cnvd - cnvd-2022-06697

cnvd-2022-06697

Vulnerability from cnvd

Title: Juniper Networks Junos OS拒绝服务漏洞（CNVD-2022-06697）

Description:

Junos OS是Juniper Networks硬件路由器中使用的基于FreeBSD的操作系统。它是Juniper网络路由，交换和安全设备中使用的操作系统。

Juniper Networks Junos OS SRX300系列、SRX500系列、SRX1500和SRX5000系列的流守护程序 (flowd) 存在拒绝服务漏洞。该漏洞源于程序未对异常数据包进行正确处理。攻击者可利用该漏洞造成flowd/srxpfe进程崩溃，导致拒绝服务。

Severity: 中

Patch Name: Juniper Networks Junos OS拒绝服务漏洞（CNVD-2022-06697）的补丁

Patch Description:

Junos OS是Juniper Networks硬件路由器中使用的基于FreeBSD的操作系统。它是Juniper网络路由，交换和安全设备中使用的操作系统。

Juniper Networks Junos OS SRX300系列、SRX500系列、SRX1500和SRX5000系列的流守护程序 (flowd) 存在拒绝服务漏洞。该漏洞源于程序未对异常数据包进行正确处理。攻击者可利用该漏洞造成flowd/srxpfe进程崩溃，导致拒绝服务。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11226&cat=SIRT_1&actp=LIST。

Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-31364

Impacted products

Name
['Juniper Networks Junos OS SRX1500 19.1', 'Juniper Networks Junos OS SRX1500 18.4', 'Juniper Networks Junos OS SRX1500 19.2', 'Juniper Networks Junos OS SRX1500 19.3', 'Juniper Networks Junos OS SRX1500 20.2', 'Juniper Networks Junos OS SRX1500 20.3', 'Juniper Networks Junos OS SRX1500 < 17.4R3-S5', 'Juniper Networks Junos OS SRX1500 20.4', 'Juniper Networks Junos OS SRX1500 20.1', 'Juniper Networks Junos OS SRX1500 19.4', 'Juniper Networks Junos OS SRX1500 18.3', 'Juniper Networks Junos OS SRX300 Series 19.1', 'Juniper Networks Junos OS SRX300 Series 18.4', 'Juniper Networks Junos OS SRX300 Series 19.2', 'Juniper Networks Junos OS SRX300 Series 19.3', 'Juniper Networks Junos OS SRX300 Series 20.2', 'Juniper Networks Junos OS SRX300 Series 20.3', 'Juniper Networks Junos OS SRX300 Series < 17.4R3-S5', 'Juniper Networks Junos OS SRX300 Series 20.4', 'Juniper Networks Junos OS SRX300 Series 20.1', 'Juniper Networks Junos OS SRX300 Series 19.4', 'Juniper Networks Junos OS SRX300 Series 18.3', 'Juniper Networks Junos OS SRX500 Series 19.1', 'Juniper Networks Junos OS SRX500 Series 18.4', 'Juniper Networks Junos OS SRX500 Series 19.2', 'Juniper Networks Junos OS SRX500 Series 19.3', 'Juniper Networks Junos OS SRX500 Series 20.2', 'Juniper Networks Junos OS SRX500 Series 20.3', 'Juniper Networks Junos OS SRX500 Series < 17.4R3-S5', 'Juniper Networks Junos OS SRX500 Series 20.4', 'Juniper Networks Junos OS SRX500 Series 20.1', 'Juniper Networks Junos OS SRX500 Series 19.4', 'Juniper Networks Junos OS SRX500 Series 18.3', 'Juniper Networks Junos OS SRX5000 Series with SPC2 19.1', 'Juniper Networks Junos OS SRX5000 Series with SPC2 18.4', 'Juniper Networks Junos OS SRX5000 Series with SPC2 19.2', 'Juniper Networks Junos OS SRX5000 Series with SPC2 19.3', 'Juniper Networks Junos OS SRX5000 Series with SPC2 20.2', 'Juniper Networks Junos OS SRX5000 Series with SPC2 20.3', 'Juniper Networks Junos OS SRX5000 Series with SPC2 < 17.4R3-S5', 'Juniper Networks Junos OS SRX5000 Series with SPC2 20.4', 'Juniper Networks Junos OS SRX5000 Series with SPC2 20.1', 'Juniper Networks Junos OS SRX5000 Series with SPC2 19.4', 'Juniper Networks Junos OS SRX5000 Series with SPC2 18.3']

