Lucene search
JuniperCVE-2021-0247HistoryApr 22, 2021 - 8:15 p.m.
CVE-2021-0247
2021-04-2220:15:09
CWE-362
juniper
web.nvd.nist.gov
23
4
cve-2021-0247
juniper networks
junos os
firewall
vulnerability
race condition
security
nvd
qfx series
ptx series
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
5.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
AI Score
5.4
Confidence
High
EPSS
0.001
Percentile
31.0%
A Race Condition (Concurrent Execution using Shared Resource with Improper Synchronization) vulnerability in the firewall process (dfwd) of Juniper Networks Junos OS allows an attacker to bypass the firewall rule sets applied to the input loopback filter on any interfaces of a device. This issue is detectable by reviewing the PFE firewall rules, as well as the firewall counters and seeing if they are incrementing or not. For example: show firewall Filter: default_bpdu_filter Filter: FILTER-INET-01 Counters: Name Bytes Packets output-match-inet 0 0 <<<<<< missing firewall packet count This issue affects: Juniper Networks Junos OS 14.1X53 versions prior to 14.1X53-D53 on QFX Series; 14.1 versions 14.1R1 and later versions prior to 15.1 versions prior to 15.1R7-S6 on QFX Series, PTX Series; 15.1X53 versions prior to 15.1X53-D593 on QFX Series; 16.1 versions prior to 16.1R7-S7 on QFX Series, PTX Series; 16.2 versions prior to 16.2R2-S11, 16.2R3 on QFX Series, PTX Series; 17.1 versions prior to 17.1R2-S11, 17.1R3-S2 on QFX Series, PTX Series; 17.2 versions prior to 17.2R1-S9, 17.2R3-S3 on QFX Series, PTX Series; 17.3 versions prior to 17.3R2-S5, 17.3R3-S7 on QFX Series, PTX Series; 17.4 versions prior to 17.4R2-S9, 17.4R3 on QFX Series, PTX Series; 18.1 versions prior to 18.1R3-S9 on QFX Series, PTX Series; 18.2 versions prior to 18.2R2-S6, 18.2R3-S3 on QFX Series, PTX Series; 18.3 versions prior to 18.3R1-S7, 18.3R2-S3, 18.3R3-S1 on QFX Series, PTX Series; 18.4 versions prior to 18.4R1-S5, 18.4R2-S3, 18.4R2-S7, 18.4R3 on QFX Series, PTX Series; 19.1 versions prior to 19.1R1-S4, 19.1R2-S1, 19.1R3 on QFX Series, PTX Series; 19.2 versions prior to 19.2R1-S3, 19.2R2 on QFX Series, PTX Series.
Affected configurations
Node
juniperjunosMatch14.1x53-
ORjuniperjunosMatch14.1x53d10
ORjuniperjunosMatch14.1x53d15
ORjuniperjunosMatch14.1x53d16
ORjuniperjunosMatch14.1x53d20
ORjuniperjunosMatch14.1x53d25
ORjuniperjunosMatch14.1x53d26
ORjuniperjunosMatch14.1x53d27
ORjuniperjunosMatch14.1x53d30
ORjuniperjunosMatch14.1x53d34
ORjuniperjunosMatch14.1x53d35
ORjuniperjunosMatch14.1x53d38
