CVE-2021-0215

Description

On Juniper Networks Junos EX series, QFX Series, MX Series and SRX branch series devices, a memory leak occurs every time the 802.1X authenticator port interface flaps which can lead to other processes, such as the pfex process, responsible for packet forwarding, to crash and restart. An administrator can use the following CLI command to monitor the status of memory consumption: user@device> show task memory detail Please refer to https://kb.juniper.net/KB31522 for details. This issue affects Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D54; 15.1X49 versions prior to 15.1X49-D240 ; 15.1X53 versions prior to 15.1X53-D593; 16.1 versions prior to 16.1R7-S8; 17.2 versions prior to 17.2R3-S4; 17.3 versions prior to 17.3R3-S8; 17.4 versions prior to 17.4R2-S11, 17.4R3-S2; 18.1 versions prior to 18.1R3-S10 ; 18.2 versions prior to 18.2R2-S7, 18.2R3-S3; 18.3 versions prior to 18.3R2-S4, 18.3R3-S2; 18.4 versions prior to 18.4R1-S7, 18.4R2-S4, 18.4R3-S2; 19.1 versions prior to 19.1R1-S5, 19.1R2-S2, 19.1R3; 19.2 versions prior to 19.2R1-S5, 19.2R2; 19.3 versions prior to 19.3R2-S3, 19.3R3; 19.4 versions prior to 19.4R1-S2, 19.4R2. This issue does not affect Juniper Networks Junos OS 12.3, 15.1.

Risk Information

Base Score
6.5
MODERATE
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.107

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2020-1631,CVE-2021-0215 are fixed in junos 14.1X53-D54NCM
Vulnerabilities CVE-2021-0208,CVE-2021-0215 are fixed in junos 15.1X49-D240NCM
Vulnerabilities CVE-2021-0215,CVE-2021-0247 are fixed in junos 15.1X53-D593NCM
Multiple Vulnerabilities are fixed in junos 16.1R7-S8NCM
Multiple Vulnerabilities are fixed in junos 17.2R3-S4NCM
Multiple Vulnerabilities are fixed in junos 17.3R3-S8NCM
Multiple Vulnerabilities are fixed in junos 17.4R3-S2NCM
Multiple Vulnerabilities are fixed in junos 18.1R3-S10NCM
Multiple Vulnerabilities are fixed in junos 18.2R3-S3NCM
Multiple Vulnerabilities are fixed in junos 18.3R3-S2NCM
Multiple Vulnerabilities are fixed in junos 18.4R3-S2NCM
Multiple Vulnerabilities are fixed in junos 19.1R3NCM
Multiple Vulnerabilities are fixed in junos 19.2R2NCM
Multiple Vulnerabilities are fixed in junos 19.3R3NCM
Multiple Vulnerabilities are fixed in junos 19.4R2.NCM
Uncontrolled Resource Consumption Vulnerability (CVE-2021-0215)NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234