Name

['Juniper Networks Junos OS SRX1500 19.1', 'Juniper Networks Junos OS SRX1500 18.4', 'Juniper Networks Junos OS SRX1500 19.2', 'Juniper Networks Junos OS SRX1500 19.3', 'Juniper Networks Junos OS SRX1500 20.2', 'Juniper Networks Junos OS SRX1500 20.3', 'Juniper Networks Junos OS SRX1500 < 17.4R3-S5', 'Juniper Networks Junos OS SRX1500 20.4', 'Juniper Networks Junos OS SRX1500 20.1', 'Juniper Networks Junos OS SRX1500 19.4', 'Juniper Networks Junos OS SRX1500 18.3', 'Juniper Networks Junos OS SRX300 Series 19.1', 'Juniper Networks Junos OS SRX300 Series 18.4', 'Juniper Networks Junos OS SRX300 Series 19.2', 'Juniper Networks Junos OS SRX300 Series 19.3', 'Juniper Networks Junos OS SRX300 Series 20.2', 'Juniper Networks Junos OS SRX300 Series 20.3', 'Juniper Networks Junos OS SRX300 Series < 17.4R3-S5', 'Juniper Networks Junos OS SRX300 Series 20.4', 'Juniper Networks Junos OS SRX300 Series 20.1', 'Juniper Networks Junos OS SRX300 Series 19.4', 'Juniper Networks Junos OS SRX300 Series 18.3', 'Juniper Networks Junos OS SRX500 Series 19.1', 'Juniper Networks Junos OS SRX500 Series 18.4', 'Juniper Networks Junos OS SRX500 Series 19.2', 'Juniper Networks Junos OS SRX500 Series 19.3', 'Juniper Networks Junos OS SRX500 Series 20.2', 'Juniper Networks Junos OS SRX500 Series 20.3', 'Juniper Networks Junos OS SRX500 Series < 17.4R3-S5', 'Juniper Networks Junos OS SRX500 Series 20.4', 'Juniper Networks Junos OS SRX500 Series 20.1', 'Juniper Networks Junos OS SRX500 Series 19.4', 'Juniper Networks Junos OS SRX500 Series 18.3', 'Juniper Networks Junos OS SRX5000 Series with SPC2 19.1', 'Juniper Networks Junos OS SRX5000 Series with SPC2 18.4', 'Juniper Networks Junos OS SRX5000 Series with SPC2 19.2', 'Juniper Networks Junos OS SRX5000 Series with SPC2 19.3', 'Juniper Networks Junos OS SRX5000 Series with SPC2 20.2', 'Juniper Networks Junos OS SRX5000 Series with SPC2 20.3', 'Juniper Networks Junos OS SRX5000 Series with SPC2 < 17.4R3-S5', 'Juniper Networks Junos OS SRX5000 Series with SPC2 20.4', 'Juniper Networks Junos OS SRX5000 Series with SPC2 20.1', 'Juniper Networks Junos OS SRX5000 Series with SPC2 19.4', 'Juniper Networks Junos OS SRX5000 Series with SPC2 18.3']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2021-31364",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2021-31364"
    }
  },
  "description": "Junos OS\u662fJuniper Networks\u786c\u4ef6\u8def\u7531\u5668\u4e2d\u4f7f\u7528\u7684\u57fa\u4e8eFreeBSD\u7684\u64cd\u4f5c\u7cfb\u7edf\u3002\u5b83\u662fJuniper\u7f51\u7edc\u8def\u7531\uff0c\u4ea4\u6362\u548c\u5b89\u5168\u8bbe\u5907\u4e2d\u4f7f\u7528\u7684\u64cd\u4f5c\u7cfb\u7edf\u3002\n\nJuniper Networks Junos OS SRX300\u7cfb\u5217\u3001SRX500\u7cfb\u5217\u3001SRX1500\u548cSRX5000\u7cfb\u5217\u7684\u6d41\u5b88\u62a4\u7a0b\u5e8f (flowd) \u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u5bf9\u5f02\u5e38\u6570\u636e\u5305\u8fdb\u884c\u6b63\u786e\u5904\u7406\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210flowd/srxpfe\u8fdb\u7a0b\u5d29\u6e83\uff0c\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11226\u0026cat=SIRT_1\u0026actp=LIST\u3002",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2022-06697",
  "openTime": "2022-01-24",