ORjuniperjunosMatch14.1x53d40
ORjuniperjunosMatch14.1x53d42
ORjuniperjunosMatch14.1x53d43
ORjuniperjunosMatch14.1x53d44
ORjuniperjunosMatch14.1x53d45
ORjuniperjunosMatch14.1x53d46
ORjuniperjunosMatch14.1x53d47
ORjuniperjunosMatch14.1x53d48
ORjuniperjunosMatch14.1x53d49
ORjuniperjunosMatch14.1x53d50
ORjuniperjunosMatch14.1x53d51
ORjuniperjunosMatch14.1x53d52
ORjuniperjunosMatch15.1x53-
ORjuniperjunosMatch15.1x53d10
ORjuniperjunosMatch15.1x53d20
ORjuniperjunosMatch15.1x53d21
ORjuniperjunosMatch15.1x53d210
ORjuniperjunosMatch15.1x53d230
ORjuniperjunosMatch15.1x53d231
ORjuniperjunosMatch15.1x53d232
ORjuniperjunosMatch15.1x53d233
ORjuniperjunosMatch15.1x53d234
ORjuniperjunosMatch15.1x53d235
ORjuniperjunosMatch15.1x53d236
ORjuniperjunosMatch15.1x53d237
ORjuniperjunosMatch15.1x53d25
ORjuniperjunosMatch15.1x53d30
ORjuniperjunosMatch15.1x53d31
ORjuniperjunosMatch15.1x53d32
ORjuniperjunosMatch15.1x53d33
ORjuniperjunosMatch15.1x53d34
ORjuniperjunosMatch15.1x53d40
ORjuniperjunosMatch15.1x53d45
ORjuniperjunosMatch15.1x53d47
ORjuniperjunosMatch15.1x53d470
ORjuniperjunosMatch15.1x53d471
ORjuniperjunosMatch15.1x53d48
ORjuniperjunosMatch15.1x53d490
ORjuniperjunosMatch15.1x53d495
ORjuniperjunosMatch15.1x53d50
ORjuniperjunosMatch15.1x53d51
ORjuniperjunosMatch15.1x53d52
ORjuniperjunosMatch15.1x53d55
ORjuniperjunosMatch15.1x53d56
ORjuniperjunosMatch15.1x53d57
ORjuniperjunosMatch15.1x53d58
ORjuniperjunosMatch15.1x53d59
ORjuniperjunosMatch15.1x53d590
ORjuniperjunosMatch15.1x53d591
ORjuniperjunosMatch15.1x53d592
ORjuniperjunosMatch15.1x53d60
ORjuniperjunosMatch15.1x53d61
ORjuniperjunosMatch15.1x53d62
ORjuniperjunosMatch15.1x53d63
ORjuniperjunosMatch15.1x53d64
ORjuniperjunosMatch15.1x53d65
ORjuniperjunosMatch15.1x53d66
ORjuniperjunosMatch15.1x53d67
ORjuniperjunosMatch15.1x53d68
ORjuniperjunosMatch15.1x53d69
ORjuniperjunosMatch15.1x53d70
juniperqfx10002Match-
ORjuniperqfx10008Match-
ORjuniperqfx10016Match-
ORjuniperqfx5100Match-
ORjuniperqfx5110Match-
ORjuniperqfx5120Match-
ORjuniperqfx5130Match-
ORjuniperqfx5200Match-
ORjuniperqfx5210Match-
ORjuniperqfx5220Match-
Node
juniperjunosMatch14.1-
ORjuniperjunosMatch14.1r1
ORjuniperjunosMatch14.1r2
ORjuniperjunosMatch14.1r3
ORjuniperjunosMatch14.1r4
ORjuniperjunosMatch14.1r5
ORjuniperjunosMatch14.1r6
ORjuniperjunosMatch14.1r7
ORjuniperjunosMatch14.1r8
ORjuniperjunosMatch14.1r8-s3
ORjuniperjunosMatch14.1r9
ORjuniperjunosMatch14.2-
ORjuniperjunosMatch14.2r
ORjuniperjunosMatch14.2r1
ORjuniperjunosMatch14.2r2
ORjuniperjunosMatch14.2r3
