CVE-2021-0276: Steel-Belted Radius Carrier Edition: Remote code execution vulnerability when EAP Authentication is configured.
A stack-based Buffer Overflow vulnerability in Juniper Networks SBR Carrier with EAP (Extensible Authentication Protocol) authentication configured, allows an attacker sending specific packets causing the radius daemon to crash resulting with a Denial of Service (DoS) or leading to remote code execution (RCE). By continuously sending this specific packets, an attacker can repeatedly crash the radius daemon, causing a sustained Denial of Service (DoS). This issue affects Juniper Networks SBR Carrier: 8.4.1 versions prior to 8.4.1R19; 8.5.0 versions prior to 8.5.0R10; 8.6.0 versions prior to 8.6.0R4.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2021-0276?
CVE-2021-0276 is considered a critical vulnerability that can lead to a Denial of Service (DoS).
Who is affected by CVE-2021-0276?
CVE-2021-0276 affects Juniper Networks SBR Carrier versions 8.4.1, 8.4.1-r13, 8.5.0, 8.5.0-r4, and 8.6.0 with EAP authentication configured.
How do I fix CVE-2021-0276?
To fix CVE-2021-0276, upgrade to the latest version of Juniper Networks SBR Carrier that addresses this vulnerability.
What kind of attack does CVE-2021-0276 facilitate?
CVE-2021-0276 facilitates a stack-based buffer overflow attack that can crash the radius daemon.
What are the consequences of exploiting CVE-2021-0276?
Exploiting CVE-2021-0276 can result in a Denial of Service (DoS), affecting the availability of the radius daemon.