CVE-2021-0298: Junos OS Evolved: PTX10003, PTX10008: picd core while executing the "show chassis pic" command under certain conditions
A Race Condition in the 'show chassis pic' command in Juniper Networks Junos OS Evolved may allow an attacker to crash the port interface concentrator daemon (picd) process on the FPC, if the command is executed coincident with other system events outside the attacker's control, leading to a Denial of Service (DoS) condition. Continued execution of the CLI command, under precise conditions, could create a sustained Denial of Service (DoS) condition. This issue affects all Juniper Networks Junos OS Evolved versions prior to 20.1R2-EVO on PTX10003 and PTX10008 platforms. Junos OS is not affected by this vulnerability.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2021-0298?
CVE-2021-0298 is a race condition vulnerability in Juniper Networks Junos OS Evolved.
How does CVE-2021-0298 affect Juniper Junos OS Evolved?
CVE-2021-0298 may allow an attacker to crash the port interface concentrator daemon (picd) process on the FPC in Juniper Junos OS Evolved.
What is the severity of CVE-2021-0298?
CVE-2021-0298 has a severity rating of 4.7 out of 10.
How can I fix CVE-2021-0298?
A fix for CVE-2021-0298 is not currently available, but you can mitigate the risk by restricting access to the vulnerable command.
Where can I find more information about CVE-2021-0298?
You can find more information about CVE-2021-0298 on the Juniper Networks Knowledge Base: https://kb.juniper.net/JSA11212