ORjuniperjunosMatch14.2r4
ORjuniperjunosMatch14.2r5
ORjuniperjunosMatch14.2r6
ORjuniperjunosMatch14.2r7
ORjuniperjunosMatch14.2r7-s6
ORjuniperjunosMatch14.2r7-s7
ORjuniperjunosMatch14.2r7-s8
ORjuniperjunosMatch14.2r8
ORjuniperjunosMatch15.1-
ORjuniperjunosMatch15.1a1
ORjuniperjunosMatch15.1f
ORjuniperjunosMatch15.1f1
ORjuniperjunosMatch15.1f2
ORjuniperjunosMatch15.1f2-s1
ORjuniperjunosMatch15.1f2-s2
ORjuniperjunosMatch15.1f2-s3
ORjuniperjunosMatch15.1f2-s4
ORjuniperjunosMatch15.1f3
ORjuniperjunosMatch15.1f4
ORjuniperjunosMatch15.1f5
ORjuniperjunosMatch15.1f5-s7
ORjuniperjunosMatch15.1f6
ORjuniperjunosMatch15.1f6-s1
ORjuniperjunosMatch15.1f6-s10
ORjuniperjunosMatch15.1f6-s12
ORjuniperjunosMatch15.1f6-s2
ORjuniperjunosMatch15.1f6-s3
ORjuniperjunosMatch15.1f6-s4
ORjuniperjunosMatch15.1f6-s5
ORjuniperjunosMatch15.1f6-s6
ORjuniperjunosMatch15.1f6-s7
ORjuniperjunosMatch15.1f6-s8
ORjuniperjunosMatch15.1f6-s9
ORjuniperjunosMatch15.1f7
ORjuniperjunosMatch15.1r
ORjuniperjunosMatch15.1r1
ORjuniperjunosMatch15.1r2
ORjuniperjunosMatch15.1r3
ORjuniperjunosMatch15.1r4
ORjuniperjunosMatch15.1r4-s7
ORjuniperjunosMatch15.1r4-s8
ORjuniperjunosMatch15.1r4-s9
ORjuniperjunosMatch15.1r5
ORjuniperjunosMatch15.1r5-s1
ORjuniperjunosMatch15.1r5-s3
ORjuniperjunosMatch15.1r5-s5
ORjuniperjunosMatch15.1r5-s6
ORjuniperjunosMatch15.1r6
ORjuniperjunosMatch15.1r6-s1
ORjuniperjunosMatch15.1r6-s2
ORjuniperjunosMatch15.1r6-s3
ORjuniperjunosMatch15.1r6-s4
ORjuniperjunosMatch15.1r6-s6
ORjuniperjunosMatch15.1r7
ORjuniperjunosMatch15.1r7-s1
ORjuniperjunosMatch15.1r7-s2
ORjuniperjunosMatch15.1r7-s3
ORjuniperjunosMatch15.1r7-s4
ORjuniperjunosMatch15.1r7-s5
ORjuniperjunosMatch16.1-
ORjuniperjunosMatch16.1r
ORjuniperjunosMatch16.1r1
ORjuniperjunosMatch16.1r2
ORjuniperjunosMatch16.1r3
ORjuniperjunosMatch16.1r3-s10
ORjuniperjunosMatch16.1r3-s11
ORjuniperjunosMatch16.1r3-s8
ORjuniperjunosMatch16.1r4
ORjuniperjunosMatch16.1r4-s12
ORjuniperjunosMatch16.1r4-s2
ORjuniperjunosMatch16.1r4-s3
ORjuniperjunosMatch16.1r4-s4
ORjuniperjunosMatch16.1r4-s6
ORjuniperjunosMatch16.1r4-s8
ORjuniperjunosMatch16.1r4-s9
ORjuniperjunosMatch16.1r5
ORjuniperjunosMatch16.1r5-s4
ORjuniperjunosMatch16.1r6
ORjuniperjunosMatch16.1r6-s1
ORjuniperjunosMatch16.1r6-s3
ORjuniperjunosMatch16.1r6-s4
ORjuniperjunosMatch16.1r6-s6
ORjuniperjunosMatch16.1r7
ORjuniperjunosMatch16.1r7-s2
ORjuniperjunosMatch16.1r7-s3
ORjuniperjunosMatch16.1r7-s4
ORjuniperjunosMatch16.1r7-s5
ORjuniperjunosMatch16.1r7-s6
ORjuniperjunosMatch16.2-
ORjuniperjunosMatch16.2r1
