version 24.2 Update r1-s2

Juniper ≫ Junos Version 24.2 Update r2

Juniper ≫ Junos Version 24.4 Update -

Juniper ≫ Junos Version 24.4 Update r1

Juniper ≫ Junos Version 24.4 Update r1-s2

Juniper ≫ Junos Version 24.4 Update r1-s3

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.45%	0.369

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Juniper	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Juniper	8.7	0	0	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:X/RE:M/U:X

CWE-252 Unchecked Return Value

The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.

https://supportportal.juniper.net/JSA106020

Vendor Advisory

https://kb.juniper.net/JSA106020

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-21920

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-21920

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-21920

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-21920