CVE-2021-0224

Description

A vulnerability in the handling of internal resources necessary to bring up a large number of Layer 2 broadband remote access subscriber (BRAS) nodes in Juniper Networks Junos OS can cause the Access Node Control Protocol daemon (ANCPD) to crash and restart, leading to a Denial of Service (DoS) condition. Continued processing of spoofed subscriber nodes will create a sustained Denial of Service (DoS) condition. When the number of subscribers attempting to connect exceeds the configured maximum-discovery-table-entries value, the subscriber fails to map to an internal neighbor entry, causing the ANCPD process to crash. This issue affects Juniper Networks Junos OS: All versions prior to 17.3R3-S12; 17.4 versions prior to 17.4R2-S13; 18.1 versions prior to 18.1R3-S13; 18.2 versions prior to 18.2R3-S8; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R1-S8, 18.4R3-S8; 19.1 versions prior to 19.1R3-S4; 19.2 versions prior to 19.2R3-S2; 19.3 versions prior to 19.3R3-S1; 19.4 versions prior to 19.4R3-S1; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R2; 20.3 versions prior to 20.3R2.

Risk Information

Base Score
6.5
MODERATE
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.081

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are fixed in junos 17.3R3-S12NCM
Vulnerabilities CVE-2021-0224,CVE-2021-0254,CVE-2021-0255,CVE-2021-0256 are fixed in junos 17.4R2-S13NCM
Multiple Vulnerabilities are fixed in junos 18.1R3-S13NCM
Multiple Vulnerabilities are fixed in junos 18.2R3-S8NCM
Multiple Vulnerabilities are fixed in junos 18.3R3-S5NCM
Vulnerabilities CVE-2021-0224 are fixed in junos 18.4R3-S8NCM
Multiple Vulnerabilities are fixed in junos 19.1R3-S4NCM
Multiple Vulnerabilities are fixed in junos 19.2R3-S2NCM
Multiple Vulnerabilities are fixed in junos 19.3R3-S1NCM
Multiple Vulnerabilities are fixed in junos 19.4R3-S1NCM
Multiple Vulnerabilities are fixed in junos 20.1R2NCM
Multiple Vulnerabilities are fixed in junos 20.2R2NCM
Multiple Vulnerabilities are fixed in junos 20.3R2.NCM
Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2021-0224)NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1
PATCH-1704488Security Update for junos 9.2r1

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234