ORjuniperjunosMatch16.2r1-s6
ORjuniperjunosMatch16.2r2
ORjuniperjunosMatch16.2r2-s1
ORjuniperjunosMatch16.2r2-s10
ORjuniperjunosMatch16.2r2-s2
ORjuniperjunosMatch16.2r2-s5
ORjuniperjunosMatch16.2r2-s6
ORjuniperjunosMatch16.2r2-s7
ORjuniperjunosMatch16.2r2-s8
ORjuniperjunosMatch16.2r2-s9
ORjuniperjunosMatch17.1-
ORjuniperjunosMatch17.1r1
ORjuniperjunosMatch17.1r1-s7
ORjuniperjunosMatch17.1r2
ORjuniperjunosMatch17.1r2-s1
ORjuniperjunosMatch17.1r2-s10
ORjuniperjunosMatch17.1r2-s2
ORjuniperjunosMatch17.1r2-s3
ORjuniperjunosMatch17.1r2-s4
ORjuniperjunosMatch17.1r2-s5
ORjuniperjunosMatch17.1r2-s6
ORjuniperjunosMatch17.1r2-s7
ORjuniperjunosMatch17.1r2-s8
ORjuniperjunosMatch17.1r2-s9
ORjuniperjunosMatch17.1r3
ORjuniperjunosMatch17.1r3-s1
ORjuniperjunosMatch17.2-
ORjuniperjunosMatch17.2r1
ORjuniperjunosMatch17.2r1-s1
ORjuniperjunosMatch17.2r1-s2
ORjuniperjunosMatch17.2r1-s3
ORjuniperjunosMatch17.2r1-s4
ORjuniperjunosMatch17.2r1-s5
ORjuniperjunosMatch17.2r1-s6
ORjuniperjunosMatch17.2r1-s7
ORjuniperjunosMatch17.2r1-s8
ORjuniperjunosMatch17.2r2
ORjuniperjunosMatch17.2r2-s11
ORjuniperjunosMatch17.2r2-s4
ORjuniperjunosMatch17.2r2-s6
ORjuniperjunosMatch17.2r2-s7
ORjuniperjunosMatch17.2r3
ORjuniperjunosMatch17.2r3-s1
ORjuniperjunosMatch17.2r3-s2
ORjuniperjunosMatch17.3-
ORjuniperjunosMatch17.3r1
ORjuniperjunosMatch17.3r1-s1
ORjuniperjunosMatch17.3r1-s4
ORjuniperjunosMatch17.3r2
ORjuniperjunosMatch17.3r2-s1
ORjuniperjunosMatch17.3r2-s2
ORjuniperjunosMatch17.3r2-s3
ORjuniperjunosMatch17.3r2-s4
ORjuniperjunosMatch17.3r3
ORjuniperjunosMatch17.3r3-s1
ORjuniperjunosMatch17.3r3-s10
ORjuniperjunosMatch17.3r3-s2
ORjuniperjunosMatch17.3r3-s3
ORjuniperjunosMatch17.3r3-s4
ORjuniperjunosMatch17.3r3-s5
ORjuniperjunosMatch17.3r3-s6
ORjuniperjunosMatch17.4-
ORjuniperjunosMatch17.4r1
ORjuniperjunosMatch17.4r1-s1
ORjuniperjunosMatch17.4r1-s2
ORjuniperjunosMatch17.4r1-s3
ORjuniperjunosMatch17.4r1-s4
ORjuniperjunosMatch17.4r1-s5
ORjuniperjunosMatch17.4r1-s6
ORjuniperjunosMatch17.4r1-s7
ORjuniperjunosMatch17.4r2
ORjuniperjunosMatch17.4r2-s1
ORjuniperjunosMatch17.4r2-s10
ORjuniperjunosMatch17.4r2-s11
ORjuniperjunosMatch17.4r2-s2
ORjuniperjunosMatch17.4r2-s3
ORjuniperjunosMatch17.4r2-s4
ORjuniperjunosMatch17.4r2-s5
ORjuniperjunosMatch17.4r2-s6
ORjuniperjunosMatch17.4r2-s7
ORjuniperjunosMatch17.4r2-s8
ORjuniperjunosMatch18.1-
ORjuniperjunosMatch18.1r1
ORjuniperjunosMatch18.1r2
ORjuniperjunosMatch18.1r2-s1
ORjuniperjunosMatch18.1r2-s2
ORjuniperjunosMatch18.1r2-s4
ORjuniperjunosMatch18.1r3