  "patchDescription": "Junos OS\u662fJuniper Networks\u786c\u4ef6\u8def\u7531\u5668\u4e2d\u4f7f\u7528\u7684\u57fa\u4e8eFreeBSD\u7684\u64cd\u4f5c\u7cfb\u7edf\u3002\u5b83\u662fJuniper\u7f51\u7edc\u8def\u7531\uff0c\u4ea4\u6362\u548c\u5b89\u5168\u8bbe\u5907\u4e2d\u4f7f\u7528\u7684\u64cd\u4f5c\u7cfb\u7edf\u3002\r\n\r\nJuniper Networks Junos OS SRX300\u7cfb\u5217\u3001SRX500\u7cfb\u5217\u3001SRX1500\u548cSRX5000\u7cfb\u5217\u7684\u6d41\u5b88\u62a4\u7a0b\u5e8f (flowd) \u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u5bf9\u5f02\u5e38\u6570\u636e\u5305\u8fdb\u884c\u6b63\u786e\u5904\u7406\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210flowd/srxpfe\u8fdb\u7a0b\u5d29\u6e83\uff0c\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Juniper Networks Junos OS\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2022-06697\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Juniper Networks Junos OS SRX1500 19.1",
      "Juniper Networks Junos OS SRX1500 18.4",
      "Juniper Networks Junos OS SRX1500 19.2",
      "Juniper Networks Junos OS SRX1500 19.3",
      "Juniper Networks Junos OS SRX1500 20.2",
      "Juniper Networks Junos OS SRX1500 20.3",
      "Juniper Networks Junos OS SRX1500 \u003c 17.4R3-S5",
      "Juniper Networks Junos OS SRX1500 20.4",
      "Juniper Networks Junos OS SRX1500 20.1",
      "Juniper Networks Junos OS SRX1500 19.4",
      "Juniper Networks Junos OS SRX1500 18.3",
      "Juniper Networks Junos OS SRX300 Series 19.1",
      "Juniper Networks Junos OS SRX300 Series 18.4",
      "Juniper Networks Junos OS SRX300 Series 19.2",
      "Juniper Networks Junos OS SRX300 Series 19.3",
      "Juniper Networks Junos OS SRX300 Series 20.2",
      "Juniper Networks Junos OS SRX300 Series 20.3",
      "Juniper Networks Junos OS SRX300 Series \u003c 17.4R3-S5",
      "Juniper Networks Junos OS SRX300 Series 20.4",
      "Juniper Networks Junos OS SRX300 Series 20.1",
      "Juniper Networks Junos OS SRX300 Series 19.4",
      "Juniper Networks Junos OS SRX300 Series 18.3",
      "Juniper Networks Junos OS SRX500 Series 19.1",
      "Juniper Networks Junos OS SRX500 Series 18.4",
      "Juniper Networks Junos OS SRX500 Series 19.2",
      "Juniper Networks Junos OS SRX500 Series 19.3",
      "Juniper Networks Junos OS SRX500 Series 20.2",
      "Juniper Networks Junos OS SRX500 Series 20.3",
      "Juniper Networks Junos OS SRX500 Series \u003c 17.4R3-S5",
      "Juniper Networks Junos OS SRX500 Series 20.4",
      "Juniper Networks Junos OS SRX500 Series 20.1",
      "Juniper Networks Junos OS SRX500 Series 19.4",
      "Juniper Networks Junos OS SRX500 Series 18.3",
      "Juniper Networks Junos OS SRX5000 Series with SPC2 19.1",
      "Juniper Networks Junos OS SRX5000 Series with SPC2 18.4",
      "Juniper Networks Junos OS SRX5000 Series with SPC2 19.2",
      "Juniper Networks Junos OS SRX5000 Series with SPC2 19.3",
      "Juniper Networks Junos OS SRX5000 Series with SPC2 20.2",
      "Juniper Networks Junos OS SRX5000 Series with SPC2 20.3",
      "Juniper Networks Junos OS SRX5000 Series with SPC2 \u003c 17.4R3-S5",
      "Juniper Networks Junos OS SRX5000 Series with SPC2 20.4",
      "Juniper Networks Junos OS SRX5000 Series with SPC2 20.1",
      "Juniper Networks Junos OS SRX5000 Series with SPC2 19.4",
      "Juniper Networks Junos OS SRX5000 Series with SPC2 18.3"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2021-31364",
  "serverity": "\u4e2d",
  "submitTime": "2021-10-21",
  "title": "Juniper Networks Junos OS\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff08CNVD-2022-06697\uff09"
}

