CVE-2021-0233: juniper networks junos os Uncontrolled Resource Consumption

Vulnerability summary

CVE-2021-0233 is a high (CVSS 7.5) Uncontrolled Resource Consumption vulnerability in juniper networks junos os. EPSS estimates a 0.96% chance of exploitation in the next 30 days, higher than 60.9% of scored vulnerabilities.

Timeline

1. 22-04-2021
   PublishedVulnerability first disclosed.
2. 16-09-2024
   Last modifiedVulnerability information updated.

Description

A vulnerability in Juniper Networks Junos OS ACX500 Series, ACX4000 Series, may allow an attacker to cause a Denial of Service (DoS) by sending a high rate of specific packets to the device, resulting in a Forwarding Engine Board (FFEB) crash. Continued receipt of these packets will sustain the Denial of Service (DoS) condition. This issue affects Juniper Networks Junos OS on ACX500 Series, ACX4000 Series: 17.4 versions prior to 17.4R3-S2.

• CWE-400Uncontrolled Resource ConsumptionThe product does not properly control the allocation and maintenance of a limited resource.
• CWE-794Incomplete Filtering of Multiple Instances of Special ElementsThe product receives data from an upstream component, but does not filter all instances of a special element before sending it to a downstream component.