ORjuniperjunosMatch18.1r3-s1
ORjuniperjunosMatch18.1r3-s10
ORjuniperjunosMatch18.1r3-s11
ORjuniperjunosMatch18.1r3-s2
ORjuniperjunosMatch18.1r3-s3
ORjuniperjunosMatch18.1r3-s4
ORjuniperjunosMatch18.1r3-s5
ORjuniperjunosMatch18.1r3-s6
ORjuniperjunosMatch18.1r3-s7
ORjuniperjunosMatch18.1r3-s8
ORjuniperjunosMatch18.2-
ORjuniperjunosMatch18.2r1
ORjuniperjunosMatch18.2r1-
ORjuniperjunosMatch18.2r1-s2
ORjuniperjunosMatch18.2r1-s3
ORjuniperjunosMatch18.2r1-s4
ORjuniperjunosMatch18.2r1-s5
ORjuniperjunosMatch18.2r2
ORjuniperjunosMatch18.2r2-s1
ORjuniperjunosMatch18.2r2-s2
ORjuniperjunosMatch18.2r2-s3
ORjuniperjunosMatch18.2r2-s4
ORjuniperjunosMatch18.2r2-s5
ORjuniperjunosMatch18.2r3
ORjuniperjunosMatch18.2r3-s1
ORjuniperjunosMatch18.2r3-s2
ORjuniperjunosMatch18.3-
ORjuniperjunosMatch18.3r1
ORjuniperjunosMatch18.3r1-s1
ORjuniperjunosMatch18.3r1-s2
ORjuniperjunosMatch18.3r1-s3
ORjuniperjunosMatch18.3r1-s4
ORjuniperjunosMatch18.3r1-s5
ORjuniperjunosMatch18.3r1-s6
ORjuniperjunosMatch18.3r3
ORjuniperjunosMatch18.4r2
ORjuniperjunosMatch18.4r2-s1
ORjuniperjunosMatch18.4r2-s2
ORjuniperjunosMatch19.1-
ORjuniperjunosMatch19.1r1
ORjuniperjunosMatch19.1r1-s1
ORjuniperjunosMatch19.1r1-s2
ORjuniperjunosMatch19.1r1-s3
ORjuniperjunosMatch19.1r2
ORjuniperjunosMatch19.2-
ORjuniperjunosMatch19.2r1
ORjuniperjunosMatch19.2r1-s1
ORjuniperjunosMatch19.2r1-s2
juniperptx1000Match-
ORjuniperptx10001-36mrMatch-
ORjuniperptx10002Match-
ORjuniperptx10003Match-
ORjuniperptx10004Match-
ORjuniperptx10008Match-
ORjuniperptx10016Match-
ORjuniperptx3000Match-
ORjuniperptx5000Match-
ORjuniperqfx10002Match-
ORjuniperqfx10008Match-
ORjuniperqfx10016Match-
ORjuniperqfx5100Match-
ORjuniperqfx5110Match-
ORjuniperqfx5120Match-
ORjuniperqfx5130Match-
ORjuniperqfx5200Match-
ORjuniperqfx5210Match-
ORjuniperqfx5220Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| juniper | junos | 14.1x53 | cpe:2.3:o:juniper:junos:14.1x53:-:*:*:*:*:*:* |
| juniper | junos | 14.1x53 | cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:* |
| juniper | junos | 14.1x53 | cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:* |
| juniper | junos | 14.1x53 | cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:* |
| juniper | junos | 14.1x53 | cpe:2.3:o:juniper:junos:14.1x53:d20:*:*:*:*:*:* |
| juniper | junos | 14.1x53 | cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:* |
| juniper | junos | 14.1x53 | cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:* |
| juniper | junos | 14.1x53 | cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:* |