CVE-2021-31364 (GCVE-0-2021-31364)

Vulnerability from cvelistv5

Published

2021-10-19 18:16

Modified

2024-09-17 01:56

Severity ?

5.9 (Medium) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-754 - Improper Check for Unusual or Exceptional Conditions
Denial of Service (DoS)
CWE-362 - Race Condition (Concurrent Execution using Shared Resource with Improper Synchronization)

Summary

An Improper Check for Unusual or Exceptional Conditions vulnerability combined with a Race Condition in the flow daemon (flowd) of Juniper Networks Junos OS on SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2 allows an unauthenticated network based attacker sending specific traffic to cause a crash of the flowd/srxpfe process, responsible for traffic forwarding in SRX, which will cause a Denial of Service (DoS). Continued receipt and processing of this specific traffic will create a sustained Denial of Service (DoS) condition. This issue can only occur when specific packets are trying to create the same session and logging for session-close is configured as a policy action. Affected platforms are: SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2. Not affected platforms are: SRX4000 Series, SRX5000 Series with SPC3, and vSRX Series. This issue affects Juniper Networks Junos OS SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2: All versions prior to 17.4R3-S5; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R3-S9; 19.1 versions prior to 19.1R3-S6; 19.2 versions prior to 19.2R1-S7, 19.2R3-S2; 19.3 versions prior to 19.3R2-S6, 19.3R3-S2; 19.4 versions prior to 19.4R1-S4, 19.4R3-S3; 20.1 versions prior to 20.1R2-S2, 20.1R3; 20.2 versions prior to 20.2R3; 20.3 versions prior to 20.3R2-S1, 20.3R3; 20.4 versions prior to 20.4R2.

