CVE-2021-0299CWE-755

Junos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet

High · published October 19, 2021

CVSS v3.1
7.5
EPSS
1%
Percentile
62.7
In the wild
Unconfirmed
What it is

An Improper Handling of Exceptional Conditions vulnerability in the processing of a transit or directly received malformed IPv6 packet in Juniper Networks Junos OS results in a kernel crash, causing the device to restart, leading to a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue only affects systems with IPv6 configured. Devices with only IPv4 configured are not vulnerable to this issue. This issue affects Juniper Networks Junos OS: 19.4 versions prior to 19.4R3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R1-S1, 20.2R2. This issue does not affect Juniper Networks Junos OS versions prior to 19.4R1.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01008 · 62.7th percentile
Weakness
CWE-755 · Improper Handling of Exceptional Conditions
Published
2021-10-19T18:16Z
EPSS history
Timeline
  • 19 OCT 18:16Z
    Junos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet
    cvelistv5