5
CVSSv2

CVE-2021-0206

Published: 15/01/2021 Updated: 21/01/2021
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an malicious user to send a specific packet causing the packet forwarding engine (PFE) to crash and restart, resulting in a Denial of Service (DoS). By continuously sending these specific packets, an attacker can repeatedly disable the PFE causing a sustained Denial of Service (DoS). This issue only affects Juniper Networks NFX Series, SRX Series platforms when SSL Proxy is configured. This issue affects Juniper Networks Junos OS on NFX Series and SRX Series: 18.3 versions before 18.3R3-S4; 18.4 versions before 18.4R3-S1; 19.1 versions before 19.1R1-S6, 19.1R2-S2, 19.1R3; 19.2 versions before 19.2R1-S2, 19.2R2; 19.3 versions before 19.3R2. This issue does not affect Juniper Networks Junos OS versions on NFX Series and SRX Series before 18.3R1.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

juniper junos 18.3

juniper junos 18.4

juniper junos 19.1

juniper junos 19.2

juniper junos 19.3