References

▼	URL	Tags
	https://kb.juniper.net/JSA11226	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Juniper Networks	Junos OS	Version: unspecified < 17.4R3-S5 Version: 18.3 < 18.3R3-S5 Version: 18.4 < 18.4R3-S9 Version: 19.1 < 19.1R3-S6 Version: 19.2 < 19.2R1-S7, 19.2R3-S2 Version: 19.3 < 19.3R2-S6, 19.3R3-S2 Version: 19.4 < 19.4R1-S4, 19.4R3-S3 Version: 20.1 < 20.1R2-S2, 20.1R3 Version: 20.2 < 20.2R3 Version: 20.3 < 20.3R2-S1, 20.3R3 Version: 20.4 < 20.4R2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T22:55:53.702Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kb.juniper.net/JSA11226"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "platforms": [
            "SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2"
          ],
          "product": "Junos OS",
          "vendor": "Juniper Networks",
          "versions": [
            {
              "lessThan": "17.4R3-S5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "18.3R3-S5",
              "status": "affected",
              "version": "18.3",
              "versionType": "custom"
            },
            {
              "lessThan": "18.4R3-S9",
              "status": "affected",
              "version": "18.4",
              "versionType": "custom"
            },
            {
              "lessThan": "19.1R3-S6",
              "status": "affected",
              "version": "19.1",
              "versionType": "custom"
            },
            {
              "lessThan": "19.2R1-S7, 19.2R3-S2",
              "status": "affected",
              "version": "19.2",
              "versionType": "custom"
            },
            {
              "lessThan": "19.3R2-S6, 19.3R3-S2",
              "status": "affected",
              "version": "19.3",
              "versionType": "custom"
            },
            {
              "lessThan": "19.4R1-S4, 19.4R3-S3",
              "status": "affected",
              "version": "19.4",
              "versionType": "custom"
            },
            {
              "lessThan": "20.1R2-S2, 20.1R3",
              "status": "affected",
              "version": "20.1",
              "versionType": "custom"
            },
            {
              "lessThan": "20.2R3",
              "status": "affected",
              "version": "20.2",
              "versionType": "custom"
            },
            {
              "lessThan": "20.3R2-S1, 20.3R3",
              "status": "affected",
              "version": "20.3",
              "versionType": "custom"
            },
            {
              "lessThan": "20.4R2",
              "status": "affected",
              "version": "20.4",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "value": "This issue can only occur when logging for session-close is configured similar to the following example:\n\n  [security policies from-zone untrust to-zone trust policy policy_name then log session-close]"
        }
      ],
      "datePublic": "2021-10-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "An Improper Check for Unusual or Exceptional Conditions vulnerability combined with a Race Condition in the flow daemon (flowd) of Juniper Networks Junos OS on SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2 allows an unauthenticated network based attacker sending specific traffic to cause a crash of the flowd/srxpfe process, responsible for traffic forwarding in SRX, which will cause a Denial of Service (DoS). Continued receipt and processing of this specific traffic will create a sustained Denial of Service (DoS) condition. This issue can only occur when specific packets are trying to create the same session and logging for session-close is configured as a policy action. Affected platforms are: SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2. Not affected platforms are: SRX4000 Series, SRX5000 Series with SPC3, and vSRX Series. This issue affects Juniper Networks Junos OS SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2: All versions prior to 17.4R3-S5; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R3-S9; 19.1 versions prior to 19.1R3-S6; 19.2 versions prior to 19.2R1-S7, 19.2R3-S2; 19.3 versions prior to 19.3R2-S6, 19.3R3-S2; 19.4 versions prior to 19.4R1-S4, 19.4R3-S3; 20.1 versions prior to 20.1R2-S2, 20.1R3; 20.2 versions prior to 20.2R3; 20.3 versions prior to 20.3R2-S1, 20.3R3; 20.4 versions prior to 20.4R2."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-754",
              "description": "CWE-754 Improper Check for Unusual or Exceptional Conditions",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "description": "Denial of Service (DoS)",
              "lang": "en",
              "type": "text"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-362",
              "description": "CWE-362 Race Condition (Concurrent Execution using Shared Resource with Improper Synchronization)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-10-19T18:16:52",
        "orgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
        "shortName": "juniper"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kb.juniper.net/JSA11226"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "The following software releases have been updated to resolve this specific issue: 17.4R3-S5, 18.3R3-S5, 18.4R3-S9, 19.1R3-S6, 19.2R1-S7, 19.2R3-S2, 19.3R2-S6, 19.3R3-S2, 19.4R1-S4, 19.4R3-S3, 20.1R2-S2, 20.1R3, 20.2R3, 20.3R2-S1, 20.3R3, 20.4R2, 21.1R1, and all subsequent releases."
        }
      ],
      "source": {
        "advisory": "JSA11226",
        "defect": [
          "1571354"
        ],
        "discovery": "USER"
      },
      "title": "Junos OS: SRX Series: The flowd process will crash if log session-close is configured and specific traffic is received",
      "workarounds": [
        {
          "lang": "en",
          "value": "Please remove the session-close log action from the policy actions of all policies."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "sirt@juniper.net",
          "DATE_PUBLIC": "2021-10-13T16:00:00.000Z",
          "ID": "CVE-2021-31364",
          "STATE": "PUBLIC",
          "TITLE": "Junos OS: SRX Series: The flowd process will crash if log session-close is configured and specific traffic is received"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Junos OS",
                      "version": {
                        "version_data": [
                          {
                            "platform": "SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2",
                            "version_affected": "\u003c",
                            "version_value": "17.4R3-S5"
                          },
                          {
                            "platform": "SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2",
                            "version_affected": "\u003c",