| juniper | junos | 14.1x53 | cpe:2.3:o:juniper:junos:14.1x53:d30:*:*:*:*:*:* |
| juniper | junos | 14.1x53 | cpe:2.3:o:juniper:junos:14.1x53:d34:*:*:*:*:*:* |
CNA Affected
[
{
"platforms": [
"QFX Series"
],
"product": "Junos OS",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "14.1X53-D53",
"status": "affected",
"version": "14.1X53",
"versionType": "custom"
},
{
"lessThan": "15.1X53-D593",
"status": "affected",
"version": "15.1X53",
"versionType": "custom"
}
]
},
{
"platforms": [
"QFX Series, PTX Series"
],
"product": "Junos OS",
"vendor": "Juniper Networks",
"versions": [
{
"lessThan": "14.1*",
"status": "affected",
"version": "14.1R1",
"versionType": "custom"
},
{
"lessThan": "15.1R7-S6",
"status": "affected",
"version": "15.1",
"versionType": "custom"
},
{
"lessThan": "16.1R7-S7",
"status": "affected",
"version": "16.1",
"versionType": "custom"
},
{
"lessThan": "16.2R2-S11, 16.2R3",
"status": "affected",
"version": "16.2",
"versionType": "custom"
},
{
"lessThan": "17.1R2-S11, 17.1R3-S2",
"status": "affected",
"version": "17.1",
"versionType": "custom"
},
{
"lessThan": "17.2R1-S9, 17.2R3-S3",
"status": "affected",
"version": "17.2",
"versionType": "custom"
},
{
"lessThan": "17.3R2-S5, 17.3R3-S7",
"status": "affected",
"version": "17.3",
"versionType": "custom"
},
{
"lessThan": "17.4R2-S9, 17.4R3",
"status": "affected",
"version": "17.4",
"versionType": "custom"
},
{
"lessThan": "18.1R3-S9",
"status": "affected",
"version": "18.1",
"versionType": "custom"
},
{
"lessThan": "18.2R2-S6, 18.2R3-S3",
"status": "affected",
"version": "18.2",
"versionType": "custom"
},
{
"lessThan": "18.3R1-S7, 18.3R2-S3, 18.3R3-S1",
"status": "affected",
"version": "18.3",
"versionType": "custom"
},
{
"lessThan": "18.4R1-S5, 18.4R2-S3, 18.4R3",
"status": "affected",
"version": "18.4",
"versionType": "custom"
},
{
"lessThan": "19.1R1-S4, 19.1R2-S1, 19.1R3",
"status": "affected",
"version": "19.1",
"versionType": "custom"
},
{
"lessThan": "19.2R1-S3, 19.2R2",
"status": "affected",
"version": "19.2",
"versionType": "custom"
}
]
}
]References
Social References
More
Related
prion
prion
Race condition
2021-04-22 20:15:00
cvelist
cvelist
nessus
nessus
Juniper Junos OS Vulnerability (JSA11140)
2021-04-15 00:00:00
nvd
nvd
CVE-2021-0247
2021-04-22 20:15:09
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS3
5.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
AI Score
5.4
Confidence
High
EPSS
0.001
Percentile
31.0%
Related for CVE-2021-0247