                            "version_name": "18.3",
                            "version_value": "18.3R3-S5"
                          },
                          {
                            "platform": "SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2",
                            "version_affected": "\u003c",
                            "version_name": "18.4",
                            "version_value": "18.4R3-S9"
                          },
                          {
                            "platform": "SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2",
                            "version_affected": "\u003c",
                            "version_name": "19.1",
                            "version_value": "19.1R3-S6"
                          },
                          {
                            "platform": "SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2",
                            "version_affected": "\u003c",
                            "version_name": "19.2",
                            "version_value": "19.2R1-S7, 19.2R3-S2"
                          },
                          {
                            "platform": "SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2",
                            "version_affected": "\u003c",
                            "version_name": "19.3",
                            "version_value": "19.3R2-S6, 19.3R3-S2"
                          },
                          {
                            "platform": "SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2",
                            "version_affected": "\u003c",
                            "version_name": "19.4",
                            "version_value": "19.4R1-S4, 19.4R3-S3"
                          },
                          {
                            "platform": "SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2",
                            "version_affected": "\u003c",
                            "version_name": "20.1",
                            "version_value": "20.1R2-S2, 20.1R3"
                          },
                          {
                            "platform": "SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2",
                            "version_affected": "\u003c",
                            "version_name": "20.2",
                            "version_value": "20.2R3"
                          },
                          {
                            "platform": "SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2",
                            "version_affected": "\u003c",
                            "version_name": "20.3",
                            "version_value": "20.3R2-S1, 20.3R3"
                          },
                          {
                            "platform": "SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2",
                            "version_affected": "\u003c",
                            "version_name": "20.4",
                            "version_value": "20.4R2"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Juniper Networks"
              }
            ]
          }
        },
        "configuration": [
          {
            "lang": "en",
            "value": "This issue can only occur when logging for session-close is configured similar to the following example:\n\n  [security policies from-zone untrust to-zone trust policy policy_name then log session-close]"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An Improper Check for Unusual or Exceptional Conditions vulnerability combined with a Race Condition in the flow daemon (flowd) of Juniper Networks Junos OS on SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2 allows an unauthenticated network based attacker sending specific traffic to cause a crash of the flowd/srxpfe process, responsible for traffic forwarding in SRX, which will cause a Denial of Service (DoS). Continued receipt and processing of this specific traffic will create a sustained Denial of Service (DoS) condition. This issue can only occur when specific packets are trying to create the same session and logging for session-close is configured as a policy action. Affected platforms are: SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2. Not affected platforms are: SRX4000 Series, SRX5000 Series with SPC3, and vSRX Series. This issue affects Juniper Networks Junos OS SRX300 Series, SRX500 Series, SRX1500, and SRX5000 Series with SPC2: All versions prior to 17.4R3-S5; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R3-S9; 19.1 versions prior to 19.1R3-S6; 19.2 versions prior to 19.2R1-S7, 19.2R3-S2; 19.3 versions prior to 19.3R2-S6, 19.3R3-S2; 19.4 versions prior to 19.4R1-S4, 19.4R3-S3; 20.1 versions prior to 20.1R2-S2, 20.1R3; 20.2 versions prior to 20.2R3; 20.3 versions prior to 20.3R2-S1, 20.3R3; 20.4 versions prior to 20.4R2."
            }
          ]
        },
        "exploit": [
          {
            "lang": "en",
            "value": "Juniper SIRT is not aware of any malicious exploitation of this vulnerability."
          }
        ],
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-754 Improper Check for Unusual or Exceptional Conditions"
                }
              ]
            },
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Denial of Service (DoS)"
                }
              ]
            },
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-362 Race Condition (Concurrent Execution using Shared Resource with Improper Synchronization)"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://kb.juniper.net/JSA11226",
              "refsource": "CONFIRM",
              "url": "https://kb.juniper.net/JSA11226"
            }
          ]
        },
        "solution": [
          {
            "lang": "en",
            "value": "The following software releases have been updated to resolve this specific issue: 17.4R3-S5, 18.3R3-S5, 18.4R3-S9, 19.1R3-S6, 19.2R1-S7, 19.2R3-S2, 19.3R2-S6, 19.3R3-S2, 19.4R1-S4, 19.4R3-S3, 20.1R2-S2, 20.1R3, 20.2R3, 20.3R2-S1, 20.3R3, 20.4R2, 21.1R1, and all subsequent releases."
          }
        ],
        "source": {
          "advisory": "JSA11226",
          "defect": [
            "1571354"
          ],
          "discovery": "USER"
        },
        "work_around": [
          {
            "lang": "en",
            "value": "Please remove the session-close log action from the policy actions of all policies."
          }
        ]
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8cbe9d5a-a066-4c94-8978-4b15efeae968",
    "assignerShortName": "juniper",
    "cveId": "CVE-2021-31364",
    "datePublished": "2021-10-19T18:16:52.279954Z",
    "dateReserved": "2021-04-15T00:00:00",
    "dateUpdated": "2024-09-17T01:56:30.666Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted